| 1 | McKesson discloses breach after ShinyHunters claims patient data theft | Aug 28, 11:10 pm |
|---|
| 2 | Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network | Aug 28, 10:10 pm |
|---|
| 3 | Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable | Aug 28, 9:10 pm |
|---|
| 4 | ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body | Aug 28, 7:10 pm |
|---|
| 5 | Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers | Aug 28, 7:10 pm |
|---|
| 6 | Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication | Aug 28, 7:10 pm |
|---|
| 7 | GiveWP WordPress donation plugin flaw lets hackers execute server commands | Aug 28, 7:10 pm |
|---|
| 8 | PaperCut releases second emergency patch for exploited flaws | Aug 28, 7:10 pm |
|---|
| 9 | 68-year-old imprisoned after making $1.3 million by pirating IPTV services | Aug 28, 5:10 pm |
|---|
| 10 | 19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code | Aug 28, 4:10 pm |
|---|
| 11 | AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up? | Aug 28, 3:10 pm |
|---|
| 12 | Key Reasons Why Identity Fabric Matters in 2026 | Aug 28, 1:10 pm |
|---|
| 13 | Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth | Aug 28, 1:10 pm |
|---|
| 14 | Over 8,300 Gitea servers vulnerable to code execution attacks | Aug 28, 1:10 pm |
|---|
| 15 | China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access | Aug 28, 12:10 pm |
|---|
| 16 | Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL | Aug 28, 12:10 pm |
|---|
| 17 | Toy-making giant Hasbro disclose data breach affecting employees | Aug 28, 12:10 pm |
|---|
| 18 | Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server | Aug 28, 11:10 am |
|---|
| 19 | ServiceNow warns of three max severity security vulnerabilities | Aug 28, 11:10 am |
|---|
| 20 | Windows 11 KB5120998 update released with 35 changes and fixes | Aug 28, 10:10 am |
|---|
| 21 | APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations | Aug 28, 9:10 am |
|---|
| 22 | PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions | Aug 28, 9:10 am |
|---|
| 23 | Some Malicious PE Stats, (Thu, Aug 27th) | Aug 28, 7:10 am |
|---|
| 24 | ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th) | Aug 28, 2:10 am |
|---|
| 25 | Nearly 700 rogue AI agents coordinated in the Hugging Face attack | Aug 27, 10:10 pm |
|---|
| 26 | OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face | Aug 27, 9:10 pm |
|---|
| 27 | ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories | Aug 27, 5:10 pm |
|---|
| 28 | Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE | Aug 27, 5:10 pm |
|---|
| 29 | Manchester Airports Group says hackers stole travelers' data | Aug 27, 5:10 pm |
|---|
| 30 | PaperCut warns of NG, MF flaw exploited in zero-day attacks | Aug 27, 5:10 pm |
|---|
| 31 | Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers | Aug 27, 3:10 pm |
|---|
| 32 | Australia arrests alleged TeamPCP hackers behind supply-chain attacks | Aug 27, 2:10 pm |
|---|
| 33 | Android 17 adds ECH support to make web browsing harder to track | Aug 27, 2:10 pm |
|---|
| 34 | How Threat Research and MDR Help SMBs Build a Defensive Edge | Aug 27, 2:10 pm |
|---|
| 35 | What the Data Says About AI in Security Operations in 2026 | Aug 27, 1:10 pm |
|---|
| 36 | Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks | Aug 27, 1:10 pm |
|---|
| 37 | Learn How to Build Security Operations Ready for AI-Powered Attacks | Aug 27, 1:10 pm |
|---|
| 38 | Webinar: How Google Workspace breaches happen and what to do next | Aug 27, 1:10 pm |
|---|
| 39 | Microsoft rolls out fix for Windows 11 crashes, gaming issues | Aug 27, 1:10 pm |
|---|
| 40 | Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools | Aug 27, 12:10 pm |
|---|
| 41 | Carhartt data breach exposes information of 12.9 million accounts | Aug 27, 12:10 pm |
|---|
| 42 | Two Alleged ‘TeamPCP’ Hackers Arrested in Australia | Aug 27, 11:10 am |
|---|
| 43 | CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday | Aug 27, 10:10 am |
|---|
| 44 | GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address | Aug 27, 10:10 am |
|---|
| 45 | A polymorphic phishing page (that occasionally breaks itself), (Thu, Aug 27th) | Aug 27, 10:10 am |
|---|
| 46 | New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access | Aug 27, 9:10 am |
|---|
| 47 | ATF confirms “major incident” after recent Qilin breach claims | Aug 27, 9:10 am |
|---|
| 48 | CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs | Aug 27, 7:10 am |
|---|
| 49 | ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th) | Aug 27, 2:10 am |
|---|
| 50 | Critical Avada WordPress theme flaw enables zero-click RCE | Aug 26, 10:10 pm |
|---|
| 51 | New GPUThor attack defeats NVIDIA ECC protection for root access | Aug 26, 7:10 pm |
|---|
| 52 | Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler | Aug 26, 6:10 pm |
|---|
| 53 | FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations | Aug 26, 6:10 pm |
|---|
| 54 | Meta agrees to $18 billion settlement over teen social media harms | Aug 26, 5:10 pm |
|---|
| 55 | Boston Scientific says cyberattack disrupted operations globally | Aug 26, 4:10 pm |
|---|
| 56 | Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th) | Aug 26, 4:10 pm |
|---|
| 57 | CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing | Aug 26, 3:10 pm |
|---|
| 58 | NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions | Aug 26, 3:10 pm |
|---|
| 59 | FBI disrupts proxy network enabling Chinese espionage operations | Aug 26, 3:10 pm |
|---|
| 60 | Hackers target Microsoft SharePoint RCE chain with PoC exploit | Aug 26, 3:10 pm |
|---|
| 61 | Ubiquiti patches three max severity security vulnerabilities | Aug 26, 2:10 pm |
|---|
| 62 | Snowflake ends service-account passwords. Now comes the hard part | Aug 26, 2:10 pm |
|---|
| 63 | New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode | Aug 26, 1:10 pm |
