| 1 | Mircosoft adds smarter bot protection to Teams meetings | Jun 30, 11:10 am |
|---|
| 2 | June 2026 Apple Updates, (Tue, Jun 30th) | Jun 30, 10:10 am |
|---|
| 3 | Blackfield ransomware asks Nidec Corporation for $2 million ransom | Jun 30, 10:10 am |
|---|
| 4 | Kali Linux 2026.2 released with 9 new tools, NetHunter updates | Jun 30, 10:10 am |
|---|
| 5 | Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth | Jun 30, 9:10 am |
|---|
| 6 | New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials | Jun 30, 9:10 am |
|---|
| 7 | CISA: Windows BlueHammer flaw now exploited by ransomware gangs | Jun 30, 9:10 am |
|---|
| 8 | Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs | Jun 30, 8:10 am |
|---|
| 9 | Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild | Jun 30, 6:10 am |
|---|
| 10 | ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th) | Jun 30, 3:10 am |
|---|
| 11 | NAIC says public data stolen in ShinyHunters' PeopleSoft breach | Jun 29, 9:10 pm |
|---|
| 12 | Nissan discloses employee data breach linked to Oracle zero-day attacks | Jun 29, 9:10 pm |
|---|
| 13 | Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input | Jun 29, 8:10 pm |
|---|
| 14 | Microsoft extends Windows Server 2022 hotpatching until October 2027 | Jun 29, 6:10 pm |
|---|
| 15 | WhatsApp rolls out usernames to help users hide their phone number | Jun 29, 6:10 pm |
|---|
| 16 | Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks | Jun 29, 5:10 pm |
|---|
| 17 | WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private | Jun 29, 5:10 pm |
|---|
| 18 | ⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More | Jun 29, 3:10 pm |
|---|
| 19 | U.S. offers $10 million for hackers targeting WhatsApp, Signal users | Jun 29, 3:10 pm |
|---|
| 20 | 236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers | Jun 29, 2:10 pm |
|---|
| 21 | Hackers now exploit critical Oracle E-Business flaw in attacks | Jun 29, 2:10 pm |
|---|
| 22 | Critical SimpleHelp flaw exploited to deploy new stealer malware | Jun 29, 2:10 pm |
|---|
| 23 | Agentic AI Has an Identity Problem and Attackers Know It | Jun 29, 2:10 pm |
|---|
| 24 | Webinar: Why business email compromise attacks keep succeeding | Jun 29, 1:10 pm |
|---|
| 25 | US seizes hundreds of FIFA World Cup illegal streaming domains | Jun 29, 12:10 pm |
|---|
| 26 | Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse | Jun 29, 12:10 pm |
|---|
| 27 | Why Post-Quantum Cryptography Starts With Credentials | Jun 29, 12:10 pm |
|---|
| 28 | Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th) | Jun 29, 12:10 pm |
|---|
| 29 | Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts | Jun 29, 10:10 am |
|---|
| 30 | Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw | Jun 29, 8:10 am |
|---|
| 31 | Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer | Jun 29, 7:10 am |
|---|
| 32 | ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th) | Jun 29, 2:10 am |
|---|
| 33 | Data breach exposes up to 14.2 million email logins at six ISPs | Jun 28, 3:10 pm |
|---|
| 34 | YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th) | Jun 28, 8:10 am |
|---|
| 35 | Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials | Jun 27, 6:10 pm |
|---|
| 36 | Clean GitHub repo tricks AI coding agents into running malware | Jun 27, 3:10 pm |
|---|
| 37 | OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards | Jun 27, 1:10 pm |
|---|
| 38 | FBI: Russian hackers now target Signal backup recovery keys | Jun 26, 10:10 pm |
|---|
| 39 | FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys | Jun 26, 8:10 pm |
|---|
| 40 | CISA sets urgent deadline to fix Cisco flaw exploited in attacks | Jun 26, 8:10 pm |
