Cyber Security
Four Nation-State Groups Deploy BlueMoon Kit Within 12 Days
NSA, CISA, FBI Accuse Six Chinese AI Firms of Model Distillation
UNC3569 Exploits Sogou Input Method to Deploy GRAYRABBIT Backdoor
Attackers Use BYOD Weaknesses to Access M365 via Graph API
Surfshark VPN Breach Exposes Internal Testing and Proxy Servers
Citrix NetScaler CVE-2026-19490 Exploited Since September 3
CISA Sets September 12 Deadline for Cisco, Citrix, Fortinet Flaws
Infostealer Logs Expose Replayable AI Tokens That Bypass MFA
Google Patches Seventh Chrome Zero-Day of 2026, CVE-2026-87491
PoisonedRefresh Rootkit Injects PHP Web Shells into F5 BIG-IP Memory
September Windows Server Updates Break Remote Desktop Services
Microsoft Excel KB5002914 Update Breaks Copy and Paste Functions
cPanel Critical RCE Enables Full Server Takeover via Mail Account
SAP Patches CVSS 10.0 Kernel RCE in Extended Passport Processing
Microsoft Ships Record 974 Security Patches in September Batch
ShinyHunters Claims Breach of Florida DMV DAVID Database
Grindr Settles UK HIV Data Sharing Lawsuit for £26 Million
Liquid Network Attackers Return 3,400 Bitcoin, Keep $47 Million
OpenAI Artifactory Flaw Enabled Cross-Account Data Theft
Boston Scientific Cyberattack Damages Q3 and Full-Year Earnings
Ohio Man Sentenced to 15 Years for AI-Generated Sextortion
LG Accused of Privacy Violations Over Smart TV Data Collection
Microsoft Adds Age-Awareness APIs to Windows 11
EU Cyber Resilience Act 24-Hour Vulnerability Deadline Arrives
UK Lawmakers Question Cyber Bill’s Executive Liability Exemption
Welsh Regulator Exposes 2,000 Staff Diversity Records via FoI Error
OpenAI Agent Swarm Logs Reveal Emergent Deception and Coordination
PEEP Toolkit Turns Chrome and Edge Into Post-Exploitation Backdoors
Magento StyleSmuggler Zero-Day Deploys Linux Backdoors on Stores
Mathspace Breach Exposes Data of Over 1 Million Students and Staff
Spanish Hacker Arrested for Booking Luxury Hotel Rooms for One Cent
Cybersecurity
Spanish Hacker Arrested for Booking Luxury Hotel Rooms for One Cent
Spanish police apprehended a hacker for booking luxury rooms for €0.01 each through an exploited payment system.
Anthropic Introduces Claude Code Security for Vulnerability Detection
Application Security
Anthropic Introduces Claude Code Security for Vulnerability Detection
Anthropic's new feature scans code for vulnerabilities, suggesting targeted patches.
PayPal Data Breach Exposed User Data for Six Months Due to Software Bug
Cybersecurity
PayPal Data Breach Exposed User Data for Six Months Due to Software Bug
A six-month data breach at PayPal exposed sensitive user information due to a software flaw in its Working Capital app.
Critical Grandstream Phone Vulnerability Allows for Eavesdropping Opportunities
CVE Vulnerability Alerts
Critical Grandstream Phone Vulnerability Allows for Eavesdropping Opportunities
A critical flaw in Grandstream phones enables remote code execution without authentication.
Ukrainian National Sentenced in US Federal Court for Aiding North Korean IT Fraud
Cybersecurity
Ukrainian National Sentenced in US Federal Court for Aiding North Korean IT Fraud
Ukrainian Oleksandr Didenko sentenced to 5 years for aiding North Korean IT workers in employment fraud.
Deutsche Bahn Hit by a Large-Scale DDoS Attack Disrupting Rail Services
Cybersecurity
Deutsche Bahn Hit by a Large-Scale DDoS Attack Disrupting Rail Services
Deutsche Bahn's services were disrupted by a DDoS attack, leading to significant travel complications across Germany's national rail network.
