Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.
Security Feed
Cybersecurity news & advisories
500 articles 48 of 48 sources updated RSS ↗
Trending
Cross-source coverage · last 72 h
Multiple Active Directory Vulnerabilities Let Attackers Bypass Security Feature Remotely
Bleeping Computer
CCCS Alerts & Advisories
Cisco Talos
Cyber Security News
CyberScoop
Dark Reading
Huntress
Infosecurity Magazine
Krebs On Security
Malwarebytes Labs
Rapid7 Blog
SANS Internet Storm Center
Tenable Blog
The Hacker News
The Record
+12
CVE-2026-69982 ↗
CVE-2026-96252 ↗
CVE-2026-96951 ↗
Microsoft has disclosed three Active Directory vulnerabilities that could let a remote attacker bypass a key security feature in Windows domain environments. The issues are tracked as CVE-2026-69982, CVE-2026-96252, and CVE-2026-108131, and administrators should review Microsoft’s Security Update Guide entries and deploy the available fixes as soon as possible. Active Directory is the central identity service many organizations use to manage users, computers, permissions, and access to business systems. A weakness that bypasses a security control in this environment can be serious because…
Infosecurity Magazine
Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
2h ago
Bleeping Computer
Microsoft fixes bug causing Windows black screens, Explorer crashes
3h ago
Cyber Security News
Multiple Active Directory Vulnerabilities Let Attackers Bypass Security Feature Remotely
9h ago
CyberScoop
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
19h ago
The Hacker News
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
19h ago
Huntress
Microsoft VSS: Still Essential, But Not the Whole Story
20h ago
CCCS Alerts & Advisories
Microsoft security advisory – October 2026 monthly rollup (AV26-1038)
21h ago
Bleeping Computer
Microsoft fixes VPN issues caused by September Windows updates
22h ago
The Record
Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
23h ago
CyberScoop
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
23h ago
Malwarebytes Labs
Update Windows: Record Patch Tuesday fixes flaw already under attack
14 Oct
Bleeping Computer
Microsoft: Recent Windows updates may trigger Remote Desktop failures
14 Oct
Infosecurity Magazine
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
14 Oct
The Hacker News
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
14 Oct
Krebs On Security
Microsoft Patches More Than 1,400 Security Flaws
13 Oct
Dark Reading
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
13 Oct
Tenable Blog
Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)
13 Oct
Rapid7 Blog
Patch Tuesday - October 2026
13 Oct
Cisco Talos
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
13 Oct
SANS Internet Storm Center
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
13 Oct
The Hacker News
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
13 Oct
Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Bleeping Computer
CCCS Alerts & Advisories
Cyber Security News
Recorded Future Intelligence
SecurityWeek
The Hacker News
The Register Security
+4
CVE-2026-76519 ↗
Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give them root access to affected appliances. Tracked as CVE-2026-76519, the flaw carries a CVSS score of 9.8 and allows attacks through specially crafted email attachments without requiring a login. Cisco published its advisory on October 14, 2026. The company said its security response team became aware of active exploitation in October. Public reporting has not identified the attackers or established how many devices have been compromised, leaving the scale of…
SecurityWeek
Cisco Warns of Exploited Secure Email Gateway Vulnerability
6h ago
Cyber Security News
Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
9h ago
The Register Security
Cisco make-me-root email bug exploited as a 0-day by unknown crims
15h ago
CCCS Alerts & Advisories
Cisco security advisory (AV26-1042) – Update 1
16h ago
The Hacker News
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
18h ago
Bleeping Computer
Cisco patches new Secure Email Gateway zero-day exploited in attacks
19h ago
Recorded Future Intelligence
TAG-193’s Regional Espionage Operations
14 Oct
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
Cyber Security News
Huntress
Infosecurity Magazine
SecurityWeek
The Hacker News
Wiz Research
+3
DevSecOps succeeds when security rides the pipeline instead of blocking it and fails when ten scanners produce ten backlogs nobody owns. Modern engineering teams aligning with enterprise DevSecOps playbooks recognize that vulnerability volume is a vanity metric; the true measure of a program is whether developers actually remediate what their tooling flags. We scored ten platforms on the metric that matters: whether developers actually fix what the tools find. GitLab takes 1 for making the whole discipline one product decision; GitHub Advanced Security and Snyk complete the podium. Key…
Cyber Security News
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
5h ago
Huntress
10 Endpoint Security Trends and Tips for 2027 | Huntress
20h ago
SecurityWeek
Harmonic Security Raises $50 Million for Workforce AI Protection
22h ago
The Hacker News
How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
14 Oct
Wiz Research
Securing the Mission at Machine Speed: Wiz AI Agents Arrive in Wiz for Gov
14 Oct
Infosecurity Magazine
Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool
13 Oct
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Bleeping Computer
CCCS Alerts & Advisories
CyberScoop
The Hacker News
The Register Security
Volexity
+3
Ivanti customers are being urged to update Connect Secure and check for compromise after attackers exploited a newly disclosed zero-day vulnerability. On Tuesday, Ivanti released updates for Connect Secure (ICS) to fix CVE-2026-104935, an authentication bypass flaw discovered by Volexity. Rated 8.6 on the CVSS scale, it allows remote, unauthenticated attackers to execute arbitrary commands. "We are aware of exploitation in the wild affecting a limited number of customers at the time of disclosure," the vendor said in its advisory. There are limited indicators of compromise available at…
The Register Security
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
19h ago
Bleeping Computer
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
23h ago
The Hacker News
CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
14 Oct
CyberScoop
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
13 Oct
CCCS Alerts & Advisories
Ivanti security advisory (AV26-1035)
13 Oct
The Hacker News
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
13 Oct
Volexity
A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
13 Oct
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Bleeping Computer
CISA Alerts & Advisories
Cyber Security News
The Hacker News
+1
CVE-2026-0322 ↗
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS software enables an
The Hacker News
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
1h ago
Cyber Security News
Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls
9h ago
Bleeping Computer
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
14h ago
CISA Alerts & Advisories
CISA Adds Four Known Exploited Vulnerabilities to Catalog
14 Oct
UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations
Cyber Security News
Microsoft Security
The Hacker News
CVE-2026-69366 ↗
CVE-2026-69676 ↗
CVE-2026-70584 ↗
UAT-6275 hackers have used a known WinRAR flaw to plant malware on Windows systems while targeting government organizations across the Commonwealth of Independent States (CIS). The activity shows how an unpatched archive tool can turn a routine attachment into lasting remote access, with the malicious program starting when the victim next signs in. The campaign involves CVE-2025-8088, a path traversal flaw that lets crafted archives write files outside the folder chosen for extraction. Researchers observed the group adding this method in April 2026, alongside older attacks using Word macros…
Cyber Security News
UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations
3h ago
Microsoft Security
CVE-2026-69366 Windows Kernel Elevation of Privilege Vulnerability
22h ago
Microsoft Security
CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability
22h ago
Microsoft Security
CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability
22h ago
The Hacker News
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
14 Oct
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Bleeping Computer
SecurityWeek
The Hacker News
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud. Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking
SecurityWeek
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
2h ago
Bleeping Computer
Hirudo Android malware replaces banking apps to evade security checks
14 Oct
The Hacker News
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
14 Oct
The Hacker News
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
13 Oct
The Hacker News
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
13 Oct
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CISA Alerts & Advisories
Dark Reading
Rapid7 Blog
CVE-2026-104935 ↗
CVE-2026-96951 ↗
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Dark Reading
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
15h ago
Rapid7 Blog
Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
13 Oct
CISA Alerts & Advisories
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
13 Oct
CISA Alerts & Advisories
CISA Adds Two Known Exploited Vulnerabilities to Catalog
13 Oct
Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads
Cyber Security News
The Hacker News
The Register Security
A fake Google Chrome app appeared on Google Play with a screenshot showing more than 100,000 downloads, raising fresh concerns about app checks and paid search results. The listing copied Chrome’s name, icon, and description, but its developer was Hizbartech rather than Google LLC. The app reportedly appeared above the real browser as a sponsored result. However, the download badge does not prove that 100,000 people installed it while it carried Chrome’s branding. Available reports also do not establish password theft, a banking Trojan, or a confirmed malware payload. Researchers at…
Cyber Security News
Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads
6h ago
The Register Security
Security researchers spent 6 days doing their Chromework, built 1B user exploit
17h ago
The Hacker News
Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
14 Oct
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
Check Point Research
Infosecurity Magazine
CVE-2026-35029 ↗
CVE-2026-59823 ↗
CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
Any.Run Malware Analysis
The Hacker News
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan
The Hacker News