|---|
| 41 | New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks | Jun 26, 7:10 pm |
|---|
| 42 | Cybersecurity firms targeted by fraudulent OpenAI organization invites | Jun 26, 6:10 pm |
|---|
| 43 | Polymarket customers lose $3 million in supply-chain attack | Jun 26, 6:10 pm |
|---|
| 44 | Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign | Jun 26, 5:10 pm |
|---|
| 45 | Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs | Jun 26, 3:10 pm |
|---|
| 46 | Your First GRC Agent: A Red Teamer's Walkthrough | Jun 26, 2:10 pm |
|---|
| 47 | Guardian Agents: The Next Layer of Identity Governance | Jun 26, 1:10 pm |
|---|
| 48 | New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets | Jun 26, 1:10 pm |
|---|
| 49 | CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue | Jun 26, 1:10 pm |
|---|
| 50 | New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries | Jun 26, 1:10 pm |
|---|
| 51 | Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant | Jun 26, 11:10 am |
|---|
| 52 | Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack | Jun 26, 11:10 am |
|---|
| 53 | Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff | Jun 26, 9:10 am |
|---|
| 54 | Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks | Jun 26, 8:10 am |
|---|
| 55 | Poland busts SIM-swapping gang tied to millions in crypto theft | Jun 25, 11:10 pm |
|---|
| 56 | Anthropic is testing desktop-like Claude Cowork for mobile | Jun 25, 11:10 pm |
|---|
| 57 | Order-tracking app Shop abused to push callback phishing attacks | Jun 25, 8:10 pm |
|---|
| 58 | Microsoft quietly extends free Windows 10 ESU support to October 2027 | Jun 25, 7:10 pm |
|---|
| 59 | New macOS malware embeds fake errors to confuse AI analysis tools | Jun 25, 5:10 pm |
|---|
| 60 | PirloTV sports piracy network disrupted as 44 domains seized | Jun 25, 4:10 pm |
|---|
| 61 | Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability | Jun 25, 3:10 pm |
|---|
| 62 | Bluekit phishing kit adopts browser-in-the-middle for login theft | Jun 25, 3:10 pm |
|---|
| 63 | The Four Elevations of Effective Fraud Prevention | Jun 25, 2:10 pm |
|---|
| 64 | Webinar: Why account takeovers remain one of the hardest threats to stop | Jun 25, 1:10 pm |
|---|
| 65 | ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories | Jun 25, 1:10 pm |
|---|
| 66 | Surviving the Mythos Era: Richard Bejtlich on the Case for NDR | Jun 25, 12:10 pm |
|---|
| 67 | New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis | Jun 25, 11:10 am |
|---|
| 68 | New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns | Jun 25, 10:10 am |
|---|
| 69 | Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access | Jun 25, 6:10 am |
|---|
| 70 | What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary], (Wed, Jun 24th) | Jun 25, 1:10 am |
|---|
| 71 | Google releases new privacy controls for activity history, personalization | Jun 25, 12:10 am |
|---|
| 72 | Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access | Jun 24, 10:10 pm |
|---|
| 73 | DraftKings hacker 'Snoopy' sentenced to 18 months in prison | Jun 24, 10:10 pm |
|---|
| 74 | Malicious Edge extension abuses Native Messaging as bridge to malware | Jun 24, 9:10 pm |
|---|
| 75 | Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered | Jun 24, 6:10 pm |
|---|
| 76 | CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited | Jun 24, 6:10 pm |
|---|
| 77 | Amadey, StealC malware operations disrupted in Operation Endgame action | Jun 24, 3:10 pm |
|---|
| 78 | CISA warns of max severity Ubiquiti flaws exploited in attacks | Jun 24, 3:10 pm |
|---|
| 79 | Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks | Jun 24, 2:10 pm |
|---|
