| 1 | Vanderbilt University hit in BYOD ransomware attack, data theft claimed | Nov 10, 12:10 am |
|---|
| 2 | York University breach exposed personal information dating to 2007 | Nov 9, 10:10 pm |
|---|
| 3 | N-able takes cloud platform offline after 30+ "zero-days" published | Nov 9, 10:10 pm |
|---|
| 4 | SEGA newsletter data breach exposes 2.2 million email addresses | Nov 9, 10:10 pm |
|---|
| 5 | Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th) | Nov 9, 7:10 pm |
|---|
| 6 | France blames Iranian hackers for supermarket attacks that sparked fires | Nov 9, 7:10 pm |
|---|
| 7 | Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware | Nov 9, 6:10 pm |
|---|
| 8 | Russian cloud firm Beget rebuilds from scratch after data wiper attack | Nov 9, 6:10 pm |
|---|
| 9 | Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data | Nov 9, 6:10 pm |
|---|
| 10 | Binance denies data breach after alleged ShinyHunters claims | Nov 9, 5:10 pm |
|---|
| 11 | Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia | Nov 9, 4:10 pm |
|---|
| 12 | Hackers exploit SSHole OpenSSH flaw to breach Linux systems | Nov 9, 4:10 pm |
|---|
| 13 | ⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More | Nov 9, 3:10 pm |
|---|
| 14 | FBI agent stole $2.5 million in crypto from hackers under investigation | Nov 9, 3:10 pm |
|---|
| 15 | The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI. | Nov 9, 3:10 pm |
|---|
| 16 | US bans MEXC crypto exchange over sanctions evasion, cybercrime links | Nov 9, 2:10 pm |
|---|
| 17 | Ukraine dismantles crypto scam network that stole €4.3 million | Nov 9, 1:10 pm |
|---|
| 18 | Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety | Nov 9, 12:10 pm |
|---|
| 19 | Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars | Nov 9, 12:10 pm |
|---|
| 20 | LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks | Nov 9, 11:10 am |
|---|
| 21 | Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records | Nov 9, 10:10 am |
|---|
| 22 | Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room | Nov 9, 8:10 am |
|---|
| 23 | U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses | Nov 9, 7:10 am |
|---|
| 24 | CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation | Nov 9, 6:10 am |
|---|
| 25 | ISC Stormcast For Monday, November 9th, 2026 https://isc.sans.edu/podcastdetail/10170, (Mon, Nov 9th) | Nov 9, 2:10 am |
|---|
| 26 | Iris Ohyama data cloud breach exposes info of 7.7 million customers | Nov 8, 4:10 pm |
|---|
| 27 | Scans for Sshole Vulnerability (CVE-2026-123158), (Sun, Nov 8th) | Nov 8, 4:10 pm |
|---|
| 28 | Hackers pull off $133 million French bank heist via service provider | Nov 7, 4:10 pm |
|---|
| 29 | CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands | Nov 7, 3:10 pm |
|---|
| 30 | Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub | Nov 7, 8:10 am |
|---|
| 31 | SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks | Nov 7, 12:10 am |
|---|
| 32 | Runaway AI hacking agent behind WorkOS breach after escaping sandbox | Nov 6, 11:10 pm |
|---|
| 33 | OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs | Nov 6, 9:10 pm |
|---|
| 34 | Fake security tools on GitHub push backdoors and infostealers | Nov 6, 7:10 pm |
|---|
| 35 | OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits | Nov 6, 5:10 pm |
|---|
| 36 | Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot | Nov 6, 5:10 pm |
|---|
| 37 | Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time | Nov 6, 5:10 pm |
|---|
| 38 | QNAP says hackers breaching NAS devices in Plex2Shell attacks | Nov 6, 5:10 pm |
|---|
| 39 | Veeam warns of Software Appliance boot failures on AMD EPYC hosts | Nov 6, 4:10 pm |
|---|
| 40 | Chainalysis says breach exposed credentials for all customers | Nov 6, 3:10 pm |
|---|
| 41 | IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It | Nov 6, 3:10 pm |
|---|
| 42 | Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers | Nov 6, 1:10 pm |
|---|
| 43 | Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It | Nov 6, 1:10 pm |
|---|
| 44 | D-Link warns of multiple zero-days in DGS-3130 Series switches | Nov 6, 1:10 pm |
|---|
| 45 | The Flood is Coming And The Pipes Were Already Full | Nov 6, 12:10 pm |
|---|
| 46 | MetaMask says recent attack didn't affect wallet infrastructure | Nov 6, 10:10 am |
|---|
| 47 | Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services | Nov 6, 9:10 am |
|---|
| 48 | Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login | Nov 6, 7:10 am |
|---|
| 49 | Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs | Nov 6, 7:10 am |
|---|
| 50 | ISC Stormcast For Friday, November 6th, 2026 https://isc.sans.edu/podcastdetail/10168, (Fri, Nov 6th) | Nov 6, 2:10 am |
|---|
| 51 | FBI, CISA warn of cyberattacks targeting refrigeration systems | Nov 6, 1:10 am |
|---|
| 52 | Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction | Nov 5, 10:10 pm |
|---|
| 53 | OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux | Nov 5, 10:10 pm |
|---|
| 54 | Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts | Nov 5, 10:10 pm |
|---|
| 55 | Nearly 1.5 million exposed secrets targeted in new revocation program | Nov 5, 9:10 pm |
|---|
| 56 | OpenAI’s GPT-6 Astra silently obstructed safety research tasks | Nov 5, 8:10 pm |
|---|
| 57 | OpenSSH flaw lets attackers log into password-disabled Linux accounts | Nov 5, 6:10 pm |
|---|
| 58 | DigiCert data breach exposes customer information, identity documents | Nov 5, 5:10 pm |
|---|
| 59 | Hackers backdoor Linux servers using trojanized CWP web server | Nov 5, 5:10 pm |
|---|
| 60 | ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories | Nov 5, 4:10 pm |
|---|
| 61 | Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th) | Nov 5, 4:10 pm |
|---|
| 62 | Closing the Identity Gap at the Service Desk | Nov 5, 3:10 pm |
|---|
| 63 | Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out | Nov 5, 2:10 pm |