|---|
| 64 | Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code | Aug 26, 1:10 pm |
|---|
| 65 | Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine | Aug 26, 12:10 pm |
|---|
| 66 | Microsoft tests new privacy controls for Windows 11 desktop apps | Aug 26, 12:10 pm |
|---|
| 67 | OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation | Aug 26, 11:10 am |
|---|
| 68 | Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests | Aug 26, 11:10 am |
|---|
| 69 | Hackers now exploit critical Gitea flaw in code injection attacks | Aug 26, 11:10 am |
|---|
| 70 | Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode | Aug 26, 9:10 am |
|---|
| 71 | INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown | Aug 26, 9:10 am |
|---|
| 72 | Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes | Aug 26, 7:10 am |
|---|
| 73 | Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload | Aug 26, 7:10 am |
|---|
| 74 | ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th) | Aug 26, 3:10 am |
|---|
| 75 | Hackers abuse npm mirrors to host phishing redirect pages | Aug 25, 10:10 pm |
|---|
| 76 | LACMA data breach last year exposed social security and medical data | Aug 25, 10:10 pm |
|---|
| 77 | AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes | Aug 25, 9:10 pm |
|---|
| 78 | U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches | Aug 25, 7:10 pm |
|---|
| 79 | Massive DDoS attack disrupts Norway’s government digital services | Aug 25, 4:10 pm |
|---|
| 80 | A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw | Aug 25, 3:10 pm |
|---|
| 81 | Hospital operator Nutex Health says data stolen in cyberattack | Aug 25, 3:10 pm |
|---|
| 82 | Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th) | Aug 25, 3:10 pm |
|---|
| 83 | Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode | Aug 25, 2:10 pm |
|---|
| 84 | WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android | Aug 25, 2:10 pm |
|---|
| 85 | Microsoft PowerToys adds Alt+Tab-style switching for an app's windows | Aug 25, 2:10 pm |
|---|
| 86 | From Fake Workers to Account Recovery: The Growing Identity Verification Risk | Aug 25, 2:10 pm |
|---|
| 87 | Frontier AI: Vulnerability Management's Systemic Revolution | Aug 25, 1:10 pm |
|---|
| 88 | E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands | Aug 25, 1:10 pm |
|---|
| 89 | 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages | Aug 25, 1:10 pm |
|---|
| 90 | Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows | Aug 25, 1:10 pm |
|---|
| 91 | WhatsApp adds stronger two-step verification, multiple passkeys | Aug 25, 1:10 pm |
|---|
| 92 | Hackers breached over 270 Zimbra servers in ongoing attacks | Aug 25, 12:10 pm |
|---|
| 93 | Police arrests dozens of suspects in global cybercrime crackdown | Aug 25, 11:10 am |
|---|
| 94 | Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access | Aug 25, 10:10 am |
|---|
| 95 | Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data | Aug 25, 7:10 am |
|---|
| 96 | ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th) | Aug 25, 2:10 am |
|---|
| 97 | Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning | Aug 25, 12:10 am |
|---|
| 98 | Unpatched Calix flaw lets hackers bypass NAT to expose internal devices | Aug 24, 10:10 pm |
|---|
| 99 | Hackers target WordPress sites in miniOrange auth bypass attacks | Aug 24, 8:10 pm |
|---|
| 100 | TikTok reaches $400M settlement with US over COPPA violations | Aug 24, 6:10 pm |
|---|
| 101 | ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More | Aug 24, 4:10 pm |
|---|
| 102 | ReliaQuest confirms failed data-theft attack after ShinyHunters breach | Aug 24, 4:10 pm |
|---|
| 103 | WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords | Aug 24, 2:10 pm |
|---|
| 104 | South Korean startup platform breach exposes key management failures | Aug 24, 2:10 pm |
|---|
| 105 | Microsoft Teams now lets admins block external bots from meetings | Aug 24, 2:10 pm |
|---|
| 106 | Microsoft: August updates break printing, PDF export in WPF apps | Aug 24, 1:10 pm |
|---|
| 107 | The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk | Aug 24, 12:10 pm |
|---|
| 108 | Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor | Aug 24, 12:10 pm |
|---|
| 109 | Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account | Aug 24, 12:10 pm |
|---|
| 110 | Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt | Aug 24, 12:10 pm |
|---|
| 111 | CISA orders urgent patching of actively exploited Zimbra flaw | Aug 24, 11:10 am |
|---|
| 112 | Microsoft shares temporary fix for Windows 11 gaming issues | Aug 24, 10:10 am |
|---|
| 113 | UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit | Aug 24, 9:10 am |
|---|
| 114 | DOUBLECUP's PNG Payload, (Mon, Aug 24th) | Aug 24, 8:10 am |
|---|
| 115 | ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th) | Aug 24, 2:10 am |
|---|
| 116 | ToxicPanda Android malware uses VPN permissions to block Google Play | Aug 23, 3:10 pm |
|---|
| 117 | Hackers infect Android car head units with proxy botnet malware | Aug 22, 3:10 pm |
|---|
| 118 | TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit | Aug 22, 3:10 pm |
|---|
| 119 | Named Pipes Under Attack: Securing Windows Interprocess Communication | Aug 22, 1:10 pm |
|---|
| 120 | 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 | Aug 21, 9:10 pm |
|---|
| 121 | New SynkLoader malware pushed in Microsoft Teams phishing campaign | Aug 21, 6:10 pm |
|---|
| 122 | Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet | Aug 21, 5:10 pm |
|---|
| 123 | Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot | Aug 21, 5:10 pm |
|---|
| 124 | Hundreds of leaked AWS keys give full control over corporate accounts | Aug 21, 4:10 pm |
|---|
| 125 | Microsoft blames Windows gaming issues on RGB lighting devices | Aug 21, 3:10 pm |
|---|
