Cyber Security
Cybersecurity
Stolen Credentials Are Turning Authentication Systems Into Attack Surfaces
Discover how wearable biometric authentication is reshaping identity verification by focusing on the user, rather than the session.
Cybersecurity
Microsoft’s Communication Breakdown Leaves Developers Locked Out Without Warning
Microsoft's handling of developer account lockouts reveals serious communication gaps that are disrupting open source workflows.
Application Security
Google Enhances Chrome Security with Device Bound Session Credentials
Google unveils Device Bound Session Credentials in Chrome 146 for Windows to thwart information-stealing malware.
Application Security
New Bypass Technique Bypasses Apple’s AI Safeguards
Researchers bypass Apple Intelligence guardrails using Neural Exect and Unicode manipulation.
Cybersecurity
ChipSoft’s Website Goes Offline After Ransomware Attack While Email Stays Operational
ChipSoft's website is down following a ransomware attack, though email communication remains functional.
Cybersecurity
Telehealth Company Hims & Hers Health Discloses Data Breach Involving Support Tickets
Hims & Hers Health reports a data breach linked to a third-party customer service platform, impacting support tickets.
Cybersecurity
Data Theft Incidents Escalate as SaaS Integration Provider Suffers Major Breach
Authentication tokens were stolen during a breach, impacting numerous companies.
Cybersecurity
CrystalX RAT Emerges as a Sophisticated Malware-as-a-Service Threat
Discover how CrystalX RAT combines surveillance, data theft, and remote access capabilities in a sophisticated Malware-as-a-Service operation uncovere...
News
Chinese Threat Actors Exploit TrueConf Zero-Day to Breach Asian Governments
Chinese threat actors used TrueConf zero-day vulnerability to breach Asian government networks for reconnaissance and payload execution.
CVE Vulnerability Alerts
Docker Engine Vulnerability CVE-2026-34040 Allows Attackers to Bypass Authorization
A new Docker Engine vulnerability allows attackers to bypass authorization plug-ins due to an incomplete fix.
Cybersecurity
Iranian Hackers Target U.S. Critical Infrastructure via Rockwell PLCs
Iranian hackers exploit U.S. critical infrastructure networks by targeting internet-exposed Rockwell/Allen-Bradley PLCs.
Cybersecurity
Russia-linked APT28 Exploits Routers in Wide-ranging Espionage Campaign
Russia-linked APT28 is harnessing vulnerable routers in a massive espionage campaign.
Cybersecurity
Anthropic’s Claude Mythos Could Protect Critical Software — or Power the Next Wave of Cyberattacks
Anthropic's new AI model, Claude Mythos, could protect critical software or potentially enhance cyberattacks.
Cybersecurity
Trent AI Emerges From Stealth With $13 Million in Funding
Startup Trent AI unveils a comprehensive security framework to safeguard artificial intelligence (AI) agents, backed by significant funding.
Cybersecurity
Android Security Update Patches Severe StrongBox and Framework Vulnerabilities
Google's recent Android update fixes critical vulnerabilities in the operating system, including a severe StrongBox flaw and a DoS vulnerability in th...
Cybersecurity
Automated Pentesting Tools Fall Short Past the “PoC Cliff”
Exploring the plateau in automated pentesting tools and the PoC cliff effect on security validation.
Cybersecurity
Critical Flowise Vulnerability Puts Systems at Risk of Code Execution
A critical vulnerability in Flowise lets attackers execute arbitrary code using improperly validated JavaScript.
Application Security
Exchange Online Mailbox Access Issues Impact Outlook Users
Exchange Online access issues have affected Outlook mobile and macOS users. Microsoft is actively working on a resolution.
Application Security
Shadow AI and Zero-Click Exploits Are Reshaping Mobile Security Threats
The expansion of Shadow AI within daily apps and outdated mobile devices increases exposure to unseen mobile vulnerabilities.