|---|
| 64 | ISC Stormcast For Thursday, November 5th, 2026 https://isc.sans.edu/podcastdetail/10166, (Thu, Nov 5th) | Nov 5, 12:10 pm |
|---|
| 65 | 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 | Nov 5, 11:10 am |
|---|
| 66 | CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access | Nov 5, 10:10 am |
|---|
| 67 | Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content | Nov 5, 10:10 am |
|---|
| 68 | GhostMap Android flaw lets malicious app trigger persistent boot loop | Nov 5, 10:10 am |
|---|
| 69 | Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution | Nov 5, 9:10 am |
|---|
| 70 | Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says | Nov 5, 7:10 am |
|---|
| 71 | OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run | Nov 5, 5:10 am |
|---|
| 72 | Want to Rent an Internet Address at the White House? | Nov 5, 5:10 am |
|---|
| 73 | Vercel rolls out new protection against stolen session cookie attacks | Nov 4, 10:10 pm |
|---|
| 74 | Zyxel fixes zero-day exploited to hack nearly 1,000 network switches | Nov 4, 9:10 pm |
|---|
| 75 | DreamHost confirms data breach exposed FTP logins and webmail sessions | Nov 4, 8:10 pm |
|---|
| 76 | Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit | Nov 4, 6:10 pm |
|---|
| 77 | SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records | Nov 4, 6:10 pm |
|---|
| 78 | Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root | Nov 4, 6:10 pm |
|---|
| 79 | Cyberattack disrupts blood storage refrigeration systems in France | Nov 4, 6:10 pm |
|---|
| 80 | NIKKE PC game launcher hacked to spread remote access, data-stealing malware | Nov 4, 5:10 pm |
|---|
| 81 | mSecure password manager hack prompts password reset warnings | Nov 4, 4:10 pm |
|---|
| 82 | APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits | Nov 4, 3:10 pm |
|---|
| 83 | SonicWall warns of unpatched flaws in end-of-life GMS software | Nov 4, 3:10 pm |
|---|
| 84 | Google Calendar phishing campaign hijacks sessions, bypasses MFA | Nov 4, 3:10 pm |
|---|
| 85 | US charges two Canadians accused of hacking US universities | Nov 4, 2:10 pm |
|---|
| 86 | The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th) | Nov 4, 2:10 pm |
|---|
| 87 | China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor | Nov 4, 1:10 pm |
|---|
| 88 | Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It | Nov 4, 1:10 pm |
|---|
| 89 | Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory | Nov 4, 1:10 pm |
|---|
| 90 | Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads | Nov 4, 1:10 pm |
|---|
| 91 | CISA flags WordPress RCE flaw as actively exploited in attacks | Nov 4, 1:10 pm |
|---|
| 92 | Hackers use n-day exploits in zero-click attacks on iOS, Android devices | Nov 4, 10:10 am |
|---|
| 93 | Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction | Nov 4, 9:10 am |
|---|
| 94 | Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure | Nov 4, 9:10 am |
|---|
| 95 | CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades | Nov 4, 8:10 am |
|---|
| 96 | ISC Stormcast For Wednesday, November 4th, 2026 https://isc.sans.edu/podcastdetail/10164, (Wed, Nov 4th) | Nov 4, 2:10 am |
|---|
| 97 | Hackers hijack cPGuard autoupdate to deploy backdoor, steal data | Nov 3, 11:10 pm |
|---|
| 98 | WorkOS says attacker used ARTEX AI to breach internal sales app | Nov 3, 10:10 pm |
|---|
| 99 | Binance says fake job interview led to $6.3 billion crypto heist | Nov 3, 8:10 pm |
|---|
| 100 | Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes | Nov 3, 7:10 pm |
|---|
| 101 | mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity | Nov 3, 7:10 pm |
|---|
| 102 | Google: LLMjacking attacks rack up $1 million in cloud AI charges | Nov 3, 7:10 pm |
|---|
| 103 | Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access | Nov 3, 6:10 pm |
|---|
| 104 | Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft | Nov 3, 6:10 pm |
|---|
| 105 | cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes | Nov 3, 4:10 pm |
|---|
| 106 | Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges | Nov 3, 4:10 pm |
|---|
| 107 | Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028 | Nov 3, 3:10 pm |
|---|
| 108 | Barracuda warns of critical flaws allowing root access to devices | Nov 3, 3:10 pm |
|---|
| 109 | Police seizes over 100 servers in investment scam crackdown | Nov 3, 2:10 pm |
|---|
| 110 | UK school estate hit by 3AM ransomware in suspected AI-assisted attack | Nov 3, 2:10 pm |
|---|
| 111 | Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware | Nov 3, 1:10 pm |
|---|
| 112 | The 4 Elements of Exposure Prioritization and How to Operationalize Them | Nov 3, 1:10 pm |
|---|
| 113 | Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing | Nov 3, 1:10 pm |
|---|
| 114 | Google adds new $250,000 Cloud VRP reward for Root-in-Cloud bugs | Nov 3, 12:10 pm |
|---|
| 115 | Harvard University data breach exposed info of 851,000 accounts | Nov 3, 11:10 am |
|---|
| 116 | Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets | Nov 3, 10:10 am |
|---|
| 117 | New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food | Nov 3, 8:10 am |
|---|
| 118 | Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw | Nov 3, 8:10 am |
|---|
| 119 | Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials | Nov 3, 6:10 am |
|---|
| 120 | Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors | Nov 3, 6:10 am |
|---|
| 121 | Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies | Nov 3, 3:10 am |
|---|
| 122 | ISC Stormcast For Tuesday, November 3rd, 2026 https://isc.sans.edu/podcastdetail/10162, (Tue, Nov 3rd) | Nov 3, 2:10 am |
|---|
| 123 | Chinese hackers use ARTEX AI in automated attacks against 200 orgs | Nov 2, 10:10 pm |
|---|
| 124 | ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More | Nov 2, 7:10 pm |
|---|
| 125 | Google disrupts million-device XCPE Android malware botnet, bans TV box maker | Nov 2, 7:10 pm |