| 126 | Microsoft rolls out Classic Outlook theme for New Outlook users | Aug 21, 2:10 pm |
|---|
| 127 | Is Online Privacy Possible? How Digital Identities Can Help | Aug 21, 2:10 pm |
|---|
| 128 | Wazuh and AI For Enhanced SOC Workflows | Aug 21, 1:10 pm |
|---|
| 129 | CISA orders feds to patch actively exploited TrueConf Server flaws | Aug 21, 1:10 pm |
|---|
| 130 | Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 | Aug 21, 12:10 pm |
|---|
| 131 | SickKids data breach exposes employee and job applicant info | Aug 21, 11:10 am |
|---|
| 132 | Hackers abuse FTP server banners to deliver new Windows malware | Aug 21, 11:10 am |
|---|
| 133 | Microsoft warns of max severity Entra ID flaw exploited in attacks | Aug 21, 11:10 am |
|---|
| 134 | GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure | Aug 21, 8:10 am |
|---|
| 135 | Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution | Aug 21, 7:10 am |
|---|
| 136 | ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More | Aug 21, 6:10 am |
|---|
| 137 | Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st) | Aug 21, 3:10 am |
|---|
| 138 | Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st) | Aug 21, 2:10 am |
|---|
| 139 | ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st) | Aug 21, 2:10 am |
|---|
| 140 | Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads | Aug 20, 10:10 pm |
|---|
| 141 | Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts | Aug 20, 9:10 pm |
|---|
| 142 | ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More | Aug 20, 7:10 pm |
|---|
| 143 | AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure | Aug 20, 6:10 pm |
|---|
| 144 | Hackers poison arrayref Rust crate to push infostealer malware | Aug 20, 6:10 pm |
|---|
| 145 | New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data | Aug 20, 4:10 pm |
|---|
| 146 | Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution | Aug 20, 3:10 pm |
|---|
| 147 | Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers | Aug 20, 3:10 pm |
|---|
| 148 | Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE | Aug 20, 3:10 pm |
|---|
| 149 | Critical Elementor Pro bug exposes WordPress sites to RCE attacks | Aug 20, 3:10 pm |
|---|
| 150 | Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices | Aug 20, 2:10 pm |
|---|
| 151 | CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification | Aug 20, 2:10 pm |
|---|
| 152 | Why "Shady AI" is Security's Next Big Governance Problem | Aug 20, 2:10 pm |
|---|
| 153 | Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments | Aug 20, 2:10 pm |
|---|
| 154 | Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th) | Aug 20, 2:10 pm |
|---|
| 155 | How MSPs can catch phishing attacks email filters miss | Aug 20, 2:10 pm |
|---|
| 156 | Citrix urges admins to patch new NetScaler flaws as soon as possible | Aug 20, 1:10 pm |
|---|
| 157 | Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses, (Thu, Aug 20th) | Aug 20, 12:10 pm |
|---|
| 158 | 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets | Aug 20, 11:10 am |
|---|
| 159 | ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud | Aug 20, 11:10 am |
|---|
| 160 | NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands | Aug 20, 11:10 am |
|---|
| 161 | CISA warns of hackers exploiting critical MLflow vulnerability | Aug 20, 11:10 am |
|---|
| 162 | Critical Zimbra RCE flaw now actively exploited in attacks | Aug 20, 10:10 am |
|---|
| 163 | New Manic Android malware can exfiltrate data through nearby devices | Aug 20, 10:10 am |
|---|
| 164 | Microsoft says August Windows updates may cause gaming issues | Aug 20, 7:10 am |
|---|
| 165 | Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code | Aug 20, 6:10 am |
|---|
| 166 | ISC Stormcast For Thursday, August 20th, 2026 https://isc.sans.edu/podcastdetail/10060, (Thu, Aug 20th) | Aug 20, 2:10 am |
|---|
| 167 | OpenAI confirms ChatGPT is down as logins and signups fail | Aug 20, 1:10 am |
|---|
| 168 | Rogue ransomware affiliate poses as recovery firm to steal payments | Aug 19, 11:10 pm |
|---|
| 169 | Sakura Internet hack exposes data of up to 1.36 million accounts | Aug 19, 9:10 pm |
|---|
| 170 | Rogue ransomware affiliate poses as data recovery firm to steal payments | Aug 19, 9:10 pm |
|---|
| 171 | OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior | Aug 19, 8:10 pm |
|---|
| 172 | Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second | Aug 19, 8:10 pm |
|---|
| 173 | Healthtech firm CareCloud data breach impacts 3.7 million patients | Aug 19, 8:10 pm |
|---|
| 174 | US warns of AI-powered attacks on Siemens PLCs in critical infrastructure | Aug 19, 6:10 pm |
|---|
| 175 | Hackers compromise 14,500 Dahua web cameras in 35-day campaign | Aug 19, 6:10 pm |
|---|
| 176 | US charges Iranian hackers over $3.4 billion intellectual property theft | Aug 19, 4:10 pm |
|---|
| 177 | Simple Scans for Cloud Metadata Service, (Wed, Aug 19th) | Aug 19, 3:10 pm |
|---|
| 178 | Phishing 3.0: The Fight Moves to Agent Versus Agent | Aug 19, 2:10 pm |
|---|
| 179 | Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P | Aug 19, 2:10 pm |
|---|
| 180 | SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs | Aug 19, 2:10 pm |
|---|
| 181 | Password spraying attacks surge 155x as hackers exploit MFA gaps | Aug 19, 2:10 pm |
|---|
| 182 | Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation | Aug 19, 12:10 pm |
|---|
| 183 | Microsoft fixes known issue causing Windows Defender crashes | Aug 19, 12:10 pm |
|---|
| 184 | StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data | Aug 19, 12:10 pm |
|---|
| 185 | Critical RCE flaw in Windows IKE Extension now actively exploited | Aug 19, 11:10 am |
|---|
| 186 | Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data | Aug 19, 10:10 am |
|---|
| 187 | Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure | Aug 19, 10:10 am |
|---|