Cybersecurity
Third-Party Vendors Are the New Breach Vector Organizations Should Fear
Organizations face growing cybersecurity risks from trusted vendors, SaaS tools, and subcontractors that bypass traditional security measures.
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
New Bypass Technique Bypasses Apple’s AI Safeguards
Researchers bypass Apple Intelligence guardrails using Neural Exect and Unicode manipulation.
ChipSoft’s Website Goes Offline After Ransomware Attack While Email Stays Operational
ChipSoft's website is down following a ransomware attack, though email communication remains functional.
Telehealth Company Hims & Hers Health Discloses Data Breach Involving Support Tickets
Hims & Hers Health reports a data breach linked to a third-party customer service platform, impacting support tickets.
Data Theft Incidents Escalate as SaaS Integration Provider Suffers Major Breach
Authentication tokens were stolen during a breach, impacting numerous companies.
CrystalX RAT Emerges as a Sophisticated Malware-as-a-Service Threat
Discover how CrystalX RAT combines surveillance, data theft, and remote access capabilities in a sophisticated Malware-as-a-Service operation uncovere...
Chinese Threat Actors Exploit TrueConf Zero-Day to Breach Asian Governments
Chinese threat actors used TrueConf zero-day vulnerability to breach Asian government networks for reconnaissance and payload execution.
Docker Engine Vulnerability CVE-2026-34040 Allows Attackers to Bypass Authorization
A new Docker Engine vulnerability allows attackers to bypass authorization plug-ins due to an incomplete fix.
Iranian Hackers Target U.S. Critical Infrastructure via Rockwell PLCs
Iranian hackers exploit U.S. critical infrastructure networks by targeting internet-exposed Rockwell/Allen-Bradley PLCs.
Russia-linked APT28 Exploits Routers in Wide-ranging Espionage Campaign
Russia-linked APT28 is harnessing vulnerable routers in a massive espionage campaign.
Anthropic’s Claude Mythos Could Protect Critical Software — or Power the Next Wave of Cyberattacks
Anthropic's new AI model, Claude Mythos, could protect critical software or potentially enhance cyberattacks.
Trent AI Emerges From Stealth With $13 Million in Funding
Startup Trent AI unveils a comprehensive security framework to safeguard artificial intelligence (AI) agents, backed by significant funding.
Android Security Update Patches Severe StrongBox and Framework Vulnerabilities
Google's recent Android update fixes critical vulnerabilities in the operating system, including a severe StrongBox flaw and a DoS vulnerability in th...
Automated Pentesting Tools Fall Short Past the “PoC Cliff”
Exploring the plateau in automated pentesting tools and the PoC cliff effect on security validation.
Critical Flowise Vulnerability Puts Systems at Risk of Code Execution
A critical vulnerability in Flowise lets attackers execute arbitrary code using improperly validated JavaScript.
Exchange Online Mailbox Access Issues Impact Outlook Users
Exchange Online access issues have affected Outlook mobile and macOS users. Microsoft is actively working on a resolution.
Shadow AI and Zero-Click Exploits Are Reshaping Mobile Security Threats
The expansion of Shadow AI within daily apps and outdated mobile devices increases exposure to unseen mobile vulnerabilities.
Third-Party Vendors Are the New Breach Vector Organizations Should Fear
Organizations face growing cybersecurity risks from trusted vendors, SaaS tools, and subcontractors that bypass traditional security measures.
Critical ShareFile Flaws Open the Door to Unauthenticated RCE
Analysis reveals critical ShareFile flaws allowing server access and arbitrary file uploads.
Strapi CMS Plugins Face Exploitation by Malicious npm Packages
Researchers found 36 harmful npm packages posing as Strapi CMS plugins to exploit Redis, PostgreSQL, and execute further cyber attacks.
Bogus Traffic Violation Text Scam Targeting Americans
Fraudulent "Notice of Default" text scams impersonate U.S. state courts, leading victims to phishing sites.