Cyber Security
Sandworm Fake Job Interview Campaign Targets Ukrainian IT Workers
Kimwolf v7 Android Botnet Evades DDoS Mitigation Using HTTP/2 C2
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit
Polish Power Plant Turbine Stopped After Cellular ICS Network Breach
Metabase Zero-Day SQL Injection Exploited Against Framework, Tally
Attackers Reach Managed Endpoints as N-able Ships N-central Hotfix 2
CISA Adds Exploited Kemp LoadMaster Command Injection to KEV
Atlassian Rovo One-Click Flaw Exposes Jira, Confluence Data
CSS Attacks Break Webmail Boundaries to Capture Passwords, Tokens
Head Mare Breaches TrueConf Servers, Trojanizes Client Installers
Belgian Connective eID Flaws Let Websites Forge Signatures
Solidity Pro VS Code Extensions Steal Wallets, API Keys From Devs
OpenAI Pauses Astra Work After Evaluation Flags Cyber Capabilities
AitM Phishing Campaign Steals Microsoft 365 Finance Emails
Swiss Government SharePoint Breach Compromised 200 Accounts
UNC6671 Extortion Group Rebrands After Targeting Hedge Funds
3.8 Million Impacted by Unlimited Technology Systems Breach
4,407 Rockwell PLCs Exposed Online, 22 in Water Cities
Zapscape KVM Flaw Lets Privileged L1 Guest Escape to Host
TONTOU Interrupt Injection Bypasses Spectre v2 Fixes on AMD Zen 2
NatJack Attacks Hijack TCP Sessions and Spoof DNS via NAT
Claude Code and Gemini CLI Flaws Expose CI Workflow Secrets
AI-Assisted HTTP Terminator Finds Apache Traffic Server Zero-Day
TeamPCP Tied to Redis Attacks Dating Back to 2020
CryptoJS Weak RNG Behind $5.7M in Five Wallet App Drains
iCloud Private Relay WebKit Bypasses Expose Users’ Real IPs
ClickFix Campaign Pushes Go-Based macOS Crypto Drainer
China Launches Probe Into Palo Alto Networks Product Security
Attackers Compile khunt Inside Oracle to Reach Windows SYSTEM
Zbtlink Routers Ship With ENDLESSDOORS Backdoor Opening Root Shells
DavaIndia Security Breach Exposed Critical System Control
Cybersecurity
DavaIndia Security Breach Exposed Critical System Control
DavaIndia Pharmacy's systems were compromised, revealing critical security vulnerabilities. Customer data was exposed, and control was accessed by outsiders, reflective of pressing concerns within India's ...
Cloud-Based Password Managers Face New Security Vulnerabilities
Cybersecurity
Cloud-Based Password Managers Face New Security Vulnerabilities
A recent study uncovers vulnerabilities in popular cloud-based password managers like Bitwarden, Dashlane, and LastPass. Researchers warn these weaknesses could lead to integrity issues or ...
South Korean Fine Imposed on Dior, Louis Vuitton, and Tiffany Following Salesforce Breach
Cybersecurity
South Korean Fine Imposed on Dior, Louis Vuitton, and Tiffany Following Salesforce Breach
The South Korean government imposed a $25 million fine on Dior, Louis Vuitton, and Tiffany after data breaches affected their Salesforce systems. The incident compromised ...
Odido Faces Cybersecurity Breach Threatening Customer Data
Cybersecurity
Odido Faces Cybersecurity Breach Threatening Customer Data
Odido, a Dutch telecom provider, reports a cyberattack impacting the data privacy of 6.2 million customers. The attack exposed sensitive customer information, raising alarm over ...
Dutch Police's Data Debacle Arrest Over Accidental File Sharing
Cybersecurity
Dutch Police’s Data Debacle: Arrest Over Accidental File Sharing
A Dutch citizen found himself in legal trouble after law enforcement accidentally sent him sensitive files. Rather than returning them, the individual chose to hold ...
CISA Faces Challenges With Limited Resources Amid DHS Shutdown
Cybersecurity
CISA Faces Challenges With Limited Resources Amid DHS Shutdown
Operating with just 38% of its staff, CISA confronts operational challenges due to the DHS shutdown. The agency's staffing has dropped significantly, impacting key cybersecurity ...