| 188 | Windows 11 24H2 Home and Pro reach end of support in 2 months | Aug 19, 10:10 am |
|---|
| 189 | CISA: Medusa ransomware hit over 500 critical infrastructure orgs | Aug 19, 8:10 am |
|---|
| 190 | ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th) | Aug 19, 2:10 am |
|---|
| 191 | Comcast turns your Xfinity WiFi into a home motion detector | Aug 18, 9:10 pm |
|---|
| 192 | Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 | Aug 18, 7:10 pm |
|---|
| 193 | Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets | Aug 18, 7:10 pm |
|---|
| 194 | Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps | Aug 18, 7:10 pm |
|---|
| 195 | Clop created custom web shell for Windchill data theft attacks | Aug 18, 6:10 pm |
|---|
| 196 | Your Controls Block Known Attacks. What About the Behavior? | Aug 18, 2:10 pm |
|---|
| 197 | TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks | Aug 18, 1:10 pm |
|---|
| 198 | AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files | Aug 18, 1:10 pm |
|---|
| 199 | Microsoft tests faster Windows File Explorer, new context menu | Aug 18, 12:10 pm |
|---|
| 200 | One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 | Aug 18, 12:10 pm |
|---|
| 201 | 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets | Aug 18, 12:10 pm |
|---|
| 202 | CISA: Windows Task Host flaw now exploited by ransomware gangs | Aug 18, 11:10 am |
|---|
| 203 | SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers | Aug 18, 10:10 am |
|---|
| 204 | Microsoft confirms outage affecting search in Microsoft 365 apps | Aug 18, 10:10 am |
|---|
| 205 | Microsoft starts removing WMIC tool used by cybercriminals | Aug 18, 9:10 am |
|---|
| 206 | CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE | Aug 18, 7:10 am |
|---|
| 207 | ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th) | Aug 18, 2:10 am |
|---|
| 208 | Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects | Aug 17, 10:10 pm |
|---|
| 209 | Apple Patches iOS and macOS, (Mon, Aug 17th) | Aug 17, 9:10 pm |
|---|
| 210 | Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic | Aug 17, 8:10 pm |
|---|
| 211 | Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads | Aug 17, 8:10 pm |
|---|
| 212 | Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection | Aug 17, 8:10 pm |
|---|
| 213 | Pokémon Center data breach exposes customer info, cancels some orders | Aug 17, 8:10 pm |
|---|
| 214 | Hacker claims 3.6 million Azure account records stolen from major companies | Aug 17, 8:10 pm |
|---|
| 215 | Apple Screen Sharing Security, (Mon, Aug 17th) | Aug 17, 3:10 pm |
|---|
| 216 | Microsoft confirms GitHub is down worldwide | Aug 17, 3:10 pm |
|---|
| 217 | ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More | Aug 17, 2:10 pm |
|---|
| 218 | Certighost and the Privilege Hiding in Your Certificate Authority | Aug 17, 2:10 pm |
|---|
| 219 | Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access | Aug 17, 1:10 pm |
|---|
| 220 | How MCP Servers Can Expose Enterprise Secrets | Aug 17, 1:10 pm |
|---|
| 221 | Windows Server 2022 reaches end of mainstream support in 60 days | Aug 17, 1:10 pm |
|---|
| 222 | Philips and GE investigating Clop ransomware data theft claims | Aug 17, 12:10 pm |
|---|
| 223 | Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware | Aug 17, 11:10 am |
|---|
| 224 | Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies | Aug 17, 11:10 am |
|---|
| 225 | French tax authority data breach affects 678,000 individuals | Aug 17, 10:10 am |
|---|
| 226 | Microsoft working on Defender patch for ShieldBreak zero-day | Aug 17, 9:10 am |
|---|
| 227 | ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th) | Aug 17, 2:10 am |
|---|
| 228 | SafePal data breach impacts 39,798 customers, stolen info for sale | Aug 17, 12:10 am |
|---|
| 229 | Anthropic confirms Claude is down in major outage affecting multiple services | Aug 16, 11:10 pm |
|---|
| 230 | Wireshark 4.6.8 Released, (Sun, Aug 16th) | Aug 16, 10:10 pm |
|---|
| 231 | Large-scale DDoS attacks disrupted Threema secure messaging service | Aug 16, 6:10 pm |
|---|
| 232 | New AmnesiaStealer macOS malware hijacks browser sessions via remote control | Aug 16, 3:10 pm |
|---|
| 233 | New Evooo1Bot Linux botnet turns routers into traffic relay nodes | Aug 15, 3:10 pm |
|---|
| 234 | How Anthropic plans to watermark Claude's AI-generated text | Aug 15, 12:10 am |
|---|
| 235 | Hackers arrested over €30M bank fraud exploiting service provider flaw | Aug 14, 6:10 pm |
|---|
| 236 | Hackers exploit macOS Screen Sharing flaw to deploy Monero miner | Aug 14, 3:10 pm |
|---|
| 237 | Max severity SAP Commerce Cloud flaw now targeted in attacks | Aug 14, 2:10 pm |
|---|
| 238 | The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI | Aug 14, 2:10 pm |
|---|
| 239 | Who’s Tracking You? Use This New Service to Find Out | Aug 14, 12:10 pm |
|---|
| 240 | Shell investigates 'potential incident' after Clop data theft claims | Aug 14, 12:10 pm |
|---|
| 241 | RingCentral data breach exposed info of 1.6 million accounts | Aug 14, 11:10 am |
|---|
| 242 | Data analyst sent to prison for stealing data, extorting employer | Aug 14, 9:10 am |
|---|
| 243 | Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks | Aug 14, 2:10 am |
|---|
| 244 | ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th) | Aug 14, 2:10 am |
|---|
| 245 | Ukraine shuts down 94 fraudulent call centers, seize millions in cash | Aug 13, 10:10 pm |
|---|
| 246 | Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt | Aug 13, 9:10 pm |
|---|
| 247 | Hackers breach govt webmail while running parallel crypto fraud | Aug 13, 7:10 pm |
|---|
| 248 | AI 'watermark removers' flood the web. Almost none can prove they work. | Aug 13, 6:10 pm |
|---|
| 249 | Microsoft patches LegacyHive Windows zero-day vulnerability | Aug 13, 6:10 pm |
|---|
| 250 | Critical VMware vCenter RCE flaw exploited for reverse SSH access | Aug 13, 5:10 pm |