| 80 | Securing the service desk: Why social engineering attacks keep succeeding | Jun 24, 2:10 pm |
|---|
| 81 | Dawn of the Apex Agentic Adversary | Jun 24, 1:10 pm |
|---|
| 82 | Stealthy Mistic backdoor linked to ransomware access broker KongTuke | Jun 24, 11:10 am |
|---|
| 83 | DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering | Jun 24, 10:10 am |
|---|
| 84 | Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root | Jun 24, 8:10 am |
|---|
| 85 | Linux Process Name Masquerading, (Wed, Jun 24th) | Jun 24, 7:10 am |
|---|
| 86 | ISC Stormcast For Wednesday, June 24th, 2026 https://isc.sans.edu/podcastdetail/9984, (Wed, Jun 24th) | Jun 24, 2:10 am |
|---|
| 87 | Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks | Jun 23, 10:10 pm |
|---|
| 88 | Windows 11 KB5095093 update rolls out new Point-in-Time restore feature | Jun 23, 9:10 pm |
|---|
| 89 | Tata Electronics confirms cyberattack as hackers leak data | Jun 23, 9:10 pm |
|---|
| 90 | FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation | Jun 23, 8:10 pm |
|---|
| 91 | Healthtech firm Xolis suffers data breach impacting 1.4 million people | Jun 23, 8:10 pm |
|---|
| 92 | New macOS ClickFix attack silently mounts DMGs to push infostealer | Jun 23, 7:10 pm |
|---|
| 93 | Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration | Jun 23, 5:10 pm |
|---|
| 94 | Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents | Jun 23, 5:10 pm |
|---|
| 95 | Scattered Spider Hackers Plead Guilty on Day 1 of Trial | Jun 23, 5:10 pm |
|---|
| 96 | Scattered Spider members plead guilty to hacking Transport for London | Jun 23, 4:10 pm |
|---|
| 97 | GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns | Jun 23, 3:10 pm |
|---|
| 98 | LastPass confirms data breach in Klue supply chain attack | Jun 23, 2:10 pm |
|---|
| 99 | The Exploit Doesn't Exist. You Can Still Prove It Works Against You | Jun 23, 2:10 pm |
|---|
| 100 | Agentic AI: The Weapon That No Longer Needs a Warrior | Jun 23, 1:10 pm |
|---|
| 101 | Webinar: Why email security teams are drowning in alerts | Jun 23, 1:10 pm |
|---|
| 102 | Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT | Jun 23, 10:10 am |
|---|
| 103 | WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool | Jun 23, 7:10 am |
|---|
| 104 | OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws | Jun 23, 5:10 am |
|---|
| 105 | CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd) | Jun 23, 3:10 am |
|---|
| 106 | ISC Stormcast For Tuesday, June 23rd, 2026 https://isc.sans.edu/podcastdetail/9982, (Tue, Jun 23rd) | Jun 23, 2:10 am |
|---|
| 107 | WhatsApp phishing attack uses fake business docs to hack PCs | Jun 22, 11:10 pm |
|---|
| 108 | JaredFromSubway MEV bot hacked in $15 million crypto theft | Jun 22, 10:10 pm |
|---|
| 109 | FFmpeg fixes PixelSmash flaw in widely used video decoder | Jun 22, 9:10 pm |
|---|
| 110 | FortiBleed campaign used custom FortiGate sniffer to steal credentials | Jun 22, 8:10 pm |
|---|
| 111 | ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack | Jun 22, 7:10 pm |
|---|
| 112 | Microsoft fixes AutoGen Studio flaw that enabled code execution | Jun 22, 6:10 pm |
|---|
| 113 | Microsoft says Windows 11 26H2 is coming soon, details upgrade process | Jun 22, 6:10 pm |
|---|
| 114 | Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants | Jun 22, 5:10 pm |
|---|
| 115 | A Glimpse into the “Search Your Target” Market for Stolen Credentials | Jun 22, 3:10 pm |
|---|
| 116 | Webshells Remain Popular, (Mon, Jun 22nd) | Jun 22, 3:10 pm |
|---|
| 117 | 29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests | Jun 22, 3:10 pm |
|---|
| 118 | Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries | Jun 22, 2:10 pm |