AMOS Infostealer Exploits Popular AI Platforms to Target macOS
Cybersecurity
AMOS Infostealer Exploits Popular AI Platforms to Target macOS
AMOS infostealer deceptively uses AI-driven platforms to infiltrate macOS systems, gaining unauthorized access to user credentials and contributing to the wider cybercrime ecosystem.
Eurail B.V. Acknowledges Data Breach, Stolen Information Sold on Dark Web
Cybersecurity
Eurail B.V. Acknowledges Data Breach, Stolen Information Sold on Dark Web
Eurail B.V., a major European railway access provider, reported a breach with customer data now surfacing on the dark web. The incident, which occurred earlier ...
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Application Security
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Cybersecurity professionals must consider the impact of information-stealing malware targeting OpenClaw's AI framework. The malware reportedly focusses on files containing sensitive data such as API ...
ShinyHunters Strike Again Canada Goose Addresses Breach Concerns
Cybersecurity
ShinyHunters Strike Again: Canada Goose Addresses Breach Concerns
Fashion brand Canada Goose is tackling claims of a 600,000-record breach linked to hacker group ShinyHunters. The company states it's an old incident with no ...
Android 17 Beta Enhances Security and Privacy for Users
Cybersecurity
Android 17 Beta Enhances Security and Privacy for Users
Android 17 introduces stricter app permission settings and encryption upgrades, reflecting Google’s commitment to user privacy and data protection.
ApolloMD Breach Exposes Sensitive Patient Details
Cybersecurity
ApolloMD Breach Exposes Sensitive Patient Details
The recent data breach at ApolloMD resulted in the exposure of personal and health information of 626,000 patients of its affiliated physicians and practices.
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Cybersecurity
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Researchers reveal how cybercriminals connect supply chain attacks, identity abuse, and ransomware into a self-reinforcing ecosystem, posing severe security threats.
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Cybersecurity
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Apple has identified and patched a zero-day vulnerability present in all iOS versions since 1.0. This serious flaw has been reportedly exploited in "extremely sophisticated ...
Infostealer Malware Targets macOS Users Through Deceptive ClickFix Campaigns
Cybersecurity
Infostealer Malware Targets macOS Users Through Deceptive ClickFix Campaigns
Cybercriminals employ sophisticated techniques by leveraging Claude artifacts and Google Ads in ClickFix campaigns, aiming at macOS users. They exploit specific search queries to deliver ...
CISA Mandates Immediate Patch for Critical Vulnerability in Microsoft Configuration Manager
Cybersecurity
CISA Mandates Immediate Patch for Critical Vulnerability in Microsoft Configuration Manager
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to address a critical Microsoft Configuration Manager vulnerability, reminding them of ...
Microsoft Configuration Manager SQL Injection Alert
Application Security
Microsoft Configuration Manager SQL Injection Alert
A SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is currently exploited, posing a significant risk to unpatched systems, including businesses and ...
Attackers Exploit Critical Vulnerability in BeyondTrust Remote Support
CVE Vulnerability Alerts
Attackers Exploit Critical Vulnerability in BeyondTrust Remote Support
BeyondTrust Remote Support's CVE-2026-1731, a critical vulnerability, witnessed exploitation attempts within 24 hours of the public release of a Proof of Concept (PoC), highlighting attackers' ...
Major Breach at Dutch Mobile Network Operator Exposes Sensitive Customer Data
Cybersecurity
Major Breach at Dutch Mobile Network Operator Exposes Sensitive Customer Data
A significant breach at a leading Dutch mobile network operator exposed sensitive customer information, affecting around 6.2 million individuals. Names, addresses, and bank details were ...
Integration of Criminal IP with IBM QRadar Enhancing IP Threat Intelligence
Application Security
Integration of Criminal IP with IBM QRadar: Enhancing IP Threat Intelligence
Security operations centers (SOC) can enhance their threat detection capabilities with the integration of IP-based intelligence from Criminal IP into IBM's QRadar. This integration offers ...
