Cyber Security
UNM Health System Diverts Ambulances After Cybersecurity Incident
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Sansec: 953 Online Stores Infected in Magento Loader Campaign
Seoul Police Identify 7 Suspects in ARTEX AI-Assisted Hacking Spree
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
Dutch Police Arrest 2 Over AI-Voiced Bank Fraud Using NFC App
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
Capcom ID Breach Exposes 11.77 Million Email Addresses
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
Railway Says Intruder May Have Decrypted Customer Secrets
INTERPOL Operation Serengeti III Nets 1,462 Arrests in Africa
Node.js Security Releases Fix Brotli Out-of-Bounds Write Flaw
Onamae Desktop Cloud Hacked; Malware on Up to 26,739 Servers
Columbia, South Carolina Takes Systems Offline After Cyberattack
FoxIO QPACK Flaws Crash HTTP/3 Servers via 4,000x Amplification
LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
Dutch Ministry of Finance Hit by Cyberattack as Data Breach Investigation Continues
Cybersecurity
Dutch Ministry of Finance Hit by Cyberattack as Data Breach Investigation Continues
A cyberattack breached some systems of the Dutch Ministry of Finance, uncovering a data breach affecting certain employees.
Open Source Projects Face a Rising Tide of Malware Infections
Cybersecurity
Open Source Projects Face a Rising Tide of Malware Infections
Growing malware infection due to open source project vulnerabilities.
Major Announcements from RSAC 2026 What Day 1 Revealed
Cybersecurity
Major Announcements from RSAC 2026: What Day 1 Revealed
A detailed rundown of key cybersecurity innovations revealed on the first day of RSAC 2026.
QualDerm Partners Data Breach Hits Over 3.1 Million People
Cybersecurity
QualDerm Partners Data Breach Hits Over 3.1 Million People
December 2025 breach at QualDerm Partners exposes personal and health data of over 3.1 million individuals.
Cryptocurrency Threats via Phishing Campaign Targeting French-Speaking Corporations
News
Cryptocurrency Threats via Phishing Campaign Targeting French-Speaking Corporations
French-speaking companies face phishing scams hiding crypto miners and data thieves in fake resumes.
Microsoft Fixes Gmail and Yahoo Synchronization Issues for Classic Outlook Users
Cybersecurity
Microsoft Fixes Gmail and Yahoo Synchronization Issues for Classic Outlook Users
Microsoft addresses issues affecting Gmail and Yahoo email synchronization for classic Outlook users.
Gartner Publishes Its First Market Guide for Guardian Agents
Cybersecurity
Gartner Publishes Its First Market Guide for Guardian Agents
Gartner's first Market Guide for Guardian Agents, released on February 25, 2026, outlines expectations for this nascent field.
TeamPCP Strikes Again, This Time Targeting the Python Package litellm
News
TeamPCP Strikes Again, This Time Targeting the Python Package litellm
Malicious versions of Python package litellm contain a credential harvester and persistent backdoor planted by the threat actor TeamPCP.
Software Supply Chains Are the New Frontline for Cyber Risk
Cybersecurity
Software Supply Chains Are the New Frontline for Cyber Risk
Explore how perimeter security isn't enough to protect against threats in software supply chains.
Sam Altman's Eyeball-Scanning Orb Takes on a New Role in AI Integration
Cybersecurity
Sam Altman’s Eyeball-Scanning Orb Takes on a New Role in AI Integration
Sam Altman integrates agentic AI with his eyeball-scanning orb, enhancing its applications in cryptography and bot identification.
Companies House Confirmed a Vulnerability That Put Millions of Business Records at Risk
Cybersecurity
Companies House Confirmed a Vulnerability That Put Millions of Business Records at Risk
UK Companies House vulnerability exposed millions of firm details, potentially allowing unauthorized access and record alteration.
New Threat Vector Exploits DNS Queries for Data Exfiltration in AI Environments
Cybersecurity
New Threat Vector Exploits DNS Queries for Data Exfiltration in AI Environments
Researchers expose a method leveraging DNS queries for data exfiltration from AI code execution environments.
EU Council Sanctions Three Entities and Two Individuals for Cyberattacks on Critical Infrastructure
Cybersecurity
EU Council Sanctions Three Entities and Two Individuals for Cyberattacks on Critical Infrastructure
The EU Council has sanctioned three entities and two individuals involved in cyberattacks on critical infrastructure within the region.
Identity-Based Access Control for AI Agents Is Now a Security Necessity
Cybersecurity
Identity-Based Access Control for AI Agents Is Now a Security Necessity
How identity-based access control for AI agents helps safeguard against misuse and data exposure.
Hidden Commands in Font Rendering Are Being Used to Manipulate AI Assistants Through Webpages
Application Security
Hidden Commands in Font Rendering Are Being Used to Manipulate AI Assistants Through Webpages
A font-rendering vulnerability manipulates AI assistants by concealing malicious web commands in innocent HTML.