|---|
| 119 | New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer | Jun 22, 2:10 pm |
|---|
| 120 | ⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More | Jun 22, 1:10 pm |
|---|
| 121 | Stop Your Legacy Infrastructure from Hijacking Your AI Agents | Jun 22, 1:10 pm |
|---|
| 122 | Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices | Jun 22, 10:10 am |
|---|
| 123 | AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network | Jun 22, 8:10 am |
|---|
| 124 | INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific | Jun 22, 7:10 am |
|---|
| 125 | ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd) | Jun 22, 2:10 am |
|---|
| 126 | AryStinger botnet infected thousands of D-Link routers worldwide | Jun 21, 3:10 pm |
|---|
| 127 | New Prinz Eugen ransomware prioritizes recent files for encryption | Jun 20, 4:10 pm |
|---|
| 128 | Microsoft links Mastra AI supply chain attack to North Korean hackers | Jun 20, 3:10 pm |
|---|
| 129 | Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys | Jun 20, 11:10 am |
|---|
| 130 | Klue OAuth breach victim list grows as Icarus hackers claim attack | Jun 19, 11:10 pm |
|---|
| 131 | Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin | Jun 19, 9:10 pm |
|---|
| 132 | The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes | Jun 19, 7:10 pm |
|---|
| 133 | Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain | Jun 19, 7:10 pm |
|---|
| 134 | AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution | Jun 19, 5:10 pm |
|---|
| 135 | Texas govt data breach exposes over 3 million driver’s licenses | Jun 19, 5:10 pm |
|---|
| 136 | Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites | Jun 19, 4:10 pm |
|---|
| 137 | CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices | Jun 19, 3:10 pm |
|---|
| 138 | Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way | Jun 19, 2:10 pm |
|---|
| 139 | From Assistive to Agentic: The AI Shift That's Redefining Threat Management | Jun 19, 1:10 pm |
|---|
| 140 | Webinar: How attackers bypass MFA and how defenders can respond | Jun 19, 1:10 pm |
|---|
| 141 | Forget Data Leakage: Shadow AI's Real Threat Is Access Control | Jun 19, 12:10 pm |
|---|
| 142 | Microsoft: June 2026 Windows updates break Recycle Bin prompts | Jun 19, 12:10 pm |
|---|
| 143 | CISA: Splunk Enterprise flaw actively exploited, patch by Sunday | Jun 19, 11:10 am |
|---|
| 144 | Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data | Jun 19, 10:10 am |
|---|
| 145 | NY man charged after harassing college student with AI-generated nudes | Jun 19, 9:10 am |
|---|
| 146 | eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th) | Jun 19, 8:10 am |
|---|
| 147 | Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone | Jun 19, 7:10 am |
|---|
| 148 | CISA warns Fortinet users to secure devices after FortiBleed leak | Jun 19, 7:10 am |
|---|
| 149 | Gentlemen ransomware uses multiple EDR killers to disable defenses | Jun 18, 11:10 pm |
|---|
| 150 | Nintendo confirms data stolen in WebMD subsidiary cyberattack | Jun 18, 8:10 pm |
|---|
| 151 | F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution | Jun 18, 7:10 pm |
|---|
| 152 | ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm | Jun 18, 6:10 pm |
|---|
| 153 | USB worm spreads crypto-stealing malware via Windows shortcut files | Jun 18, 5:10 pm |
|---|
| 154 | ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories | Jun 18, 4:10 pm |
|---|
| 155 | INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 | Jun 18, 3:10 pm |
|---|
| 156 | Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks | Jun 18, 3:10 pm |
|---|