|---|
| 251 | Trezor discloses data breach affecting nearly 14,000 customers | Aug 13, 4:10 pm |
|---|
| 252 | White House taps security firms for offensive hack-back operations | Aug 13, 2:10 pm |
|---|
| 253 | Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion | Aug 13, 2:10 pm |
|---|
| 254 | WhatsApp rolls out new feature that flags potential scam messages | Aug 13, 12:10 pm |
|---|
| 255 | Attackers Exploit SharePoint Authentication Bypass After Public PoC Release | Aug 13, 7:10 am |
|---|
| 256 | Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th) | Aug 13, 2:10 am |
|---|
| 257 | ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th) | Aug 13, 2:10 am |
|---|
| 258 | Android malware combo takes out loans and relays victims' credit cards | Aug 12, 11:10 pm |
|---|
| 259 | "City-Forum" data-theft attacks target Salesforce, ServiceNow portals | Aug 12, 11:10 pm |
|---|
| 260 | Hackers exploit critical Adobe Commerce flaw to hijack customer accounts | Aug 12, 9:10 pm |
|---|
| 261 | Hundreds of fake Chrome VPN extensions route traffic through a proxy | Aug 12, 7:10 pm |
|---|
| 262 | Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor | Aug 12, 6:10 pm |
|---|
| 263 | Lazarus hackers exploited Windows zero-day to target defense firms | Aug 12, 4:10 pm |
|---|
| 264 | Plug and Pwn attack uses fake USB devices for Windows SYSTEM access | Aug 12, 4:10 pm |
|---|
| 265 | 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One | Aug 12, 3:10 pm |
|---|
| 266 | FBI: Hackers target online accounts to steal nude photos | Aug 12, 3:10 pm |
|---|
| 267 | Linux Kernel Process Accounting, (Wed, Aug 12th) | Aug 12, 3:10 pm |
|---|
| 268 | Enterprise Defenses Recovered at the Edge and Collapsed Inside | Aug 12, 2:10 pm |
|---|
| 269 | OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning | Aug 12, 2:10 pm |
|---|
| 270 | The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In | Aug 12, 2:10 pm |
|---|
| 271 | Hackers leverage new Microsoft SharePoint exploit in attacks | Aug 12, 1:10 pm |
|---|
| 272 | Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws | Aug 12, 12:10 pm |
|---|
| 273 | Signal adds new security feature to thwart man-in-the-middle attacks | Aug 12, 12:10 pm |
|---|
| 274 | New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges | Aug 12, 11:10 am |
|---|
| 275 | Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access | Aug 12, 10:10 am |
|---|
| 276 | Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations | Aug 12, 9:10 am |
|---|
| 277 | Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS | Aug 12, 8:10 am |
|---|
| 278 | ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access | Aug 12, 8:10 am |
|---|
| 279 | SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code | Aug 12, 8:10 am |
|---|
| 280 | Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse | Aug 12, 2:10 am |
|---|
| 281 | ISC Stormcast For Wednesday, August 12th, 2026 https://isc.sans.edu/podcastdetail/10048, (Wed, Aug 12th) | Aug 12, 2:10 am |
|---|
| 282 | DeadLock ransomware uses blockchain to resist infrastructure takedown | Aug 11, 11:10 pm |
|---|
| 283 | Microsoft Plugs Nearly 400 Security Holes | Aug 11, 10:10 pm |
|---|
| 284 | Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client | Aug 11, 9:10 pm |
|---|
| 285 | Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing | Aug 11, 9:10 pm |
|---|
| 286 | Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack | Aug 11, 9:10 pm |
|---|
| 287 | Sandworm hackers target IT pros with trojanized WireGuard VPN client | Aug 11, 9:10 pm |
|---|
| 288 | Cisco warns of ASA and FTD VPN flaw exploited to crash devices | Aug 11, 8:10 pm |
|---|
| 289 | Microsoft releases Windows 10 KB5120249 extended security update | Aug 11, 7:10 pm |
|---|
| 290 | Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees | Aug 11, 7:10 pm |
|---|
| 291 | Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands | Aug 11, 7:10 pm |
|---|
| 292 | DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt | Aug 11, 6:10 pm |
|---|
| 293 | Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE | Aug 11, 6:10 pm |
|---|
| 294 | Windows 11 KB5121003 & KB5120240 cumulative updates released | Aug 11, 6:10 pm |
|---|
| 295 | Microsoft Patch Tuesday August 2026, (Tue, Aug 11th) | Aug 11, 6:10 pm |
|---|
| 296 | Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days | Aug 11, 6:10 pm |
|---|
| 297 | Wesco confirms security incident after ExfilSquad claims data theft | Aug 11, 4:10 pm |
|---|
| 298 | OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development | Aug 11, 2:10 pm |
|---|
| 299 | Vague Task, Total Access: When AI Delegation Becomes a Security Risk | Aug 11, 2:10 pm |
|---|
| 300 | Mozilla updates GPG signing key for Firefox releases after exposure | Aug 11, 2:10 pm |
|---|
| 301 | Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers | Aug 11, 1:10 pm |
|---|
| 302 | Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo | Aug 11, 1:10 pm |
|---|
| 303 | A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices | Aug 11, 1:10 pm |
|---|
| 304 | CISA: Microsoft SharePoint flaw now exploited in ransomware attacks | Aug 11, 1:10 pm |
|---|
| 305 | DDoS attacks over 1 Tbps surged fivefold in the second quarter | Aug 11, 1:10 pm |
|---|
| 306 | Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks | Aug 11, 11:10 am |
|---|
| 307 | Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets | Aug 11, 11:10 am |
|---|
| 308 | Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 | Aug 11, 11:10 am |
|---|
| 309 | Cisco warns of high-severity ClamAV flaws with public exploits | Aug 11, 11:10 am |
|---|
| 310 | US and South Korea warn of Gunra ransomware targeting govt agencies | Aug 11, 10:10 am |
|---|
| 311 | Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine | Aug 11, 8:10 am |
|---|
| 312 | BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins | Aug 11, 7:10 am |
