Cyber Security
UNM Health System Diverts Ambulances After Cybersecurity Incident
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Sansec: 953 Online Stores Infected in Magento Loader Campaign
Seoul Police Identify 7 Suspects in ARTEX AI-Assisted Hacking Spree
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
Dutch Police Arrest 2 Over AI-Voiced Bank Fraud Using NFC App
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
Capcom ID Breach Exposes 11.77 Million Email Addresses
Quest Diagnostics Reports Breach of Quanum Lab Services Manager
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
eMudhra Exits TLS Business as Chrome and Oracle Distrust Its Keys
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
CISA Warns of Nine Kiloview E3 Encoder Flaws, Two at CVSS 9.9
HPE Patches 72 Aruba AOS-8 and AOS-10 Flaws, Eight at CVSS 10.0
Railway Says Intruder May Have Decrypted Customer Secrets
INTERPOL Operation Serengeti III Nets 1,462 Arrests in Africa
Node.js Security Releases Fix Brotli Out-of-Bounds Write Flaw
Onamae Desktop Cloud Hacked; Malware on Up to 26,739 Servers
Columbia, South Carolina Takes Systems Offline After Cyberattack
FoxIO QPACK Flaws Crash HTTP/3 Servers via 4,000x Amplification
LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
Anthropic Introduces Claude Code Security for Vulnerability Detection
Application Security
Anthropic Introduces Claude Code Security for Vulnerability Detection
Anthropic's new feature scans code for vulnerabilities, suggesting targeted patches.
PayPal Data Breach Exposed User Data for Six Months Due to Software Bug
Cybersecurity
PayPal Data Breach Exposed User Data for Six Months Due to Software Bug
A six-month data breach at PayPal exposed sensitive user information due to a software flaw in its Working Capital app.
Critical Grandstream Phone Vulnerability Allows for Eavesdropping Opportunities
CVE Vulnerability Alerts
Critical Grandstream Phone Vulnerability Allows for Eavesdropping Opportunities
A critical flaw in Grandstream phones enables remote code execution without authentication.
Ukrainian National Sentenced in US Federal Court for Aiding North Korean IT Fraud
Cybersecurity
Ukrainian National Sentenced in US Federal Court for Aiding North Korean IT Fraud
Ukrainian Oleksandr Didenko sentenced to 5 years for aiding North Korean IT workers in employment fraud.
Deutsche Bahn Hit by a Large-Scale DDoS Attack Disrupting Rail Services
Cybersecurity
Deutsche Bahn Hit by a Large-Scale DDoS Attack Disrupting Rail Services
Deutsche Bahn's services were disrupted by a DDoS attack, leading to significant travel complications across Germany's national rail network.
Snyk CEO Steps Down to Make Way for AI-Focused Leadership
Cybersecurity
Snyk CEO Steps Down to Make Way for AI-Focused Leadership
Snyk's CEO announces departure to align leadership with AI advancements in code review.
Advantest Cyberattack Sparks Fears of Employee and Client Data Exposure
Cybersecurity
Advantest Cyberattack Sparks Fears of Employee and Client Data Exposure
Advantest faces a ransomware attack, investigating potential data breach impact.
PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence
Cybersecurity
PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence
Discover how PromptSpy malware uses Gemini AI at runtime to analyze on-screen elements and maintain persistence on Android devices even after a reboot...
Ukrainian National Gets Five Years for Helping North Korean IT Workers Infiltrate U.S. Companies
News
Ukrainian National Gets Five Years for Helping North Korean IT Workers Infiltrate U.S. Companies
A Ukrainian hacker aided North Korea in infiltrating U.S. companies by providing stolen identities, resulting in a five-year prison sentence.
Former Google Engineers Indicted for Alleged Trade Secret Theft Linked to Iran
Cybersecurity
Former Google Engineers Indicted for Alleged Trade Secret Theft Linked to Iran
Former Google engineers indicted for allegedly stealing trade secrets and transferring sensitive data to unauthorized locations, including Iran.
Operation Red Card 2.0 Dismantles Online Scam Networks Across Africa
Cybersecurity
Operation Red Card 2.0 Dismantles Online Scam Networks Across Africa
Operation Red Card 2.0 led to 651 arrests and disrupted online scam networks in Africa.
MIT CSAIL's 2025 AI Agent Index Puts System Transparency Under the Microscope
Cybersecurity
MIT CSAIL’s 2025 AI Agent Index Puts System Transparency Under the Microscope
Academic researchers spotlighted the growing role and impact of AI agents across industries, raising critical questions about transparency, accountabi...
FBI Issues Warning on Escalating ATM Jackpotting Losses
Cybersecurity
FBI Issues Warning on Escalating ATM Jackpotting Losses
The FBI alerts the public on ATM jackpotting, reporting $20M losses and 1,900 incidents since 2020 in the U.S.
Microsoft Addresses High-Severity Flaw in Windows Admin Center
Cybersecurity
Microsoft Addresses High-Severity Flaw in Windows Admin Center
Windows Admin Center's security flaw, CVE-2026-26119, allowed privilege escalation vulnerabilities.