| 157 | Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2 | Jun 18, 3:10 pm |
|---|
| 158 | Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp | Jun 18, 2:10 pm |
|---|
| 159 | DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic | Jun 18, 2:10 pm |
|---|
| 160 | 5 reasons Microsoft 365 backup isn’t enough for business data protection | Jun 18, 2:10 pm |
|---|
| 161 | Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network | Jun 18, 1:10 pm |
|---|
| 162 | Telegram admits it couldn't police exam-leak channels, India tells court | Jun 18, 1:10 pm |
|---|
| 163 | Apple fixes Beats Studio Buds flaw that let hackers spy on conversations | Jun 18, 1:10 pm |
|---|
| 164 | ShapedPlugin update flow hacked to infect WordPress sites | Jun 18, 1:10 pm |
|---|
| 165 | The Scripts on Your Checkout Page Are Now a PCI DSS Problem | Jun 18, 12:10 pm |
|---|
| 166 | F5 issues out-of-band patches for critical NGINX vulnerabilities | Jun 18, 12:10 pm |
|---|
| 167 | Microsoft fixes Windows Server 2016 security update failures | Jun 18, 11:10 am |
|---|
| 168 | Leak confirms OpenAI is testing a ChatGPT for Science subscription | Jun 18, 2:10 am |
|---|
| 169 | The Behavior of Coordinated SSH Brute Force Attacks over the last three months [Guest Diary], (Wed, Jun 17th) | Jun 18, 2:10 am |
|---|
| 170 | ISC Stormcast For Thursday, June 18th, 2026 https://isc.sans.edu/podcastdetail/9978, (Thu, Jun 18th) | Jun 18, 2:10 am |
|---|
| 171 | Google to use UK and EU user IP addresses for ad personalization | Jun 17, 9:10 pm |
|---|
| 172 | Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development | Jun 17, 7:10 pm |
|---|
| 173 | Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments | Jun 17, 7:10 pm |
|---|
| 174 | Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline | Jun 17, 5:10 pm |
|---|
| 175 | FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices. | Jun 17, 4:10 pm |
|---|
| 176 | The browser blind spot: Why your security tool may not be blocking what you think it is [Guest Diary], (Wed, Jun 17th) | Jun 17, 4:10 pm |
|---|
| 177 | India's Telegram ban hit the UAE too. Here's how to get around it | Jun 17, 2:10 pm |
|---|
| 178 | Why Account Takeovers Are Rising and How to Stop Them | Jun 17, 2:10 pm |
|---|
| 179 | Microsoft confirms Office apps launch issues after June updates | Jun 17, 12:10 pm |
|---|
| 180 | Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization | Jun 17, 12:10 pm |
|---|
| 181 | The Top 10 Attack Surface Exposures in 2026 | Jun 17, 11:10 am |
|---|
| 182 | Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats | Jun 17, 10:10 am |
|---|
| 183 | CISA orders feds to patch max severity Joomla plugin flaw by Friday | Jun 17, 10:10 am |
|---|
| 184 | Microsoft working on Defender patch for RoguePlanet zero-day | Jun 17, 9:10 am |
|---|
| 185 | 144 Mastra npm Packages Compromised via Hijacked Contributor Account | Jun 17, 8:10 am |
|---|
| 186 | CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution | Jun 17, 7:10 am |
|---|
| 187 | Kodak confirms data breach claimed by ShinyHunters extortion gang | Jun 17, 7:10 am |
|---|
| 188 | ISC Stormcast For Wednesday, June 17th, 2026 https://isc.sans.edu/podcastdetail/9976, (Wed, Jun 17th) | Jun 17, 2:10 am |
|---|
| 189 | Malicious JetBrains Marketplace plugins steal AI API keys from developers | Jun 16, 10:10 pm |
|---|
| 190 | Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting | Jun 16, 8:10 pm |
|---|
| 191 | New Rokarolla Android malware targets 217 banking, crypto apps | Jun 16, 8:10 pm |
|---|
| 192 | ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures | Jun 16, 7:10 pm |
|---|
| 193 | Steam Workshop abused to spread malware via Wallpaper Engine app | Jun 16, 7:10 pm |
