Cyber Security
UNM Health System Diverts Ambulances After Cybersecurity Incident
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Sansec: 953 Online Stores Infected in Magento Loader Campaign
Seoul Police Identify 7 Suspects in ARTEX AI-Assisted Hacking Spree
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
Dutch Police Arrest 2 Over AI-Voiced Bank Fraud Using NFC App
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
Capcom ID Breach Exposes 11.77 Million Email Addresses
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
Railway Says Intruder May Have Decrypted Customer Secrets
INTERPOL Operation Serengeti III Nets 1,462 Arrests in Africa
Node.js Security Releases Fix Brotli Out-of-Bounds Write Flaw
Onamae Desktop Cloud Hacked; Malware on Up to 26,739 Servers
Columbia, South Carolina Takes Systems Offline After Cyberattack
FoxIO QPACK Flaws Crash HTTP/3 Servers via 4,000x Amplification
LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
Ongoing Python Package Attack Uses Stolen GitHub Tokens
Application Security
Ongoing Python Package Attack Uses Stolen GitHub Tokens
Attack leverages stolen GitHub tokens to introduce malware into numerous Python repositories.
Stryker's Internal Microsoft Environment Was Breached Last Week
Cybersecurity
Stryker’s Internal Microsoft Environment Was Breached Last Week
Stryker's internal Microsoft environment breach led to the remote wiping of tens of thousands of employee devices last week.
Payload Ransomware Group Claims Breach of Royal Bahrain Hospital
News
Payload Ransomware Group Claims Breach of Royal Bahrain Hospital
Royal Bahrain Hospital reportedly targeted by Payload ransomware, with 110 GB of sensitive data allegedly stolen.
DRILLAPP Backdoor Campaign Targets Ukrainian Organizations With Edge Debugging Abuse
Cybersecurity
DRILLAPP Backdoor Campaign Targets Ukrainian Organizations With Edge Debugging Abuse
Russian-linked threat actors deploy DRILLAPP backdoor campaign in Ukraine.
Phishing Attack Hits Intuitive's Internal IT Business Systems
News
Phishing Attack Hits Intuitive’s Internal IT Business Systems
Intuitive's internal systems hit by phishing attack; patient operations remain unaffected.
New Malware Tactics Take Aim at Windows, iOS, and Linux Users
Application Security
New Malware Tactics Take Aim at Windows, iOS, and Linux Users
Explore how new malware strains are targeting users with advanced methods and reverse engineering insights.
Companies House Restores WebFiling Service After Security Flaw Exposed Corporate Data
Cybersecurity
Companies House Restores WebFiling Service After Security Flaw Exposed Corporate Data
Companies House fixes a security flaw in WebFiling, protecting UK companies' data.
How AI Is Making Financial Fraud 4.5 Times More Profitable
Cybersecurity
How AI Is Making Financial Fraud 4.5 Times More Profitable
Financial fraud schemes using AI boost profitability by 4.5 times, Interpol reports.
Ongoing Exchange Online Outage Leaves Customers Without Mailbox Access
Application Security
Ongoing Exchange Online Outage Leaves Customers Without Mailbox Access
Microsoft is addressing an Exchange Online outage impacting mailbox and calendar access.
Signal Cyberattack in Germany Targets Politicians Through Impersonation
Cybersecurity
Signal Cyberattack in Germany Targets Politicians Through Impersonation
Cyberattack on Signal and WhatsApp targets high-profile German officials, including former BND VP, using impersonation tactics.
Targeted Phishing Attack Breaches Security Firm Executive
News
Targeted Phishing Attack Breaches Security Firm Executive
A phishing attack involved DKIM-signed emails, trusted infrastructures, and Cloudflare protection against a security firm executive.
Silence from the Corporate Giants Four Companies Yet to Comment on Oracle EBS Hack
Application Security
Silence from the Corporate Giants: Four Companies Yet to Comment on Oracle EBS Hack
Four major corporations, Broadcom, Bechtel, Estée Lauder, and Abbott, remain silent amid Oracle EBS hack.
FBI Seeks Gamer Help in Steam Malware Investigation
Cybersecurity
FBI Seeks Gamer Help in Steam Malware Investigation
The FBI seeks gamers affected by malware-infected Steam games to join an ongoing investigation.
Shadow AI Is Quietly Spreading Across SaaS Environments
Application Security
Shadow AI Is Quietly Spreading Across SaaS Environments
Explore the growing trend of Shadow AI in SaaS environments as employees adopt AI tools without IT oversight, and learn how security teams can respond...
Microsoft Teams Is Adding Automatic Bot Tagging in Meeting Lobbies
Application Security
Microsoft Teams Is Adding Automatic Bot Tagging in Meeting Lobbies
Microsoft improves control over third-party bots in Teams meetings.