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
4h ago
The Hacker News
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
19h ago
Any.Run Malware Analysis
Fake AI Tools Put US Companies at Risk: Inside Counterfeit Claude, ChatGPT, and Copilot
14 Oct
The Hacker News
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
13 Oct
Legal Aid Agency hackers made off with records dating back to 1978
Bleeping Computer
The Register Security
Hackers who broke into the UK's Legal Aid Agency last year stole records dating back nearly five decades, the government has admitted, revealing the breach was far more extensive than previously thought. The Legal Aid Agency said on Wednesday that around 250,000 records stolen in the April 2025 attack date from before 2007, including one going back to 1978. That's much further back than the agency previously estimated – it initially said the stolen data covered legal aid applications, claims, and payments from 2007. Most of the newly identified records date from the 1990s and 2000s, with…
Ukraine says Elon Musk's Starshield service partially restored after restrictions disrupted drone missions
Cisco Talos
The Record
The Ukrainian military can again use SpaceX’s Starshield satellite service on the move, a Defense Ministry source told Recorded Future News on Thursday, days after sudden restrictions disrupted drone missions along the…
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
CCCS Alerts & Advisories
Rapid7 Blog
The Hacker News
CVE-2026-97229 ↗
Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0 . Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in…
Yam Store: The Phishing Network Behind a Billion Messages
Bleeping Computer
Dark Reading
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
CCCS Alerts & Advisories
The Hacker News
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's official Python client for BTP services. An attacker must be able to control the tenant subdomain,
Latest
X purges 13,000 accounts linked to suspected meddling ahead of US midterms
X says it has nuked more than 13,000 accounts involved in three suspected foreign influence operations targeting US political debate. In a post on Wednesday evening, the platform linked the operations to Iran, Russia…
Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the…
Post-quantum updates to our TLS guidance
The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.
Using TLS to protect data
Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.
Police arrests 95 suspects in international CSAM crackdown action
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online…
Sextortion “help” firm took $60 million from victims, FTC alleges
The Federal Trade Commission (FTC) has filed a complaint accusing Digital Forensics Corporation of exploiting people already targeted by sextortionists . We have talked about sextortion and recovery scams in the past…
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and…
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of…
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic
CikaBika Bot RAT Uses Discord for C&C
Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.
Legal Aid Agency hackers made off with records dating back to 1978
Hackers who broke into the UK's Legal Aid Agency last year stole records dating back nearly five decades, the government has admitted, revealing the breach was far more extensive than previously thought. The Legal Aid…
Raven AI lets cops find your home from a photo taken inside
Photos you take with your phone and some digital cameras can contain hidden information, including where they were taken. You can strip that data out before sharing a photo with someone, which would help to protect your…
Why AI Confidence Is Not Validation
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners…
India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to…
US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
Welcome, once again, to PWNED, the weekly column where we gawk at organizations that have made serious security mistakes. Normally, we’re talking about businesses or maybe the odd school that messes up, but today we’re…
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
That online ad you saw for earbuds, a drone or bubble gum-scented car air freshener may have been a gateway for mercenary spyware that can infect your device without you ever having to click on it. The Citizen Lab at…
Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.
CenterPoint Energy Data Breach Impacts 1 Million Texans
Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.
UK keeps AI safeguards in the maybe pile for Cyber Security BIll
UK officials have stopped short of committing to AI-specific measures in the Cyber Security and Resilience Bill despite ministers promising to legislate wherever necessary. The uncertainty comes amid warnings about…
Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August.
UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations
UAT-6275 hackers have used a known WinRAR flaw to plant malware on Windows systems while targeting government organizations across the Commonwealth of Independent States (CIS). The activity shows how an unpatched…
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026…
ICO Reprimands Met Over Third-Party Data Leak
The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform
CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope.