|---|
| 126 | Fintech platform Sageworks taken offline after suspected cyberattack | Nov 2, 7:10 pm |
|---|
| 127 | Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access | Nov 2, 5:10 pm |
|---|
| 128 | BTCPay Server warns of hot wallet crypto thefts on outdated instances | Nov 2, 4:10 pm |
|---|
| 129 | Hackers disrupt refrigeration systems at European supermarkets | Nov 2, 3:10 pm |
|---|
| 130 | DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment | Nov 2, 3:10 pm |
|---|
| 131 | Mutipath TCP: Use and Detection, (Mon, Nov 2nd) | Nov 2, 3:10 pm |
|---|
| 132 | Your Mobile Carrier Stores Your Call Logs for Years | Nov 2, 3:10 pm |
|---|
| 133 | BTCPay Server warns of hot wallet thefts targeting outdated instances | Nov 2, 3:10 pm |
|---|
| 134 | Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy | Nov 2, 2:10 pm |
|---|
| 135 | Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers | Nov 2, 2:10 pm |
|---|
| 136 | Microsoft fixes Smart App Control broken by October Windows update | Nov 2, 2:10 pm |
|---|
| 137 | Over 1,000 GitLab servers vulnerable to ongoing RCE attacks | Nov 2, 1:10 pm |
|---|
| 138 | Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts | Nov 2, 12:10 pm |
|---|
| 139 | Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data | Nov 2, 12:10 pm |
|---|
| 140 | Synology warns of C3RB3R ransomware attacks targeting NAS devices | Nov 2, 12:10 pm |
|---|
| 141 | Ivanti patches two more Connect Secure zero-days chained in attacks | Nov 2, 10:10 am |
|---|
| 142 | New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value | Nov 2, 6:10 am |
|---|
| 143 | ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd) | Nov 2, 2:10 am |
|---|
| 144 | FBI links $6.3 billion Binance crypto heist to North Korean hackers | Nov 1, 8:10 pm |
|---|
| 145 | Alpine Linux rebuilds GitLab after attempted RCE attack | Nov 1, 4:10 pm |
|---|
| 146 | OpenAI says it's doubling Pro usage limits and bringing Work features to Chat | Nov 1, 2:10 pm |
|---|
| 147 | CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key | Nov 1, 10:10 am |
|---|
| 148 | OneNote File Extraction, (Sun, Nov 1st) | Nov 1, 10:10 am |
|---|
| 149 | FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist | Nov 1, 8:10 am |
|---|
| 150 | NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection | Nov 1, 8:10 am |
|---|
| 151 | Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script | Nov 1, 8:10 am |
|---|
| 152 | Northflank security breach leads to abuse of customers' AI API keys | Oct 31, 6:10 pm |
|---|
| 153 | New Android SMS of Death exploit can remotely crash unpatched phones | Oct 31, 4:10 pm |
|---|
| 154 | From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era. | Oct 31, 2:10 pm |
|---|
| 155 | Reddit to lock content behind logins to fight scrapers | Oct 31, 2:10 pm |
|---|
| 156 | Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data | Oct 31, 1:10 pm |
|---|
| 157 | Chainalysis discloses data breach from "offensive agentic techniques" | Oct 31, 1:10 pm |
|---|
| 158 | YARA-X 1.22.1 Release, (Sat, Oct 31st) | Oct 31, 11:10 am |
|---|
| 159 | Wireshark 5.0.0rc1 Release, (Sat, Oct 31st) | Oct 31, 11:10 am |
|---|
| 160 | Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access | Oct 31, 10:10 am |
|---|
| 161 | Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% | Oct 31, 6:10 am |
|---|
| 162 | A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats | Oct 31, 6:10 am |
|---|
| 163 | Critical Linux kernel flaw allows remote root attacks on MPTCP servers | Oct 30, 10:10 pm |
|---|
| 164 | Linux kernel exploit enables remote root attacks on MPTCP servers | Oct 30, 9:10 pm |
|---|
| 165 | Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide | Oct 30, 7:10 pm |
|---|
| 166 | WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours | Oct 30, 5:10 pm |
|---|
| 167 | TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them | Oct 30, 5:10 pm |
|---|
| 168 | Trezor warns of suspected crypto-theft implant in hardware wallet | Oct 30, 4:10 pm |
|---|
| 169 | Malicious Claude Code extension on Cursor planted SSH backdoors | Oct 30, 3:10 pm |
|---|
| 170 | SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone | Oct 30, 2:10 pm |
|---|
| 171 | Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor | Oct 30, 1:10 pm |
|---|
| 172 | Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison | Oct 30, 1:10 pm |
|---|
| 173 | Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving | Oct 30, 1:10 pm |
|---|
| 174 | Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis | Oct 30, 1:10 pm |
|---|
| 175 | CISA says max severity GitLab flaw now exploited in the wild | Oct 30, 1:10 pm |
|---|
| 176 | Microsoft finally fixes VPN issues caused by September updates | Oct 30, 12:10 pm |
|---|
| 177 | Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor | Oct 30, 11:10 am |
|---|
| 178 | Drupal warns of critical Commerce Core flaw exploited in attacks | Oct 30, 11:10 am |
|---|
| 179 | Binance links $6.3 billion crypto theft to compromised DevOps laptop | Oct 30, 10:10 am |
|---|
| 180 | Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw | Oct 30, 9:10 am |
|---|
| 181 | CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV | Oct 30, 8:10 am |
|---|
| 182 | Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen | Oct 30, 6:10 am |
|---|
| 183 | ISC Stormcast For Friday, October 30th, 2026 https://isc.sans.edu/podcastdetail/10158, (Fri, Oct 30th) | Oct 30, 4:10 am |
|---|
| 184 | OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut | Oct 30, 12:10 am |
|---|
| 185 | Binance probes potential $5.8 billion crypto-theft hack | Oct 29, 11:10 pm |
|---|
| 186 | Polymarket halts trading after crypto-draining script breach, $2.5M traced | Oct 29, 10:10 pm |
|---|
| 187 | Japan Airlines suffers third-party data breach exposing passenger info | Oct 29, 10:10 pm |