|---|
| 194 | GhostTree Attack Abused Recursive Windows Junctions to Hide Malware | Jun 16, 3:10 pm |
|---|
| 195 | UK to require ID or face scan before you can make social media accounts | Jun 16, 3:10 pm |
|---|
| 196 | New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds | Jun 16, 2:10 pm |
|---|
| 197 | FTC warns of record $3.5 billion losses to imposter scams in 2025 | Jun 16, 2:10 pm |
|---|
| 198 | Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive | Jun 16, 12:10 pm |
|---|
| 199 | China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth | Jun 16, 11:10 am |
|---|
| 200 | Ransomware gang abuses Microsoft Teams relays to hide malicious traffic | Jun 16, 11:10 am |
|---|
| 201 | Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week | Jun 16, 11:10 am |
|---|
| 202 | CISA warns of another cPanel plugin flaw exploited in attacks | Jun 16, 11:10 am |
|---|
| 203 | Critical Fortinet FortiSandbox flaws now exploited in attacks | Jun 16, 10:10 am |
|---|
| 204 | Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware | Jun 16, 9:10 am |
|---|
| 205 | Windows version of SprySOCKS Linux malware used to attack govt orgs | Jun 16, 9:10 am |
|---|
| 206 | From a VHDX File to a Remcos RAT, (Tue, Jun 16th) | Jun 16, 8:10 am |
|---|
| 207 | CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation | Jun 16, 7:10 am |
|---|
| 208 | Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw | Jun 16, 7:10 am |
|---|
| 209 | iRhythm discloses data breach, says hackers stole patient info | Jun 16, 7:10 am |
|---|
| 210 | ISC Stormcast For Tuesday, June 16th, 2026 https://isc.sans.edu/podcastdetail/9974, (Tue, Jun 16th) | Jun 16, 2:10 am |
|---|
| 211 | Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails | Jun 15, 10:10 pm |
|---|
| 212 | DOJ seizes CFAKE, SOCFAKE deepfake nude sites under TAKE IT DOWN Act | Jun 15, 10:10 pm |
|---|
| 213 | North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels | Jun 15, 8:10 pm |
|---|
| 214 | SimpleHelp bug lets hackers create rogue remote support accounts | Jun 15, 8:10 pm |
|---|
| 215 | LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers | Jun 15, 6:10 pm |
|---|
| 216 | Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks | Jun 15, 6:10 pm |
|---|
| 217 | OptinMonster WordPress plugin hacked in CDN supply-chain attack | Jun 15, 6:10 pm |
|---|
| 218 | Council of Europe investigates ShinyHunters data breach claims | Jun 15, 5:10 pm |
|---|
| 219 | One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes | Jun 15, 4:10 pm |
|---|
| 220 | FBI: Fraudsters use couriers to steal money in crypto scams | Jun 15, 4:10 pm |
|---|
| 221 | ⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More | Jun 15, 3:10 pm |
|---|
| 222 | Chinese hackers breach REDCap servers, steal medical research | Jun 15, 2:10 pm |
|---|
| 223 | Vibe coders are gonna vibe code: How CISOs are tackling code sprawl | Jun 15, 2:10 pm |
|---|
| 224 | Webinar: How behavioral AI stops phishing and account takeovers | Jun 15, 1:10 pm |
|---|
| 225 | Infinite Campus data breach affects 137,000 school staff accounts | Jun 15, 1:10 pm |
|---|
| 226 | New attack turned Microsoft 365 Copilot into 1-click data theft tool | Jun 15, 1:10 pm |
|---|
| 227 | The Onboarding Password Mistake That Creates Unnecessary Risk | Jun 15, 12:10 pm |
|---|
| 228 | Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites | Jun 15, 11:10 am |
|---|
| 229 | 152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic | Jun 15, 11:10 am |
|---|
| 230 | Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw | Jun 15, 8:10 am |
|---|
| 231 | Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts | Jun 15, 8:10 am |
|---|
