Cyber Security
Cybersecurity
ICO Fines Reddit £14.47 Million for Failing to Protect Children’s Data
The ICO has fined Reddit for collecting data on children under 13 without adequate safety measures in place.
Cybersecurity
ShinyHunters Leak Exposes Millions of CarGurus User Records
ShinyHunters have exposed over 12 million records reportedly taken from CarGurus, an automotive digital platform.
Cybersecurity
RoguePilot Vulnerability in GitHub Codespaces Has Been Patched by Microsoft
A vulnerability called RoguePilot in GitHub Codespaces risked repository control.
Cybersecurity
Broadcom Releases Patches for VMware Aria Operations Vulnerabilities
Broadcom addresses critical VMware Aria Operations vulnerabilities; users urged to update.
News
Lazarus Group Expands Its Ransomware Arsenal with Medusa
North Korea's Lazarus Group deploys Medusa ransomware against critical sectors, targeting US healthcare.
News
Optimizely Suffers a Data Breach Through a Voice Phishing Attack
Optimizely has reported a data breach caused by a voice phishing attack, compromising customer data.
Application Security
Cryptojacking Campaign Exploits Pirated Software to Deploy XMRig Miner
New cryptojacking campaign uses pirated software to deliver XMRig miner payloads onto hosts.
Cybersecurity
Arkanix Stealer Malware Quickly Vanishes After Its Initial Launch
The newly launched Arkanix Stealer malware vanished shortly after targeting sensitive system and browser data.
Application Security
Microsoft Investigates Vanishing Mouse Pointer Bug in Classic Outlook
Microsoft investigates an issue causing Outlook's mouse pointer to disappear for some users.
Application Security
GitHub’s Dependabot is Under Fire for Alert Accuracy Issues
A Go library maintainer questions the effectiveness of GitHub's Dependabot due to alert fatigue from inaccurate dependency-scanning alerts.
Cybersecurity
BeyondTrust RS and PRA Vulnerability Is Being Actively Exploited by Threat Actors
Attackers exploit CVE-2026-1731 in BeyondTrust RS and PRA, leveraging VShell for persistence, lateral movement, and system control.
Cybersecurity
Microsoft Expands Data Loss Prevention Controls for Microsoft 365 Copilot
Microsoft expands data loss prevention (DLP) controls to block Microsoft 365 Copilot from accessing and processing confidential Word, Excel, and Power...
Cybersecurity
New Security Concerns Arise with the Proliferation of Internal LLMs
As organizations implement LLMs, security concerns shift to the infrastructure.
Application Security
Cybercriminal Group Exploits Hundreds of FortiGate Firewalls Using Off-the-Shelf AI Tools
A cybercrime group used off-the-shelf AI tools to target FortiGate firewalls in 55 countries.
Cybersecurity
Ring Bets $10,000 That Nobody Can Hack Its Local Streaming Feature
Ring offers $10,000 for finding security flaws in its new local streaming feature. The company's goal is to limit video access to device owners' trust...
Cybersecurity
Romanian Hacker Admits to Selling Oregon State Network Access in Court
A Romanian hacker pleads guilty to selling digital access to a US state office network.
Cybersecurity
Privacy Groups Demand Compliance From Generative AI Image Creators
Privacy watchdogs insist generative AI makers adhere to data protection laws.
Cybersecurity
Spanish Hacker Arrested for Booking Luxury Hotel Rooms for One Cent
Spanish police apprehended a hacker for booking luxury rooms for €0.01 each through an exploited payment system.
Application Security
Anthropic Introduces Claude Code Security for Vulnerability Detection
Anthropic's new feature scans code for vulnerabilities, suggesting targeted patches.
Cybersecurity
PayPal Data Breach Exposed User Data for Six Months Due to Software Bug
A six-month data breach at PayPal exposed sensitive user information due to a software flaw in its Working Capital app.
CVE Vulnerability Alerts
PHP2Shell Attacks on Check Point Gateways Deploy TSGA, ESXi Wiper
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
ShinyHunters Leak Exposes Millions of CarGurus User Records
ShinyHunters have exposed over 12 million records reportedly taken from CarGurus, an automotive digital platform.
Lazarus Group Expands Its Ransomware Arsenal with Medusa
North Korea's Lazarus Group deploys Medusa ransomware against critical sectors, targeting US healthcare.
Optimizely Suffers a Data Breach Through a Voice Phishing Attack
Optimizely has reported a data breach caused by a voice phishing attack, compromising customer data.
Cryptojacking Campaign Exploits Pirated Software to Deploy XMRig Miner
New cryptojacking campaign uses pirated software to deliver XMRig miner payloads onto hosts.
Arkanix Stealer Malware Quickly Vanishes After Its Initial Launch
The newly launched Arkanix Stealer malware vanished shortly after targeting sensitive system and browser data.
Microsoft Investigates Vanishing Mouse Pointer Bug in Classic Outlook
Microsoft investigates an issue causing Outlook's mouse pointer to disappear for some users.
GitHub’s Dependabot is Under Fire for Alert Accuracy Issues
A Go library maintainer questions the effectiveness of GitHub's Dependabot due to alert fatigue from inaccurate dependency-scanning alerts.
BeyondTrust RS and PRA Vulnerability Is Being Actively Exploited by Threat Actors
Attackers exploit CVE-2026-1731 in BeyondTrust RS and PRA, leveraging VShell for persistence, lateral movement, and system control.
Microsoft Expands Data Loss Prevention Controls for Microsoft 365 Copilot
Microsoft expands data loss prevention (DLP) controls to block Microsoft 365 Copilot from accessing and processing confidential Word, Excel, and Power...
New Security Concerns Arise with the Proliferation of Internal LLMs
As organizations implement LLMs, security concerns shift to the infrastructure.
Cybercriminal Group Exploits Hundreds of FortiGate Firewalls Using Off-the-Shelf AI Tools
A cybercrime group used off-the-shelf AI tools to target FortiGate firewalls in 55 countries.
Ring Bets $10,000 That Nobody Can Hack Its Local Streaming Feature
Ring offers $10,000 for finding security flaws in its new local streaming feature. The company's goal is to limit video access to device owners' trust...
Romanian Hacker Admits to Selling Oregon State Network Access in Court
A Romanian hacker pleads guilty to selling digital access to a US state office network.
Privacy Groups Demand Compliance From Generative AI Image Creators
Privacy watchdogs insist generative AI makers adhere to data protection laws.
Spanish Hacker Arrested for Booking Luxury Hotel Rooms for One Cent
Spanish police apprehended a hacker for booking luxury rooms for €0.01 each through an exploited payment system.
Anthropic Introduces Claude Code Security for Vulnerability Detection
Anthropic's new feature scans code for vulnerabilities, suggesting targeted patches.
PayPal Data Breach Exposed User Data for Six Months Due to Software Bug
A six-month data breach at PayPal exposed sensitive user information due to a software flaw in its Working Capital app.
Critical Grandstream Phone Vulnerability Allows for Eavesdropping Opportunities
A critical flaw in Grandstream phones enables remote code execution without authentication.
Ukrainian National Sentenced in US Federal Court for Aiding North Korean IT Fraud
Ukrainian Oleksandr Didenko sentenced to 5 years for aiding North Korean IT workers in employment fraud.
Deutsche Bahn Hit by a Large-Scale DDoS Attack Disrupting Rail Services
Deutsche Bahn's services were disrupted by a DDoS attack, leading to significant travel complications across Germany's national rail network.