|---|
| 313 | ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th) | Aug 11, 2:10 am |
|---|
| 314 | Hackers breached a small Polish energy plant via private APN last year | Aug 10, 11:10 pm |
|---|
| 315 | BdThemes plugins supply-chain hack creates rogue WordPress admins | Aug 10, 10:10 pm |
|---|
| 316 | OpenAI releases ChatGPT 5.6 Cyber, but it's only for approved users | Aug 10, 8:10 pm |
|---|
| 317 | China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw | Aug 10, 6:10 pm |
|---|
| 318 | New StormEncryptor ransomware used by former Medusa affiliate | Aug 10, 6:10 pm |
|---|
| 319 | ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors | Aug 10, 5:10 pm |
|---|
| 320 | Scans for Solana (Surfpool?) Endpoints, (Mon, Aug 10th) | Aug 10, 5:10 pm |
|---|
| 321 | Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development | Aug 10, 3:10 pm |
|---|
| 322 | CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs | Aug 10, 3:10 pm |
|---|
| 323 | When Credentials Are No Longer Enough: Device Trust in the AI Era | Aug 10, 2:10 pm |
|---|
| 324 | TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore | Aug 10, 1:10 pm |
|---|
| 325 | Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development | Aug 10, 1:10 pm |
|---|
| 326 | LexisNexis shuts down services after suspicious activity on servers | Aug 10, 1:10 pm |
|---|
| 327 | New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA | Aug 10, 1:10 pm |
|---|
| 328 | Member of The Com sent to prison for blackmail, sextortion | Aug 10, 1:10 pm |
|---|
| 329 | Valve notifies Steam hardware customers of a data breach | Aug 10, 12:10 pm |
|---|
| 330 | Critical Progress LoadMaster flaw now actively exploited in attacks | Aug 10, 10:10 am |
|---|
| 331 | Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials | Aug 10, 8:10 am |
|---|
| 332 | OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause | Aug 10, 7:10 am |
|---|
| 333 | ISC Stormcast For Monday, August 10th, 2026 https://isc.sans.edu/podcastdetail/10044, (Mon, Aug 10th) | Aug 10, 2:10 am |
|---|
| 334 | Hackers breach TrueConf to trojanize client installers with backdoors | Aug 8, 3:10 pm |
|---|
| 335 | New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens | Aug 8, 10:10 am |
|---|
| 336 | Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers | Aug 8, 10:10 am |
|---|
| 337 | Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts | Aug 8, 8:10 am |
|---|
| 338 | N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist | Aug 8, 8:10 am |
|---|
| 339 | Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication | Aug 8, 8:10 am |
|---|
| 340 | Metabase SQLi zero-day exploited in customer data-theft attacks | Aug 7, 9:10 pm |
|---|
| 341 | UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data | Aug 7, 8:10 pm |
|---|
| 342 | ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets | Aug 7, 8:10 pm |
|---|
| 343 | Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer | Aug 7, 8:10 pm |
|---|
| 344 | Unlimited Technology Systems breach impacts 3.8 million people | Aug 7, 8:10 pm |
|---|
| 345 | Levi Strauss & Co. says hackers stole corporate data in cyberattack | Aug 7, 4:10 pm |
|---|
| 346 | New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP | Aug 7, 2:10 pm |
|---|
| 347 | North Carolina Ports confirms cyberattack disrupting operations | Aug 7, 2:10 pm |
|---|
| 348 | Real emails, hijacked payments: Two H1 2026 attack chains | Aug 7, 2:10 pm |
|---|
| 349 | 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers | Aug 7, 12:10 pm |
|---|
| 350 | Growing Up The Hard Way | Aug 7, 12:10 pm |
|---|
| 351 | AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day | Aug 7, 11:10 am |
|---|
| 352 | Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails | Aug 7, 11:10 am |
|---|
| 353 | Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets | Aug 7, 10:10 am |
|---|
| 354 | Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access | Aug 7, 10:10 am |
|---|
| 355 | New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables | Aug 7, 10:10 am |
|---|
| 356 | Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs | Aug 7, 8:10 am |
|---|
| 357 | TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign | Aug 7, 8:10 am |
|---|
| 358 | Linux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th) | Aug 7, 8:10 am |
|---|
| 359 | ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th) | Aug 7, 2:10 am |
|---|
| 360 | ClickFix attack pushes macOS infostealer for crypto theft attacks | Aug 6, 11:10 pm |
|---|
| 361 | OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it | Aug 6, 11:10 pm |
|---|
| 362 | Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group | Aug 6, 8:10 pm |
|---|
| 363 | Swiss government SharePoint breach compromised 200 accounts | Aug 6, 7:10 pm |
|---|
| 364 | Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs | Aug 6, 6:10 pm |
|---|
| 365 | New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts | Aug 6, 6:10 pm |
|---|
| 366 | New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes | Aug 6, 6:10 pm |
|---|
| 367 | Meta AI model hacked a company during misconfigured cyber test | Aug 6, 5:10 pm |
|---|
| 368 | New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs | Aug 6, 5:10 pm |
|---|
| 369 | Canadian Man Pleads Guilty in Snowflake Extortions | Aug 6, 5:10 pm |
|---|
| 370 | ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories | Aug 6, 4:10 pm |
|---|
| 371 | Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities | Aug 6, 2:10 pm |
|---|
| 372 | How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore | Aug 6, 2:10 pm |
|---|
| 373 | AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory | Aug 6, 1:10 pm |
|---|
| 374 | Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses | Aug 6, 1:10 pm |
|---|
| 375 | CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps | Aug 6, 1:10 pm |