Canadian Outsourcing Leader Telus Digital Faces a Severe Data Breach
Cybersecurity
Canadian Outsourcing Leader Telus Digital Faces a Severe Data Breach
Telus Digital hit by data breach, with claims of nearly 1 petabyte stolen over months.
VENON Banking Malware Targets Brazilian Users With Rust-Based Code
Cybersecurity
VENON Banking Malware Targets Brazilian Users With Rust-Based Code
New banking malware VENON targets Brazilian users, developed in Rust, diverging from traditional Delphi-based threats.
Apple Releases iOS and iPadOS Updates to Patch Coruna Exploits
Application Security
Apple Releases iOS and iPadOS Updates to Patch Coruna Exploits
Apple issues iOS and iPadOS updates to address vulnerabilities, safeguarding against the Coruna exploit.
Veeam Software Fixes Critical RCE Vulnerabilities in Backup & Replication Solution
Application Security
Veeam Software Fixes Critical RCE Vulnerabilities in Backup & Replication Solution
Veeam Software addresses critical security flaws in their Backup & Replication tool, preventing potential remote code execution risks.
England Hockey Investigates Possible Data Breach by AiLock Ransomware Group
Cybersecurity
England Hockey Investigates Possible Data Breach by AiLock Ransomware Group
England Hockey is assessing a potential data breach by the AiLock ransomware gang that listed it on its data leak site.

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Cybersecurity
Columbia, South Carolina Takes Systems Offline After Cyberattack
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • AI Security
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Phishing Attack Hits Intuitive’s Internal IT Business Systems
Intuitive's internal systems hit by phishing attack; patient operations remain unaffected.
DRILLAPP Backdoor Campaign Targets Ukrainian Organizations With Edge Debugging Abuse
Russian-linked threat actors deploy DRILLAPP backdoor campaign in Ukraine.
New Malware Tactics Take Aim at Windows, iOS, and Linux Users
Explore how new malware strains are targeting users with advanced methods and reverse engineering insights.
Companies House Restores WebFiling Service After Security Flaw Exposed Corporate Data
Companies House fixes a security flaw in WebFiling, protecting UK companies' data.
How AI Is Making Financial Fraud 4.5 Times More Profitable
Financial fraud schemes using AI boost profitability by 4.5 times, Interpol reports.
Ongoing Exchange Online Outage Leaves Customers Without Mailbox Access
Microsoft is addressing an Exchange Online outage impacting mailbox and calendar access.
Signal Cyberattack in Germany Targets Politicians Through Impersonation
Cyberattack on Signal and WhatsApp targets high-profile German officials, including former BND VP, using impersonation tactics.
Targeted Phishing Attack Breaches Security Firm Executive
A phishing attack involved DKIM-signed emails, trusted infrastructures, and Cloudflare protection against a security firm executive.
Silence from the Corporate Giants: Four Companies Yet to Comment on Oracle EBS Hack
Four major corporations, Broadcom, Bechtel, Estée Lauder, and Abbott, remain silent amid Oracle EBS hack.
FBI Seeks Gamer Help in Steam Malware Investigation
The FBI seeks gamers affected by malware-infected Steam games to join an ongoing investigation.
Shadow AI Is Quietly Spreading Across SaaS Environments
Explore the growing trend of Shadow AI in SaaS environments as employees adopt AI tools without IT oversight, and learn how security teams can respond...
Microsoft Teams Is Adding Automatic Bot Tagging in Meeting Lobbies
Microsoft improves control over third-party bots in Teams meetings.
Canadian Outsourcing Leader Telus Digital Faces a Severe Data Breach
Telus Digital hit by data breach, with claims of nearly 1 petabyte stolen over months.
VENON Banking Malware Targets Brazilian Users With Rust-Based Code
New banking malware VENON targets Brazilian users, developed in Rust, diverging from traditional Delphi-based threats.
Apple Releases iOS and iPadOS Updates to Patch Coruna Exploits
Apple issues iOS and iPadOS updates to address vulnerabilities, safeguarding against the Coruna exploit.
Veeam Software Fixes Critical RCE Vulnerabilities in Backup & Replication Solution
Veeam Software addresses critical security flaws in their Backup & Replication tool, preventing potential remote code execution risks.
England Hockey Investigates Possible Data Breach by AiLock Ransomware Group
England Hockey is assessing a potential data breach by the AiLock ransomware gang that listed it on its data leak site.
International Operation Dismantles the Dangerous SocksEscort Proxy Service
Global law enforcement dismantles SocksEscort proxy service involved in digital fraud, impacting numerous networks worldwide.
Slopoly Malware Linked to Interlock Ransomware Attack
Investigating Slopoly malware's impact, AI origins, and role in Interlock attacks.
Apple Patches Older iPhones and iPads Against Coruna Exploit Kit Attacks
Apple patches actively exploited vulnerabilities in older iPhones and iPads, addressing security gaps targeted by the Coruna exploit kit.