|---|
| 188 | Hugging Face malware campaign returns to hijack GPUs for crypto mining | Oct 29, 10:10 pm |
|---|
| 189 | ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories | Oct 29, 8:10 pm |
|---|
| 190 | Fake crypto app on Apple App Store linked to $23K wallet theft | Oct 29, 8:10 pm |
|---|
| 191 | Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware | Oct 29, 7:10 pm |
|---|
| 192 | Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions | Oct 29, 5:10 pm |
|---|
| 193 | Chrome extensions with 13.4 million installs caught hijacking searches | Oct 29, 5:10 pm |
|---|
| 194 | Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners | Oct 29, 4:10 pm |
|---|
| 195 | Microsoft fixes Remote Desktop failures caused by recent Windows updates | Oct 29, 3:10 pm |
|---|
| 196 | Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities | Oct 29, 2:10 pm |
|---|
| 197 | CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks | Oct 29, 2:10 pm |
|---|
| 198 | 3 Ways AI Agents Already Operate in Your Browser | Oct 29, 2:10 pm |
|---|
| 199 | 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories | Oct 29, 1:10 pm |
|---|
| 200 | The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers | Oct 29, 1:10 pm |
|---|
| 201 | Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls | Oct 29, 1:10 pm |
|---|
| 202 | Webinar: How to Build AI Threat Readiness Into Your Security Operations | Oct 29, 1:10 pm |
|---|
| 203 | New Cisco firewall zero-day exploited to crash SSL VPN devices | Oct 29, 12:10 pm |
|---|
| 204 | Windows 11 KB5127936 update released with 41 changes and fixes | Oct 29, 12:10 pm |
|---|
| 205 | Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open | Oct 29, 11:10 am |
|---|
| 206 | GitHub Launches npm Firewall to Block Malicious Packages Before Installation | Oct 29, 11:10 am |
|---|
| 207 | Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls | Oct 29, 11:10 am |
|---|
| 208 | Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys | Oct 29, 9:10 am |
|---|
| 209 | Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces | Oct 29, 7:10 am |
|---|
| 210 | Deploying a Local Ghidra Server for Your Malware Analysis Lab, (Thu, Oct 29th) | Oct 29, 7:10 am |
|---|
| 211 | China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility | Oct 29, 7:10 am |
|---|
| 212 | ISC Stormcast For Thursday, October 29th, 2026 https://isc.sans.edu/podcastdetail/10156, (Thu, Oct 29th) | Oct 29, 4:10 am |
|---|
| 213 | Police seize Virtualine bulletproof service tied to ransowmare, cybercrime | Oct 28, 9:10 pm |
|---|
| 214 | Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns | Oct 28, 7:10 pm |
|---|
| 215 | Discord to let search engines index public server messages | Oct 28, 7:10 pm |
|---|
| 216 | Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win | Oct 28, 6:10 pm |
|---|
| 217 | Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S. | Oct 28, 6:10 pm |
|---|
| 218 | PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network | Oct 28, 5:10 pm |
|---|
| 219 | Yet Another ClickFix Campaign, (Wed, Oct 28th) | Oct 28, 5:10 pm |
|---|
| 220 | Sony ISP subsidiary data breach exposes 2.5 million customer records | Oct 28, 5:10 pm |
|---|
| 221 | Volt Typhoon hides zero-day attacks using 'Silent Train' framework | Oct 28, 4:10 pm |
|---|
| 222 | Microsoft urges Entra ID admins to migrate users to passkeys | Oct 28, 3:10 pm |
|---|
| 223 | Wazuh and AI for Enhanced SOC Workflows | Oct 28, 2:10 pm |
|---|
| 224 | Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers | Oct 28, 2:10 pm |
|---|
| 225 | Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch | Oct 28, 2:10 pm |
|---|
| 226 | Even after PHP2Shell, blast radius matters more than a CVSS score | Oct 28, 2:10 pm |
|---|
| 227 | InfraTrust report warns of exploited flaws in critical network infrastructure | Oct 28, 2:10 pm |
|---|
| 228 | Hackers now scanning systems for recently-patched Oracle flaw | Oct 28, 1:10 pm |
|---|
| 229 | American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed | Oct 28, 12:10 pm |
|---|
| 230 | Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass | Oct 28, 12:10 pm |
|---|
| 231 | CISA warns of hackers now exploiting critical Node2Shell flaw | Oct 28, 11:10 am |
|---|
| 232 | Nefilim and Hive ransomware affiliate gets 70 months in prison | Oct 28, 10:10 am |
|---|
| 233 | FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering | Oct 28, 9:10 am |
|---|
| 234 | Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits | Oct 28, 9:10 am |
|---|
| 235 | Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges | Oct 28, 8:10 am |
|---|
| 236 | ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws | Oct 28, 8:10 am |
|---|
| 237 | Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers | Oct 28, 8:10 am |
|---|
| 238 | Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach | Oct 28, 8:10 am |
|---|
| 239 | ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th) | Oct 28, 3:10 am |
|---|
| 240 | Japan's GMO urges customers to shut down PCs amid ransomware threat | Oct 28, 12:10 am |
|---|
| 241 | OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests | Oct 27, 11:10 pm |
|---|
| 242 | UNM Health ransomware attack disrupts patient care, surgeries | Oct 27, 10:10 pm |
|---|
| 243 | Hackers hijack Convertr analytics script to steal payment card data | Oct 27, 9:10 pm |
|---|
| 244 | Microsoft releases Windows OOB updates to distrust eMudhra certificates | Oct 27, 7:10 pm |
|---|
| 245 | CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets | Oct 27, 7:10 pm |
|---|
| 246 | Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads | Oct 27, 5:10 pm |
|---|
| 247 | GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption | Oct 27, 5:10 pm |
|---|
| 248 | Warp discloses breach exposing AI agent logs, user telemetry data | Oct 27, 5:10 pm |
|---|
| 249 | The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest | Oct 27, 2:10 pm |