|---|
| 376 | AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model | Aug 6, 10:10 am |
|---|
| 377 | Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access | Aug 6, 10:10 am |
|---|
| 378 | CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild | Aug 6, 9:10 am |
|---|
| 379 | Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service | Aug 6, 9:10 am |
|---|
| 380 | Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells | Aug 6, 9:10 am |
|---|
| 381 | Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People | Aug 6, 7:10 am |
|---|
| 382 | ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th) | Aug 6, 2:10 am |
|---|
| 383 | 22 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary], (Thu, Aug 6th) | Aug 6, 1:10 am |
|---|
| 384 | Ransom Cartel ransomware creator sentenced to 16 years in prison | Aug 5, 11:10 pm |
|---|
| 385 | Canadian pleads guilty to Snowflake cloud data-theft attacks | Aug 5, 10:10 pm |
|---|
| 386 | Hackers run khunt post-exploitation toolkit from Oracle database | Aug 5, 8:10 pm |
|---|
| 387 | OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes | Aug 5, 7:10 pm |
|---|
| 388 | Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures | Aug 5, 7:10 pm |
|---|
| 389 | COLDCARD security audit phishing attack installs remote access tool | Aug 5, 6:10 pm |
|---|
| 390 | Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm, (Wed, Aug 5th) | Aug 5, 6:10 pm |
|---|
| 391 | Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain | Aug 5, 5:10 pm |
|---|
| 392 | Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports | Aug 5, 5:10 pm |
|---|
| 393 | Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt | Aug 5, 5:10 pm |
|---|
| 394 | CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws | Aug 5, 4:10 pm |
|---|
| 395 | Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses | Aug 5, 3:10 pm |
|---|
| 396 | How AI-powered phishing killed blocklists for good | Aug 5, 3:10 pm |
|---|
| 397 | Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug | Aug 5, 3:10 pm |
|---|
| 398 | Google Blogger locks hundreds of blogs in malware false positive | Aug 5, 3:10 pm |
|---|
| 399 | Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk | Aug 5, 1:10 pm |
|---|
| 400 | New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch | Aug 5, 1:10 pm |
|---|
| 401 | Leaked n8n API Tokens Exposed Live Instances to Credential Theft | Aug 5, 12:10 pm |
|---|
| 402 | Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup | Aug 5, 12:10 pm |
|---|
| 403 | Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data | Aug 5, 10:10 am |
|---|
| 404 | CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited | Aug 5, 9:10 am |
|---|
| 405 | Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself | Aug 5, 9:10 am |
|---|
| 406 | QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer | Aug 5, 7:10 am |
|---|
| 407 | ISC Stormcast For Wednesday, August 5th, 2026 https://isc.sans.edu/podcastdetail/10038, (Wed, Aug 5th) | Aug 5, 2:10 am |
|---|
| 408 | OpenAI, Anthropic AI agents targeted real people and systems in cyber tests | Aug 5, 12:10 am |
|---|
| 409 | TP-Link patches Omada ZTP flaws allowing hackers to breach networks | Aug 4, 11:10 pm |
|---|
| 410 | Phishing service spoofs RingCentral to steal Microsoft 365 accounts | Aug 4, 10:10 pm |
|---|
| 411 | 77 Open VSX extensions found harvesting developer info | Aug 4, 7:10 pm |
|---|
| 412 | New XCSSET variant targets macOS devs via compromised Xcode projects | Aug 4, 7:10 pm |
|---|
| 413 | Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens | Aug 4, 6:10 pm |
|---|
| 414 | Massive ChainDrop npm supply-chain attack infects hundreds of packages | Aug 4, 4:10 pm |
|---|
| 415 | Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access | Aug 4, 2:10 pm |
|---|
| 416 | Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks | Aug 4, 2:10 pm |
|---|
| 417 | Varonis Agent IBAC keeps AI agents within their intended boundaries | Aug 4, 2:10 pm |
|---|
| 418 | Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent | Aug 4, 1:10 pm |
|---|
| 419 | When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted | Aug 4, 1:10 pm |
|---|
| 420 | Botnet Hunting for Vulnerabilities in Diagnostic Tools, (Tue, Aug 4th) | Aug 4, 1:10 pm |
|---|
| 421 | DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT | Aug 4, 11:10 am |
|---|
| 422 | New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root | Aug 4, 11:10 am |
|---|
| 423 | CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises | Aug 4, 8:10 am |
|---|
| 424 | ISC Stormcast For Tuesday, August 4th, 2026 https://isc.sans.edu/podcastdetail/10036, (Tue, Aug 4th) | Aug 4, 2:10 am |
|---|
| 425 | Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts | Aug 4, 1:10 am |
|---|
| 426 | New Pass-ta-key attacks let malware hijack Google-synced passkeys | Aug 4, 12:10 am |
|---|
| 427 | Fake Roblox Xeno script launcher pushes infostealer, RAT malware | Aug 3, 8:10 pm |
|---|
| 428 | New DOUBLECUP ClickFix service hides malware in browser cache images | Aug 3, 8:10 pm |
|---|
| 429 | 18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users | Aug 3, 7:10 pm |
|---|
| 430 | INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws | Aug 3, 5:10 pm |
|---|
| 431 | Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts | Aug 3, 5:10 pm |
|---|
| 432 | N-able warns of N-central auth bypass flaw exploited in attacks | Aug 3, 5:10 pm |
|---|
| 433 | ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks | Aug 3, 3:10 pm |
|---|
| 434 | Inside the Underground Business of the Android BTMOB RAT malware | Aug 3, 3:10 pm |
|---|
| 435 | ExfilSquad hackers leak info of over 100,000 UK police officers, staff | Aug 3, 3:10 pm |
|---|
| 436 | FOMO in the SOC: Where AI Platforms like Claude Actually Fit | Aug 3, 12:10 pm |
|---|
| 437 | PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web | Aug 3, 11:10 am |