UK Legal Aid Agency: Hackers stole records dating back to 1978
The Legal Aid Agency (LAA), an executive agency of the UK's Ministry of Justice that manages the country's Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to…
Top 10 Best DLP Software in 2026 [Ranked & Scored]
DLP’s old reputation blocking legitimate work while real exfiltration walked out died with the pattern-only era. The 2026 winners judge context, ride enforcement points you already run, and explain every block…
Metropolitan Police's unchecked use of shoplifting platform lands force in trouble with data watchdog
The Information Commissioner's Office (ICO) has reprimanded London's Metropolitan Police Service (MPS) and issued an enforcement notice after officers used a retail crime platform without the force's approval or…
Top 10 Best Malware Analysis Tools in 2026 [Ranked & Scored]
Every SOC question eventually becomes “what does this file actually do?” and the answer’s cost ranges from a free hash lookup to hypervisor-grade detonation. Evaluating detonation environments alongside the best malware…
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and…
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
DevSecOps succeeds when security rides the pipeline instead of blocking it and fails when ten scanners produce ten backlogs nobody owns. Modern engineering teams aligning with enterprise DevSecOps playbooks recognize…
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in…
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.
Jev and other decision models can still be tricked with prompt injection
Some of the excitement about decision models follows from TypeSafe AI's claim that its Jev decision model cannot hallucinate and that "the model never makes type errors." Yet decision models, which answer questions with…
Fake Chrome App on Google Play Evades Detection and Reaches 100,000+ Downloads
A fake Google Chrome app appeared on Google Play with a screenshot showing more than 100,000 downloads, raising fresh concerns about app checks and paid search results. The listing copied Chrome’s name, icon, and…
Multiple Active Directory Vulnerabilities Let Attackers Bypass Security Feature Remotely
Microsoft has disclosed three Active Directory vulnerabilities that could let a remote attacker bypass a key security feature in Windows domain environments. The issues are tracked as CVE-2026-69982, CVE-2026-96252, and…
Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls
Hackers are exploiting a high-severity flaw in Palo Alto Networks PAN-OS that allows authenticated attackers to run code with root privileges on affected firewalls. Tracked as CVE-2026-0322, the vulnerability affects…
Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give them root access to affected appliances. Tracked as CVE-2026-76519, the flaw carries…
Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
Smashing Security podcast #488: How a ransomware negotiator ended up arrested at his own conference
A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters gang. Meanwhile, hackers get the keys to ASOS's app and the chance…
Ukraine says Elon Musk's Starshield service partially restored after restrictions disrupted drone missions
The Ukrainian military can again use SpaceX’s Starshield satellite service on the move, a Defense Ministry source told Recorded Future News on Thursday, days after sudden restrictions disrupted drone missions along the…
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Authorities in the Republic of North Macedonia filed charges against the alleged administrator of OLVX, a cybercrime marketplace that sold stolen personal data, credentials and malicious tools for attacks since 2023…
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Cisco “strongly” implored customers to patch yet another critical, make-me-root vulnerability in its Secure Email Gateway (SEG), one that has already been exploited in zero-day attacks. A Cisco spokesperson told The…
Fridge hack costing millions and sparking fires stemmed from poor security
Earlier this week, a mass hack of refrigeration systems at an estimated 700 supermarkets throughout France caused them to suddenly malfunction, causing spoilage of untold tons of perishables and, in some cases, fires…
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
North Macedonian police arrest alleged administrator behind OLVX cybercrime market
A raid on a home in a North Macedonian village led to the arrest of the suspected administrator of the OLVX market, according to the Balkan country's Interior Ministry along with the FBI.
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains.
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Integrate your existing code scanners into Wiz for a unified view of application risk across your environment.
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker…
Security researchers spent 6 days doing their Chromework, built 1B user exploit
Researchers at security startup Xbow used OpenAI's GPT-5.6 Sol model to help chain three zero-day vulnerabilities in Chrome into an exploit capable of executing code outside the browser's sandbox on Windows machines…
What Does the Dark Web Look Like? Pulling Back the Curtain | Huntress
Learn what the dark web looks like with an exploration of the far reaches of the internet, how you can get there, and what you might find… from a safe distance.
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an…
Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code
F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers crash worker processes by sending crafted HTTP requests. In certain setups, the memory…
No articles found
Try adjusting your search, category, tags, source selection, or date range.