|---|
| 250 | Tailscale warns of SSH flaws allowing root privilege escalation | Oct 27, 2:10 pm |
|---|
| 251 | Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption | Oct 27, 1:10 pm |
|---|
| 252 | AI-Generated Fake Login Pages Are Making Account Takeovers Easier | Oct 27, 1:10 pm |
|---|
| 253 | Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key | Oct 27, 1:10 pm |
|---|
| 254 | Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens | Oct 27, 1:10 pm |
|---|
| 255 | Apple backports CoreGraphics zero-day patches to older iPhones | Oct 27, 11:10 am |
|---|
| 256 | OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections | Oct 27, 10:10 am |
|---|
| 257 | Energy giant ENGIE discloses data breach affecting customers | Oct 27, 10:10 am |
|---|
| 258 | Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers | Oct 27, 10:10 am |
|---|
| 259 | CISA confirms PHP2Shell vulnerabilities now exploited in attacks | Oct 27, 9:10 am |
|---|
| 260 | Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses | Oct 27, 7:10 am |
|---|
| 261 | CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution | Oct 27, 6:10 am |
|---|
| 262 | ISC Stormcast For Tuesday, October 27th, 2026 https://isc.sans.edu/podcastdetail/10152, (Tue, Oct 27th) | Oct 27, 3:10 am |
|---|
| 263 | Apple Patches for October 2026, (Mon, Oct 26th) | Oct 27, 12:10 am |
|---|
| 264 | University of Copenhagen data breach exposes data of 525,000 people | Oct 26, 11:10 pm |
|---|
| 265 | OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing | Oct 26, 9:10 pm |
|---|
| 266 | Former pentester used ARTEX AI to steal 8.2 million data records | Oct 26, 9:10 pm |
|---|
| 267 | Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento | Oct 26, 8:10 pm |
|---|
| 268 | DreamHost forces password resets in ongoing "incident" | Oct 26, 8:10 pm |
|---|
| 269 | Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware | Oct 26, 6:10 pm |
|---|
| 270 | PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw | Oct 26, 6:10 pm |
|---|
| 271 | Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches | Oct 26, 5:10 pm |
|---|
| 272 | Microsoft releases emergency .NET patches for critical Brotli flaw | Oct 26, 4:10 pm |
|---|
| 273 | ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More | Oct 26, 3:10 pm |
|---|
| 274 | Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes | Oct 26, 2:10 pm |
|---|
| 275 | Chinese man extradited for role in $36 million cryptocurrency scam | Oct 26, 2:10 pm |
|---|
| 276 | When an AI Agent Is the Incident, the Identity Record Is the Evidence | Oct 26, 2:10 pm |
|---|
| 277 | Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses | Oct 26, 12:10 pm |
|---|
| 278 | uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts | Oct 26, 11:10 am |
|---|
| 279 | Kali Linux 2026.3 released with 6 new tools, desktop updates | Oct 26, 11:10 am |
|---|
| 280 | Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs | Oct 26, 10:10 am |
|---|
| 281 | Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations | Oct 26, 10:10 am |
|---|
| 282 | PHP2Shell security flaws now sucessfully exploited in the wild | Oct 26, 10:10 am |
|---|
| 283 | Looking for a Language [Guest Diary], (Wed, Oct 21st) | Oct 26, 10:10 am |
|---|
| 284 | Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware | Oct 26, 8:10 am |
|---|
| 285 | PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity | Oct 26, 5:10 am |
|---|
| 286 | ISC Stormcast For Monday, October 26th, 2026 https://isc.sans.edu/podcastdetail/10150, (Mon, Oct 26th) | Oct 26, 4:10 am |
|---|
| 287 | YARA-X 1.22.0 Release, (Sun, Oct 25th) | Oct 25, 8:10 pm |
|---|
| 288 | PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking | Oct 25, 7:10 pm |
|---|
| 289 | Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers | Oct 25, 7:10 pm |
|---|
| 290 | AI coding agents hijacked using AGENTS.md file in Downloads folder | Oct 25, 4:10 pm |
|---|
| 291 | OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication | Oct 25, 8:10 am |
|---|
| 292 | BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot | Oct 24, 3:10 pm |
|---|
| 293 | Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads | Oct 24, 12:10 pm |
|---|
| 294 | Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline | Oct 24, 12:10 pm |
|---|
| 295 | Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software | Oct 24, 11:10 am |
|---|
| 296 | Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet | Oct 24, 11:10 am |
|---|
| 297 | CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud | Oct 24, 8:10 am |
|---|
| 298 | Abandoned Popcorn Time app exposed millions of devices to RCE attacks | Oct 23, 10:10 pm |
|---|
| 299 | Abandoned Popcorn Time app exposed millions of device to RCE attacks | Oct 23, 9:10 pm |
|---|
| 300 | (Reliable)? php2shell exploitability, (Fri, Oct 23rd) | Oct 23, 8:10 pm |
|---|
| 301 | BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations | Oct 23, 7:10 pm |
|---|
| 302 | Microsoft Teams to get AI-powered, context-aware phishing detection | Oct 23, 7:10 pm |
|---|
| 303 | Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions | Oct 23, 6:10 pm |
|---|
| 304 | Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws | Oct 23, 6:10 pm |
|---|
| 305 | Quest Diagnostics confirms data breach exposed patient records | Oct 23, 5:10 pm |
|---|
| 306 | Microsoft: Windows Server 2016 reaches end of support in January | Oct 23, 5:10 pm |
|---|
| 307 | PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches | Oct 23, 4:10 pm |
|---|
| 308 | PHP shares mitigation for new RCE vulnerability with no patch | Oct 23, 4:10 pm |
|---|
| 309 | Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials | Oct 23, 3:10 pm |
|---|
| 310 | You gave your AI agent access, but who is giving it orders? | Oct 23, 2:10 pm |
|---|
| 311 | PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches | Oct 23, 1:10 pm |