Android Malware Uses Generative AI to Boost Its Post-Installation Capabilities
Cybersecurity
Android Malware Uses Generative AI to Boost Its Post-Installation Capabilities
A newly identified Android malware strain that uses generative AI has raised concerns among cybersecurity researchers, though debate continues over wh...
OpenClaw Security Issues Persist as SecureClaw Open Source Tool Debuts
Cybersecurity
OpenClaw Security Issues Persist as SecureClaw Open Source Tool Debuts
OpenClaw wrestles with security gaps and misconfigurations, despite swift patches and OpenAI-backed foundation support.
African Operation Leads to 651 Fraud Arrests and $4.3M Recovery
Cybersecurity
African Operation Leads to 651 Fraud Arrests and $4.3M Recovery
Authorities in Africa arrested 651 suspects and reclaimed $4.3 million in joint fraud mitigation efforts.
Human Error Remains One of the Biggest Threats to IT Security
Blog
Human Error Remains One of the Biggest Threats to IT Security
Human errors remain a significant security risk even in systems with strong protocols.
Newly Identified Massiv Android Trojan Exploits IPTV App Disguise in Southern Europe
Application Security
Newly Identified Massiv Android Trojan Exploits IPTV App Disguise in Southern Europe
Massiv Android banking trojan, disguised as an IPTV app, targets users in southern Europe.
Critical Vulnerability in Honeywell CCTVs Exposes Security Risks
CVE Vulnerability Alerts
Critical Vulnerability in Honeywell CCTVs Exposes Security Risks
CISA alerts to a critical flaw in Honeywell CCTVs enabling unauthorized access with potential for account hijacking and system compromise.

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Cybersecurity
Columbia, South Carolina Takes Systems Offline After Cyberattack
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • AI Security
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Ukrainian National Sentenced in US Federal Court for Aiding North Korean IT Fraud
Ukrainian Oleksandr Didenko sentenced to 5 years for aiding North Korean IT workers in employment fraud.
Deutsche Bahn Hit by a Large-Scale DDoS Attack Disrupting Rail Services
Deutsche Bahn's services were disrupted by a DDoS attack, leading to significant travel complications across Germany's national rail network.
Snyk CEO Steps Down to Make Way for AI-Focused Leadership
Snyk's CEO announces departure to align leadership with AI advancements in code review.
Advantest Cyberattack Sparks Fears of Employee and Client Data Exposure
Advantest faces a ransomware attack, investigating potential data breach impact.
PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence
Discover how PromptSpy malware uses Gemini AI at runtime to analyze on-screen elements and maintain persistence on Android devices even after a reboot...
Ukrainian National Gets Five Years for Helping North Korean IT Workers Infiltrate U.S. Companies
A Ukrainian hacker aided North Korea in infiltrating U.S. companies by providing stolen identities, resulting in a five-year prison sentence.
Former Google Engineers Indicted for Alleged Trade Secret Theft Linked to Iran
Former Google engineers indicted for allegedly stealing trade secrets and transferring sensitive data to unauthorized locations, including Iran.
Operation Red Card 2.0 Dismantles Online Scam Networks Across Africa
Operation Red Card 2.0 led to 651 arrests and disrupted online scam networks in Africa.
MIT CSAIL’s 2025 AI Agent Index Puts System Transparency Under the Microscope
Academic researchers spotlighted the growing role and impact of AI agents across industries, raising critical questions about transparency, accountabi...
FBI Issues Warning on Escalating ATM Jackpotting Losses
The FBI alerts the public on ATM jackpotting, reporting $20M losses and 1,900 incidents since 2020 in the U.S.
Microsoft Addresses High-Severity Flaw in Windows Admin Center
Windows Admin Center's security flaw, CVE-2026-26119, allowed privilege escalation vulnerabilities.
Android Malware Uses Generative AI to Boost Its Post-Installation Capabilities
A newly identified Android malware strain that uses generative AI has raised concerns among cybersecurity researchers, though debate continues over wh...
OpenClaw Security Issues Persist as SecureClaw Open Source Tool Debuts
OpenClaw wrestles with security gaps and misconfigurations, despite swift patches and OpenAI-backed foundation support.
African Operation Leads to 651 Fraud Arrests and $4.3M Recovery
Authorities in Africa arrested 651 suspects and reclaimed $4.3 million in joint fraud mitigation efforts.
Human Error Remains One of the Biggest Threats to IT Security
Human errors remain a significant security risk even in systems with strong protocols.
Newly Identified Massiv Android Trojan Exploits IPTV App Disguise in Southern Europe
Massiv Android banking trojan, disguised as an IPTV app, targets users in southern Europe.
Critical Vulnerability in Honeywell CCTVs Exposes Security Risks
CISA alerts to a critical flaw in Honeywell CCTVs enabling unauthorized access with potential for account hijacking and system compromise.
The UK Classifies Non-Consensual Intimate Images Alongside Serious Offenses
UK demands quick removal of non-consensual images, equating them with terror content.
Venice Security Raises $33M to Strengthen Its Privileged Access Management Platform
Venice Security, formerly known as Valkyrie, has secured $33 million in funding to enhance its Privileged Access Management solutions.
Figure Data Breach Exposes Nearly 1 Million User Records
Blockchain lender Figure confirms data breach with over 2GB of user information leaked by ShinyHunters.