Snyk CEO Steps Down to Make Way for AI-Focused Leadership
Cybersecurity
Snyk CEO Steps Down to Make Way for AI-Focused Leadership
Snyk's CEO announces departure to align leadership with AI advancements in code review.
Advantest Cyberattack Sparks Fears of Employee and Client Data Exposure
Cybersecurity
Advantest Cyberattack Sparks Fears of Employee and Client Data Exposure
Advantest faces a ransomware attack, investigating potential data breach impact.
PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence
Cybersecurity
PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence
Discover how PromptSpy malware uses Gemini AI at runtime to analyze on-screen elements and maintain persistence on Android devices even after a reboot...
Ukrainian National Gets Five Years for Helping North Korean IT Workers Infiltrate U.S. Companies
News
Ukrainian National Gets Five Years for Helping North Korean IT Workers Infiltrate U.S. Companies
A Ukrainian hacker aided North Korea in infiltrating U.S. companies by providing stolen identities, resulting in a five-year prison sentence.
Former Google Engineers Indicted for Alleged Trade Secret Theft Linked to Iran
Cybersecurity
Former Google Engineers Indicted for Alleged Trade Secret Theft Linked to Iran
Former Google engineers indicted for allegedly stealing trade secrets and transferring sensitive data to unauthorized locations, including Iran.
Operation Red Card 2.0 Dismantles Online Scam Networks Across Africa
Cybersecurity
Operation Red Card 2.0 Dismantles Online Scam Networks Across Africa
Operation Red Card 2.0 led to 651 arrests and disrupted online scam networks in Africa.
MIT CSAIL's 2025 AI Agent Index Puts System Transparency Under the Microscope
Cybersecurity
MIT CSAIL’s 2025 AI Agent Index Puts System Transparency Under the Microscope
Academic researchers spotlighted the growing role and impact of AI agents across industries, raising critical questions about transparency, accountabi...
FBI Issues Warning on Escalating ATM Jackpotting Losses
Cybersecurity
FBI Issues Warning on Escalating ATM Jackpotting Losses
The FBI alerts the public on ATM jackpotting, reporting $20M losses and 1,900 incidents since 2020 in the U.S.
Microsoft Addresses High-Severity Flaw in Windows Admin Center
Cybersecurity
Microsoft Addresses High-Severity Flaw in Windows Admin Center
Windows Admin Center's security flaw, CVE-2026-26119, allowed privilege escalation vulnerabilities.
Android Malware Uses Generative AI to Boost Its Post-Installation Capabilities
Cybersecurity
Android Malware Uses Generative AI to Boost Its Post-Installation Capabilities
A newly identified Android malware strain that uses generative AI has raised concerns among cybersecurity researchers, though debate continues over wh...
OpenClaw Security Issues Persist as SecureClaw Open Source Tool Debuts
Cybersecurity
OpenClaw Security Issues Persist as SecureClaw Open Source Tool Debuts
OpenClaw wrestles with security gaps and misconfigurations, despite swift patches and OpenAI-backed foundation support.
African Operation Leads to 651 Fraud Arrests and $4.3M Recovery
Cybersecurity
African Operation Leads to 651 Fraud Arrests and $4.3M Recovery
Authorities in Africa arrested 651 suspects and reclaimed $4.3 million in joint fraud mitigation efforts.
Human Error Remains One of the Biggest Threats to IT Security
Blog
Human Error Remains One of the Biggest Threats to IT Security
Human errors remain a significant security risk even in systems with strong protocols.
Newly Identified Massiv Android Trojan Exploits IPTV App Disguise in Southern Europe
Application Security
Newly Identified Massiv Android Trojan Exploits IPTV App Disguise in Southern Europe
Massiv Android banking trojan, disguised as an IPTV app, targets users in southern Europe.