|---|
| 312 | HPE patches eight max severity RCE and auth bypass AOS flaws | Oct 23, 1:10 pm |
|---|
| 313 | PHP Vulnerability Wrap-Up, (Fri, Oct 23rd) | Oct 23, 1:10 pm |
|---|
| 314 | Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack | Oct 23, 12:10 pm |
|---|
| 315 | URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches | Oct 23, 12:10 pm |
|---|
| 316 | Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image | Oct 23, 11:10 am |
|---|
| 317 | ISC Stormcast For Friday, October 23rd, 2026 https://isc.sans.edu/podcastdetail/10148, (Fri, Oct 23rd) | Oct 23, 11:10 am |
|---|
| 318 | Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances | Oct 23, 10:10 am |
|---|
| 319 | PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware | Oct 23, 8:10 am |
|---|
| 320 | Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data | Oct 23, 8:10 am |
|---|
| 321 | Railway warns devs to rotate secrets after potential breach | Oct 22, 10:10 pm |
|---|
| 322 | Capcom confirms data breach affecting 11.7 million accounts | Oct 22, 9:10 pm |
|---|
| 323 | Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks | Oct 22, 8:10 pm |
|---|
| 324 | LiteLLM release pipeline hacked to distribute info-stealer malware | Oct 22, 8:10 pm |
|---|
| 325 | Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes | Oct 22, 7:10 pm |
|---|
| 326 | ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More | Oct 22, 7:10 pm |
|---|
| 327 | eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable | Oct 22, 7:10 pm |
|---|
| 328 | Arista patches new VeloCloud Orchestrator zero-day exploited in attacks | Oct 22, 6:10 pm |
|---|
| 329 | Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations | Oct 22, 5:10 pm |
|---|
| 330 | Microsoft shares how to fix broken Exchange Online EWS apps | Oct 22, 4:10 pm |
|---|
| 331 | INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown | Oct 22, 3:10 pm |
|---|
| 332 | The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat | Oct 22, 2:10 pm |
|---|
| 333 | Machine speed attacks require machine speed detection and response | Oct 22, 2:10 pm |
|---|
| 334 | Amazon says PHP2Shell exploitation began 4 days before patches | Oct 22, 1:10 pm |
|---|
| 335 | OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL | Oct 22, 12:10 pm |
|---|
| 336 | Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation | Oct 22, 12:10 pm |
|---|
| 337 | GitLab warns of new max severity code execution vulnerability | Oct 22, 12:10 pm |
|---|
| 338 | Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed | Oct 22, 9:10 am |
|---|
| 339 | New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification | Oct 22, 9:10 am |
|---|
| 340 | Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions | Oct 22, 9:10 am |
|---|
| 341 | Authorities disrupt nearly 11,000 cybercrime networks in Africa | Oct 22, 9:10 am |
|---|
| 342 | LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release | Oct 22, 9:10 am |
|---|
| 343 | China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack | Oct 22, 6:10 am |
|---|
| 344 | ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd) | Oct 22, 2:10 am |
|---|
| 345 | Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks | Oct 21, 11:10 pm |
|---|
| 346 | Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected | Oct 21, 10:10 pm |
|---|
| 347 | Lazarus hackers use post-quantum cryptography for malware delivery | Oct 21, 9:10 pm |
|---|
| 348 | Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases | Oct 21, 8:10 pm |
|---|
| 349 | CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers | Oct 21, 7:10 pm |
|---|
| 350 | OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So | Oct 21, 6:10 pm |
|---|
| 351 | LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor | Oct 21, 6:10 pm |
|---|
| 352 | OpenAI agents disabled safety monitoring, one lied about it | Oct 21, 5:10 pm |
|---|
| 353 | PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge | Oct 21, 4:10 pm |
|---|
| 354 | Widespread PHP Flaw May Cause Many Site Outages Today | Oct 21, 4:10 pm |
|---|
| 355 | Microsoft PowerToys adds CursorHide, Button Lock mouse tools | Oct 21, 2:10 pm |
|---|
| 356 | Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands | Oct 21, 2:10 pm |
|---|
| 357 | ClickFix has never been bigger, and AI tools are its most convincing lure yet | Oct 21, 2:10 pm |
|---|
| 358 | PHP ships emergency patches for critical PHP2Shell flaws | Oct 21, 2:10 pm |
|---|
| 359 | Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports | Oct 21, 1:10 pm |
|---|
| 360 | China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors | Oct 21, 1:10 pm |
|---|
| 361 | Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) | Oct 21, 1:10 pm |
|---|
| 362 | Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections | Oct 21, 12:10 pm |
|---|
| 363 | The Harness Is the Hard Part of Agentic Pentesting | Oct 21, 12:10 pm |
|---|
| 364 | PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't | Oct 21, 12:10 pm |
|---|
| 365 | Microsoft says October updates didn’t actually fix VPN issues | Oct 21, 11:10 am |
|---|
| 366 | U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases | Oct 21, 10:10 am |
|---|
| 367 | Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites | Oct 21, 10:10 am |
|---|
| 368 | CISA: SafePay ransomware hit over 600 critical infrastructure orgs | Oct 21, 9:10 am |
|---|
| 369 | Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion | Oct 21, 8:10 am |
|---|
| 370 | CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws | Oct 21, 8:10 am |
|---|
| 371 | State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web | Oct 21, 8:10 am |
|---|
| 372 | PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert | Oct 21, 6:10 am |
|---|
| 373 | ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st) | Oct 21, 2:10 am |
|---|
| 374 | Mozilla, Google, Apple block compromised eMudhra CA certificates | Oct 21, 1:10 am |