Application Security
SAP Patches Zero-Day in Commerce Cloud Data Hub Adapter
Cybersecurity
Gunra Ransomware Exploits Fortinet and Schneider Flaws for MFA Bypass
Application Security
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Odido Faces Cybersecurity Breach Threatening Customer Data
Odido, a Dutch telecom provider, reports a cyberattack impacting the data privacy of 6.2 million customers. The attack exposed sensitive customer information, raising alarm over ...
Dutch Police’s Data Debacle: Arrest Over Accidental File Sharing
A Dutch citizen found himself in legal trouble after law enforcement accidentally sent him sensitive files. Rather than returning them, the individual chose to hold ...
CISA Faces Challenges With Limited Resources Amid DHS Shutdown
Operating with just 38% of its staff, CISA confronts operational challenges due to the DHS shutdown. The agency's staffing has dropped significantly, impacting key cybersecurity ...
AMOS Infostealer Exploits Popular AI Platforms to Target macOS
AMOS infostealer deceptively uses AI-driven platforms to infiltrate macOS systems, gaining unauthorized access to user credentials and contributing to the wider cybercrime ecosystem.
Eurail B.V. Acknowledges Data Breach, Stolen Information Sold on Dark Web
Eurail B.V., a major European railway access provider, reported a breach with customer data now surfacing on the dark web. The incident, which occurred earlier ...
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Cybersecurity professionals must consider the impact of information-stealing malware targeting OpenClaw's AI framework. The malware reportedly focusses on files containing sensitive data such as API ...
ShinyHunters Strike Again: Canada Goose Addresses Breach Concerns
Fashion brand Canada Goose is tackling claims of a 600,000-record breach linked to hacker group ShinyHunters. The company states it's an old incident with no ...
Android 17 Beta Enhances Security and Privacy for Users
Android 17 introduces stricter app permission settings and encryption upgrades, reflecting Google’s commitment to user privacy and data protection.
ApolloMD Breach Exposes Sensitive Patient Details
The recent data breach at ApolloMD resulted in the exposure of personal and health information of 626,000 patients of its affiliated physicians and practices.
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Researchers reveal how cybercriminals connect supply chain attacks, identity abuse, and ransomware into a self-reinforcing ecosystem, posing severe security threats.
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Apple has identified and patched a zero-day vulnerability present in all iOS versions since 1.0. This serious flaw has been reportedly exploited in "extremely sophisticated ...
Infostealer Malware Targets macOS Users Through Deceptive ClickFix Campaigns
Cybercriminals employ sophisticated techniques by leveraging Claude artifacts and Google Ads in ClickFix campaigns, aiming at macOS users. They exploit specific search queries to deliver ...
CISA Mandates Immediate Patch for Critical Vulnerability in Microsoft Configuration Manager
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to address a critical Microsoft Configuration Manager vulnerability, reminding them of ...
Microsoft Configuration Manager SQL Injection Alert
A SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is currently exploited, posing a significant risk to unpatched systems, including businesses and ...
Attackers Exploit Critical Vulnerability in BeyondTrust Remote Support
BeyondTrust Remote Support's CVE-2026-1731, a critical vulnerability, witnessed exploitation attempts within 24 hours of the public release of a Proof of Concept (PoC), highlighting attackers' ...
Major Breach at Dutch Mobile Network Operator Exposes Sensitive Customer Data
A significant breach at a leading Dutch mobile network operator exposed sensitive customer information, affecting around 6.2 million individuals. Names, addresses, and bank details were ...
Integration of Criminal IP with IBM QRadar: Enhancing IP Threat Intelligence
Security operations centers (SOC) can enhance their threat detection capabilities with the integration of IP-based intelligence from Criminal IP into IBM's QRadar. This integration offers ...
CISA Catalog Includes BeyondTrust Flaw Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a vulnerability in BeyondTrust RS and PRA, identified as CVE-2026-1731, to its Known Exploited ...
CANFAIL Malware Unveiled Amidst Russian Cyber Influence Allegations
A previously undocumented threat actor, possibly linked to Russian intelligence services, has been identified targeting Ukrainian defense, government, and energy sectors using CANFAIL malware, raising ...
Social Engineering Attack Compromises Fintech Company Figure’s Security
Fintech firm Figure confirmed a data breach following a social engineering attack that deceived an employee. The incident enabled hackers to gain access and steal ...