| 232 | Evil MSI Background: BASE64 Statistical Analysis, (Mon, Jun 15th) | Jun 15, 8:10 am |
|---|
| 233 | ISC Stormcast For Monday, June 15th, 2026 https://isc.sans.edu/podcastdetail/9972, (Mon, Jun 15th) | Jun 15, 2:10 am |
|---|
| 234 | FBI disrupts massive AI-powered phishing service using a million URLs | Jun 14, 3:10 pm |
|---|
| 235 | Ex-school district employee jailed for hacks on former employer | Jun 13, 9:10 pm |
|---|
| 236 | Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication | Jun 13, 2:10 pm |
|---|
| 237 | Chinese hackers hijack auth flow, spy on isolated network for a decade | Jun 13, 2:10 pm |
|---|
| 238 | US Gov asks Anthropic to ban 'foreign national' access to Fable, Mythos | Jun 13, 10:10 am |
|---|
| 239 | U.S. Orders Anthropic to Suspend Fable 5 and Mythos 5 Access for Foreign Nationals | Jun 13, 7:10 am |
|---|
| 240 | Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit | Jun 12, 9:10 pm |
|---|
| 241 | China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade | Jun 12, 8:10 pm |
|---|
| 242 | Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing | Jun 12, 8:10 pm |
|---|
| 243 | 400+ Arch Linux AUR Packages Hijacked to Install Rust Credential Stealer | Jun 12, 8:10 pm |
|---|
| 244 | Maine disables data breach notification portal after fake disclosures | Jun 12, 8:10 pm |
|---|
| 245 | phpBB forum fixes auth bypass bug lurking for a decade | Jun 12, 7:10 pm |
|---|
| 246 | Ukrainian national pleads guilty to role in Conti ransomware operation | Jun 12, 6:10 pm |
|---|
| 247 | Over 400 Arch Linux packages compromised to push rootkit, infostealer | Jun 12, 5:10 pm |
|---|
| 248 | Early Warning Signs of Supply-Chain Attacks Live in the Dark Web | Jun 12, 3:10 pm |
|---|
| 249 | Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code | Jun 12, 1:10 pm |
|---|
| 250 | ISC Stormcast For Friday, June 12th, 2026 https://isc.sans.edu/podcastdetail/9970, (Fri, Jun 12th) | Jun 12, 1:10 pm |
|---|
| 251 | Rethinking MDR as Attackers and Defenders Embrace AI | Jun 12, 12:10 pm |
|---|
| 252 | Microsoft fixes Windows update failures linked to WUSA installer | Jun 12, 12:10 pm |
|---|
| 253 | Pharma giant Novo Nordisk discloses breach of clinical trials data | Jun 12, 11:10 am |
|---|
| 254 | INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator | Jun 12, 10:10 am |
|---|
| 255 | LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution | Jun 12, 10:10 am |
|---|
| 256 | CISA orders feds to patch actively exploited Ivanti flaw by Sunday | Jun 12, 9:10 am |
|---|
| 257 | Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs | Jun 12, 8:10 am |
|---|
| 258 | Over 73,000 French govt employees affected in Tchap messenger breach | Jun 12, 8:10 am |
|---|
| 259 | Tchap data breach affects over 73,000 French govt employees | Jun 12, 7:10 am |
|---|
| 260 | Japanese energy firm loses drive with data of 10.9 million clients | Jun 12, 12:10 am |
|---|
| 261 | Maine breach portal abused to publish fake data breach disclosures | Jun 11, 11:10 pm |
|---|
| 262 | ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities | Jun 11, 9:10 pm |
|---|
| 263 | Oracle mitigates PeopleSoft zero-day exploited in data theft attacks | Jun 11, 8:10 pm |
|---|
| 264 | New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files | Jun 11, 6:10 pm |
|---|
| 265 | New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets | Jun 11, 6:10 pm |
|---|
| 266 | ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New Stories | Jun 11, 5:10 pm |
|---|
| 267 | The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm | Jun 11, 5:10 pm |
|---|
| 268 | Authorities dismantle 'AudiA6' ransomware crypto-laundering service | Jun 11, 4:10 pm |