|---|
| 375 | Stolen UpdraftCentral keys used to backdoor WordPress sites | Oct 21, 1:10 am |
|---|
| 376 | PHP warns admins of two critical flaws, emergency patches coming tomorrow | Oct 20, 9:10 pm |
|---|
| 377 | Zeabur shutting down after second security breach in two months | Oct 20, 8:10 pm |
|---|
| 378 | Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software | Oct 20, 7:10 pm |
|---|
| 379 | OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code | Oct 20, 7:10 pm |
|---|
| 380 | Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA | Oct 20, 5:10 pm |
|---|
| 381 | Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution | Oct 20, 5:10 pm |
|---|
| 382 | Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites | Oct 20, 3:10 pm |
|---|
| 383 | DHS bans DeepSeek products across US federal civilian agencies | Oct 20, 3:10 pm |
|---|
| 384 | Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election | Oct 20, 2:10 pm |
|---|
| 385 | Hacker gets 8 years for stealing $3.3 million from taxpayers | Oct 20, 2:10 pm |
|---|
| 386 | CJIS v6.1 Compliance: 5 Practical Priorities for Agencies | Oct 20, 2:10 pm |
|---|
| 387 | ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident | Oct 20, 1:10 pm |
|---|
| 388 | Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader | Oct 20, 1:10 pm |
|---|
| 389 | Windows Server 2025 gets support for quick machine recovery | Oct 20, 1:10 pm |
|---|
| 390 | Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns | Oct 20, 1:10 pm |
|---|
| 391 | What Security Teams Can Do To Tame Wild Code | Oct 20, 1:10 pm |
|---|
| 392 | WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators | Oct 20, 1:10 pm |
|---|
| 393 | Ahold Delhaize: Cyberattack affects services across US and Europe | Oct 20, 12:10 pm |
|---|
| 394 | OVHcloud CLI releases backdoored on GitHub to steal developer secrets | Oct 20, 12:10 pm |
|---|
| 395 | Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware | Oct 20, 10:10 am |
|---|
| 396 | Revolut outage disrupts online banking operations worldwide | Oct 20, 10:10 am |
|---|
| 397 | ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan | Oct 20, 8:10 am |
|---|
| 398 | Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge | Oct 20, 7:10 am |
|---|
| 399 | Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware | Oct 20, 5:10 am |
|---|
| 400 | ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th) | Oct 20, 2:10 am |
|---|
| 401 | WordPress SEO plugin Rank Math compromised to backdoor websites | Oct 19, 10:10 pm |
|---|
| 402 | Nikkei discloses third data breach in a month, 1.8M records exposed | Oct 19, 10:10 pm |
|---|
| 403 | Hackers hijack AOMEI update servers to secretly spread malware | Oct 19, 8:10 pm |
|---|
| 404 | Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor | Oct 19, 7:10 pm |
|---|
| 405 | Bullhorn takes staffing platform offline to contain cyberattack | Oct 19, 7:10 pm |
|---|
| 406 | Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor | Oct 19, 6:10 pm |
|---|
| 407 | OpenCode hack exposes API keys amid AI distillation attacks | Oct 19, 6:10 pm |
|---|
| 408 | ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More | Oct 19, 3:10 pm |
|---|
| 409 | Microsoft fixes game, app crashes caused by recent Windows update | Oct 19, 3:10 pm |
|---|
| 410 | From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software | Oct 19, 2:10 pm |
|---|
| 411 | GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories | Oct 19, 2:10 pm |
|---|
| 412 | Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site | Oct 19, 2:10 pm |
|---|
| 413 | F5 releases out-of-band patches for critical NGINX vulnerabilities | Oct 19, 2:10 pm |
|---|
| 414 | Inside the Underground Market for Know Your Client Services | Oct 19, 2:10 pm |
|---|
| 415 | Microsoft fixes classic Outlook bug that hid Copilot buttons | Oct 19, 1:10 pm |
|---|
| 416 | Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic | Oct 19, 12:10 pm |
|---|
| 417 | Microsoft: October Windows Server updates break Exchange sign-in, mail flow | Oct 19, 9:10 am |
|---|
| 418 | OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys | Oct 19, 8:10 am |
|---|
| 419 | Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers | Oct 19, 8:10 am |
|---|
| 420 | Hackers exploit SiteGuard WAF flaw to run commands as admins | Oct 18, 4:10 pm |
|---|
| 421 | Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root | Oct 18, 3:10 pm |
|---|
| 422 | Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th) | Oct 18, 1:10 pm |
|---|
| 423 | ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants | Oct 18, 9:10 am |
|---|
| 424 | Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack | Oct 17, 4:10 pm |
|---|
| 425 | Drupal patches critical RCE flaws, warns exploits may emerge soon | Oct 17, 3:10 pm |
|---|
| 426 | MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon | Oct 17, 12:10 pm |
|---|
| 427 | Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants | Oct 17, 7:10 am |
|---|
| 428 | Critical BlockStrap flaw lets hackers run code on Magento servers | Oct 16, 8:10 pm |
|---|
| 429 | Targeted ads installed Candiru spyware in zero-click attacks | Oct 16, 7:10 pm |
|---|
| 430 | Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug | Oct 16, 7:10 pm |
|---|
| 431 | Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor | Oct 16, 6:10 pm |
|---|
| 432 | Zero-click attacks used targeted ads to deliver Candiru spyware | Oct 16, 6:10 pm |
|---|
| 433 | UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing | Oct 16, 5:10 pm |
|---|
| 434 | OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract | Oct 16, 4:10 pm |
|---|
| 435 | Employees using personal ChatGPT at work? Here's what IT admins need to do | Oct 16, 2:10 pm |
|---|
| 436 | AI Decision Models and Their Impact on AI SOC Platforms | Oct 16, 12:10 pm |
|---|