|---|
| 438 | Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS | Aug 3, 11:10 am |
|---|
| 439 | Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable | Aug 3, 9:10 am |
|---|
| 440 | Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code | Aug 3, 8:10 am |
|---|
| 441 | N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete | Aug 3, 8:10 am |
|---|
| 442 | ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd) | Aug 3, 2:10 am |
|---|
| 443 | OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems | Aug 2, 11:10 pm |
|---|
| 444 | COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft | Aug 2, 10:10 pm |
|---|
| 445 | Google Chrome may soon block New Tab hijacker extensions by default | Aug 2, 3:10 pm |
|---|
| 446 | Atomic MacOS (AMOS) stealer infection, (Sun, Aug 2nd) | Aug 2, 4:10 am |
|---|
| 447 | Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes | Aug 1, 6:10 pm |
|---|
| 448 | Rails patches critical Active Storage flaw with RCE potential | Aug 1, 3:10 pm |
|---|
| 449 | Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites | Aug 1, 10:10 am |
|---|
| 450 | Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware | Aug 1, 8:10 am |
|---|
| 451 | Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction | Aug 1, 8:10 am |
|---|
| 452 | Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st) | Aug 1, 8:10 am |
|---|
| 453 | Amgen says cloud data breach exposed patient health, proprietary info | Jul 31, 11:10 pm |
|---|
| 454 | Arch Linux disables AUR package adoption to stop malware flood | Jul 31, 10:10 pm |
|---|
| 455 | Online ad firm Adform’s script compromised to steal cryptocurrency | Jul 31, 9:10 pm |
|---|
| 456 | Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk | Jul 31, 8:10 pm |
|---|
| 457 | OpenAI says its new GPT 5.6 models are becoming more cost-efficient | Jul 31, 7:10 pm |
|---|
| 458 | HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm | Jul 31, 6:10 pm |
|---|
| 459 | Hacker uses DeepSeek AI to autonomously attack vulnerable servers | Jul 31, 6:10 pm |
|---|
| 460 | CISA warns of cyberattacks disrupting U.S. water utilities | Jul 31, 5:10 pm |
|---|
| 461 | Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies | Jul 31, 4:10 pm |
|---|
| 462 | Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw | Jul 31, 3:10 pm |
|---|
| 463 | Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined | Jul 31, 3:10 pm |
|---|
| 464 | ESET tracks rise in malicious AI skills and adaptable malware | Jul 31, 3:10 pm |
|---|
| 465 | Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations | Jul 31, 12:10 pm |
|---|
| 466 | Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks | Jul 31, 12:10 pm |
|---|
| 467 | 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 | Jul 31, 12:10 pm |
|---|
| 468 | zipdump.py: Metadata Encoding, (Fri, Jul 31st) | Jul 31, 10:10 am |
|---|
| 469 | ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st) | Jul 31, 2:10 am |
|---|
| 470 | Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests | Jul 31, 1:10 am |
|---|
| 471 | South Korea fines telco giant KT $39 million for customer data breach | Jul 30, 11:10 pm |
|---|
| 472 | JetBrains warns of critical TeamCity remote code execution flaw | Jul 30, 10:10 pm |
|---|
| 473 | DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware | Jul 30, 8:10 pm |
|---|
| 474 | Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers | Jul 30, 7:10 pm |
|---|
| 475 | VMware fixes three critical flaws allowing auth bypass, VM escapes | Jul 30, 6:10 pm |
|---|
| 476 | ShinyHunters claims Brinks Home breach, threatens to leak stolen data | Jul 30, 5:10 pm |
|---|
| 477 | Read This Before You Buy That TV Streaming Stick | Jul 30, 5:10 pm |
|---|
| 478 | Google says AI helped Chrome fix 1,072 security bugs in two releases | Jul 30, 5:10 pm |
|---|
| 479 | Analog Devices discloses data breach, says operations unaffected | Jul 30, 4:10 pm |
|---|
| 480 | ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories | Jul 30, 4:10 pm |
|---|
| 481 | Microsoft Teams vishing attacks lead to Chaos ransomware attacks | Jul 30, 4:10 pm |
|---|
| 482 | Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database | Jul 30, 3:10 pm |
|---|
| 483 | After the Break-In: What Attackers Do Once They're Already Inside | Jul 30, 2:10 pm |
|---|
| 484 | The Network Has Become the Control Plane for AI Security | Jul 30, 1:10 pm |
|---|
| 485 | Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents | Jul 30, 1:10 pm |
|---|
| 486 | SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT | Jul 30, 11:10 am |
|---|
| 487 | Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts | Jul 30, 11:10 am |
|---|
| 488 | FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks | Jul 30, 8:10 am |
|---|
| 489 | Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation | Jul 30, 8:10 am |
|---|
| 490 | Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet | Jul 30, 7:10 am |
|---|
| 491 | Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data | Jul 30, 6:10 am |
|---|
| 492 | ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th) | Jul 30, 2:10 am |
|---|
| 493 | Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th) | Jul 30, 1:10 am |
|---|
| 494 | Russian hackers exploit Exchange OWA zero-day for long-term mailbox access | Jul 30, 12:10 am |
|---|
| 495 | Cisco warns of FMC static credential flaw exploited in zero-day attacks | Jul 29, 10:10 pm |
|---|
| 496 | Anthropic confirms Claude is down worldwide | Jul 29, 9:10 pm |
|---|
| 497 | Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads | Jul 29, 7:10 pm |
|---|
| 498 | Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack | Jul 29, 6:10 pm |
|---|
| 499 | Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare | Jul 29, 6:10 pm |
|---|
| 500 | Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape | Jul 29, 4:10 pm |
|---|