Cybersecurity
Russian Actor Uses AI to Exploit PaperCut, Hits 440+ Organizations
Cybersecurity
ShinyHunters Claims Breach of Florida DMV DAVID Database
Application Security
GoldFactory and Mantax Otax Target Indonesian Android Bank Users
CVE Vulnerability Alerts
Aurora Ransomware Operators Use Cursor AI to Execute Network Attacks

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Cybersecurity
Russian Actor Uses AI to Exploit PaperCut, Hits 440+ Organizations
Cybersecurity
LG Accused of Privacy Violations Over Smart TV Data Collection
Application Security
OpenAI Agents Made 18,000 Unauthorized Edits to German Wiki
Application Security
Judge Rules Pentagon Actions Against Anthropic Unlawful
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Critical Grandstream Phone Vulnerability Allows for Eavesdropping Opportunities
A critical flaw in Grandstream phones enables remote code execution without authentication.
Ukrainian National Sentenced in US Federal Court for Aiding North Korean IT Fraud
Ukrainian Oleksandr Didenko sentenced to 5 years for aiding North Korean IT workers in employment fraud.
Deutsche Bahn Hit by a Large-Scale DDoS Attack Disrupting Rail Services
Deutsche Bahn's services were disrupted by a DDoS attack, leading to significant travel complications across Germany's national rail network.
Snyk CEO Steps Down to Make Way for AI-Focused Leadership
Snyk's CEO announces departure to align leadership with AI advancements in code review.
Advantest Cyberattack Sparks Fears of Employee and Client Data Exposure
Advantest faces a ransomware attack, investigating potential data breach impact.
PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence
Discover how PromptSpy malware uses Gemini AI at runtime to analyze on-screen elements and maintain persistence on Android devices even after a reboot...
Ukrainian National Gets Five Years for Helping North Korean IT Workers Infiltrate U.S. Companies
A Ukrainian hacker aided North Korea in infiltrating U.S. companies by providing stolen identities, resulting in a five-year prison sentence.
Former Google Engineers Indicted for Alleged Trade Secret Theft Linked to Iran
Former Google engineers indicted for allegedly stealing trade secrets and transferring sensitive data to unauthorized locations, including Iran.
Operation Red Card 2.0 Dismantles Online Scam Networks Across Africa
Operation Red Card 2.0 led to 651 arrests and disrupted online scam networks in Africa.
MIT CSAIL’s 2025 AI Agent Index Puts System Transparency Under the Microscope
Academic researchers spotlighted the growing role and impact of AI agents across industries, raising critical questions about transparency, accountabi...
FBI Issues Warning on Escalating ATM Jackpotting Losses
The FBI alerts the public on ATM jackpotting, reporting $20M losses and 1,900 incidents since 2020 in the U.S.
Microsoft Addresses High-Severity Flaw in Windows Admin Center
Windows Admin Center's security flaw, CVE-2026-26119, allowed privilege escalation vulnerabilities.
Android Malware Uses Generative AI to Boost Its Post-Installation Capabilities
A newly identified Android malware strain that uses generative AI has raised concerns among cybersecurity researchers, though debate continues over wh...
OpenClaw Security Issues Persist as SecureClaw Open Source Tool Debuts
OpenClaw wrestles with security gaps and misconfigurations, despite swift patches and OpenAI-backed foundation support.
African Operation Leads to 651 Fraud Arrests and $4.3M Recovery
Authorities in Africa arrested 651 suspects and reclaimed $4.3 million in joint fraud mitigation efforts.
Human Error Remains One of the Biggest Threats to IT Security
Human errors remain a significant security risk even in systems with strong protocols.
Newly Identified Massiv Android Trojan Exploits IPTV App Disguise in Southern Europe
Massiv Android banking trojan, disguised as an IPTV app, targets users in southern Europe.
Critical Vulnerability in Honeywell CCTVs Exposes Security Risks
CISA alerts to a critical flaw in Honeywell CCTVs enabling unauthorized access with potential for account hijacking and system compromise.
The UK Classifies Non-Consensual Intimate Images Alongside Serious Offenses
UK demands quick removal of non-consensual images, equating them with terror content.
Venice Security Raises $33M to Strengthen Its Privileged Access Management Platform
Venice Security, formerly known as Valkyrie, has secured $33 million in funding to enhance its Privileged Access Management solutions.