| 437 | Burger King Japan data breach exposes 11 million customer records | Oct 16, 12:10 pm |
|---|
| 438 | Microsoft: October Windows update may break Smart App Control | Oct 16, 9:10 am |
|---|
| 439 | CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing | Oct 16, 8:10 am |
|---|
| 440 | China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers | Oct 16, 8:10 am |
|---|
| 441 | BAE Systems cyberattack disrupts US federal court operations | Oct 16, 8:10 am |
|---|
| 442 | PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions | Oct 16, 7:10 am |
|---|
| 443 | BeyondTrust patches zero-day exploited in attacks since August | Oct 16, 7:10 am |
|---|
| 444 | ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th) | Oct 16, 2:10 am |
|---|
| 445 | Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) | Oct 16, 1:10 am |
|---|
| 446 | Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory | Oct 15, 9:10 pm |
|---|
| 447 | Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers | Oct 15, 9:10 pm |
|---|
| 448 | Android gets AI defenses against messaging scams, fake calls | Oct 15, 8:10 pm |
|---|
| 449 | Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth | Oct 15, 7:10 pm |
|---|
| 450 | ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More | Oct 15, 7:10 pm |
|---|
| 451 | Fake Arch Linux packages push malware with root privileges | Oct 15, 6:10 pm |
|---|
| 452 | Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks | Oct 15, 5:10 pm |
|---|
| 453 | Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads | Oct 15, 5:10 pm |
|---|
| 454 | Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules | Oct 15, 3:10 pm |
|---|
| 455 | Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing | Oct 15, 3:10 pm |
|---|
| 456 | NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks | Oct 15, 3:10 pm |
|---|
| 457 | Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams | Oct 15, 3:10 pm |
|---|
| 458 | Microsoft: Windows Server 2022 reached end of mainstream support | Oct 15, 2:10 pm |
|---|
| 459 | Is AI pentesting as good as a human pentester? | Oct 15, 2:10 pm |
|---|
| 460 | Why AI Confidence Is Not Validation | Oct 15, 12:10 pm |
|---|
| 461 | Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early | Oct 15, 12:10 pm |
|---|
| 462 | Police arrests 95 suspects in international CSAM crackdown action | Oct 15, 12:10 pm |
|---|
| 463 | Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules | Oct 15, 12:10 pm |
|---|
| 464 | India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1 | Oct 15, 11:10 am |
|---|
| 465 | Microsoft fixes bug causing Windows black screens, Explorer crashes | Oct 15, 10:10 am |
|---|
| 466 | AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches | Oct 15, 9:10 am |
|---|
| 467 | Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts | Oct 15, 9:10 am |
|---|
| 468 | GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories | Oct 15, 9:10 am |
|---|
| 469 | UK Legal Aid Agency: Hackers stole records dating back to 1978 | Oct 15, 8:10 am |
|---|
| 470 | Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation | Oct 15, 7:10 am |
|---|
| 471 | Panchan's Mining Island [Guest Diary], (Wed, Oct 14th) | Oct 15, 2:10 am |
|---|
| 472 | ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th) | Oct 15, 2:10 am |
|---|
| 473 | Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks | Oct 14, 11:10 pm |
|---|
| 474 | FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested | Oct 14, 8:10 pm |
|---|
| 475 | Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages | Oct 14, 7:10 pm |
|---|
| 476 | Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App | Oct 14, 7:10 pm |
|---|
| 477 | Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability | Oct 14, 7:10 pm |
|---|
| 478 | Cisco patches new Secure Email Gateway zero-day exploited in attacks | Oct 14, 6:10 pm |
|---|
| 479 | Ledger asks sellers across Asia to halt sales after supply-chain attack | Oct 14, 6:10 pm |
|---|
| 480 | U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud | Oct 14, 5:10 pm |
|---|
| 481 | U.K. Sanctions Cryptomus for RU Money Laundering | Oct 14, 3:10 pm |
|---|
| 482 | Microsoft fixes VPN issues caused by September Windows updates | Oct 14, 3:10 pm |
|---|
| 483 | Global takedown hits network behind 1 billion phishing messages | Oct 14, 2:10 pm |
|---|
| 484 | The Blind Spots of Agentic Pentesting and How to Close Them | Oct 14, 2:10 pm |
|---|
| 485 | How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team | Oct 14, 1:10 pm |
|---|
| 486 | curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution | Oct 14, 1:10 pm |
|---|
| 487 | CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts | Oct 14, 1:10 pm |
|---|
| 488 | CISA warns admins to immediately fix Ivanti flaw exploited as zero-day | Oct 14, 1:10 pm |
|---|
| 489 | An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part. | Oct 14, 12:10 pm |
|---|
| 490 | Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks | Oct 14, 12:10 pm |
|---|
| 491 | Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days | Oct 14, 12:10 pm |
|---|
| 492 | Hirudo Android malware replaces banking apps to evade security checks | Oct 14, 12:10 pm |
|---|
| 493 | Microsoft: Recent Windows updates may trigger Remote Desktop failures | Oct 14, 11:10 am |
|---|
| 494 | AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host | Oct 14, 10:10 am |
|---|
| 495 | Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave | Oct 14, 7:10 am |
|---|
| 496 | Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th) | Oct 14, 7:10 am |
|---|
| 497 | Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug | Oct 14, 5:10 am |
|---|
| 498 | OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room | Oct 14, 4:10 am |
|---|
| 499 | ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th) | Oct 14, 2:10 am |
|---|
| 500 | Microsoft Patches More Than 1,400 Security Flaws | Oct 14, 12:10 am |
|---|