Surf AI Raises $57 Million for Its Agentic Security Operations Platform
Cybersecurity
Surf AI Raises $57 Million for Its Agentic Security Operations Platform
Surf AI secures $57M in funding for its security operations platform.
LeakNet Ransomware Adopts ClickFix to Trick Users Into Compromising Themselves
News
LeakNet Ransomware Adopts ClickFix to Trick Users Into Compromising Themselves
LeakNet ransomware integrates ClickFix for access, shifting from traditional entry strategies.
RondoDox Botnet Ramps Up Attacks, Hitting 15,000 Daily Exploitation Attempts
Cybersecurity
RondoDox Botnet Ramps Up Attacks, Hitting 15,000 Daily Exploitation Attempts
The RondoDox botnet targets 174 vulnerabilities, increasing activity to 15,000 exploitation attempts daily.
Tech and Retail Giants Sign Global Pact to Combat Online Scams and Fraud
Cybersecurity
Tech and Retail Giants Sign Global Pact to Combat Online Scams and Fraud
Major tech and retail organizations have banded together to address online scams and fraud, establishing a first-of-its-kind industry accord designed ...
Tech Giants Invest $12.5 Million in Open Source Software Security
Cybersecurity
Tech Giants Invest $12.5 Million in Open Source Software Security
Major tech firms contribute $12.5 million to enhance open source software security.
Cybersecurity
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Cybersecurity
Columbia, South Carolina Takes Systems Offline After Cyberattack
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
QualDerm Partners Data Breach Hits Over 3.1 Million People
December 2025 breach at QualDerm Partners exposes personal and health data of over 3.1 million individuals.
Cryptocurrency Threats via Phishing Campaign Targeting French-Speaking Corporations
French-speaking companies face phishing scams hiding crypto miners and data thieves in fake resumes.
Microsoft Fixes Gmail and Yahoo Synchronization Issues for Classic Outlook Users
Microsoft addresses issues affecting Gmail and Yahoo email synchronization for classic Outlook users.
Gartner Publishes Its First Market Guide for Guardian Agents
Gartner's first Market Guide for Guardian Agents, released on February 25, 2026, outlines expectations for this nascent field.
TeamPCP Strikes Again, This Time Targeting the Python Package litellm
Malicious versions of Python package litellm contain a credential harvester and persistent backdoor planted by the threat actor TeamPCP.
Software Supply Chains Are the New Frontline for Cyber Risk
Explore how perimeter security isn't enough to protect against threats in software supply chains.
Sam Altman’s Eyeball-Scanning Orb Takes on a New Role in AI Integration
Sam Altman integrates agentic AI with his eyeball-scanning orb, enhancing its applications in cryptography and bot identification.
Companies House Confirmed a Vulnerability That Put Millions of Business Records at Risk
UK Companies House vulnerability exposed millions of firm details, potentially allowing unauthorized access and record alteration.
New Threat Vector Exploits DNS Queries for Data Exfiltration in AI Environments
Researchers expose a method leveraging DNS queries for data exfiltration from AI code execution environments.
EU Council Sanctions Three Entities and Two Individuals for Cyberattacks on Critical Infrastructure
The EU Council has sanctioned three entities and two individuals involved in cyberattacks on critical infrastructure within the region.
Identity-Based Access Control for AI Agents Is Now a Security Necessity
How identity-based access control for AI agents helps safeguard against misuse and data exposure.
Hidden Commands in Font Rendering Are Being Used to Manipulate AI Assistants Through Webpages
A font-rendering vulnerability manipulates AI assistants by concealing malicious web commands in innocent HTML.
Surf AI Raises $57 Million for Its Agentic Security Operations Platform
Surf AI secures $57M in funding for its security operations platform.
LeakNet Ransomware Adopts ClickFix to Trick Users Into Compromising Themselves
LeakNet ransomware integrates ClickFix for access, shifting from traditional entry strategies.
RondoDox Botnet Ramps Up Attacks, Hitting 15,000 Daily Exploitation Attempts
The RondoDox botnet targets 174 vulnerabilities, increasing activity to 15,000 exploitation attempts daily.
Tech and Retail Giants Sign Global Pact to Combat Online Scams and Fraud
Major tech and retail organizations have banded together to address online scams and fraud, establishing a first-of-its-kind industry accord designed ...
Tech Giants Invest $12.5 Million in Open Source Software Security
Major tech firms contribute $12.5 million to enhance open source software security.
Ongoing Python Package Attack Uses Stolen GitHub Tokens
Attack leverages stolen GitHub tokens to introduce malware into numerous Python repositories.
Stryker’s Internal Microsoft Environment Was Breached Last Week
Stryker's internal Microsoft environment breach led to the remote wiping of tens of thousands of employee devices last week.
Payload Ransomware Group Claims Breach of Royal Bahrain Hospital
Royal Bahrain Hospital reportedly targeted by Payload ransomware, with 110 GB of sensitive data allegedly stolen.