|---|
| 269 | ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories | Jun 11, 2:10 pm |
|---|
| 270 | Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories | Jun 11, 2:10 pm |
|---|
| 271 | Why AI-driven threats are exposing the limits of MSP security stacks | Jun 11, 2:10 pm |
|---|
| 272 | CISA tells govt agencies to patch critical exploited flaws in 3 days | Jun 11, 1:10 pm |
|---|
| 273 | Coupang hit with record $409 million data breach fine in Korea | Jun 11, 1:10 pm |
|---|
| 274 | AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS. | Jun 11, 12:10 pm |
|---|
| 275 | OceanLotus Hits Vietnam Investors With SPECTRALVIPER in FireAnt Attack | Jun 11, 11:10 am |
|---|
| 276 | Microsoft fixes BitLocker recovery bug on Windows Server 2025 | Jun 11, 9:10 am |
|---|
| 277 | Nottingham University data breach affects over 450,000 students | Jun 11, 8:10 am |
|---|
| 278 | Max severity Ivanti Sentry vulnerability now exploited in attacks | Jun 11, 7:10 am |
|---|
| 279 | GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks | Jun 11, 7:10 am |
|---|
| 280 | ISC Stormcast For Thursday, June 11th, 2026 https://isc.sans.edu/podcastdetail/9968, (Thu, Jun 11th) | Jun 11, 3:10 am |
|---|
| 281 | Path traversal flaw in AI dev platform Langflow exploited in attacks | Jun 10, 10:10 pm |
|---|
| 282 | The ‘Miasma’ worm source code briefly leaked on GitHub | Jun 10, 9:10 pm |
|---|
| 283 | GitHub announces npm security changes to tackle supply-chain attacks | Jun 10, 8:10 pm |
|---|
| 284 | Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks | Jun 10, 7:10 pm |
|---|
| 285 | China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance | Jun 10, 5:10 pm |
|---|
| 286 | CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation | Jun 10, 4:10 pm |
|---|
| 287 | Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE | Jun 10, 4:10 pm |
|---|
| 288 | Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities | Jun 10, 4:10 pm |
|---|
| 289 | The 5 Best Practices for Secure Identity Verification | Jun 10, 3:10 pm |
|---|
| 290 | China-linked JDY botnet expands targeting of U.S. military networks | Jun 10, 3:10 pm |
|---|
| 291 | Microsoft patches Exchange Server zero-day exploited in attacks | Jun 10, 2:10 pm |
|---|
| 292 | Who Runs the Ransomware Group ‘The Gentlemen?’ | Jun 10, 2:10 pm |
|---|
| 293 | Microsoft: Some Windows PCs fail to install latest monthly updates | Jun 10, 12:10 pm |
|---|
| 294 | Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs | Jun 10, 11:10 am |
|---|
| 295 | Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar | Jun 10, 11:10 am |
|---|
| 296 | Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days | Jun 10, 10:10 am |
|---|
| 297 | Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards | Jun 10, 9:10 am |
|---|
| 298 | How has use of framing protection security headers changed in the past 3 years?, (Wed, Jun 10th) | Jun 10, 9:10 am |
|---|
| 299 | ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances | Jun 10, 8:10 am |
|---|
| 300 | Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows | Jun 10, 7:10 am |
|---|
| 301 | Ivanti: Max severity Sentry flaw allows code execution as root | Jun 10, 7:10 am |
|---|
| 302 | Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS | Jun 10, 6:10 am |
|---|
| 303 | ISC Stormcast For Wednesday, June 10th, 2026 https://isc.sans.edu/podcastdetail/9966, (Wed, Jun 10th) | Jun 10, 2:10 am |
|---|
| 304 | Anthropic rolls out Claude Fable 5, but it's available for a limited time | Jun 10, 2:10 am |
|---|
| 305 | Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges | Jun 10, 12:10 am |
|---|
| 306 | A Record-Breaking Patch Tuesday for June 2026 | Jun 9, 11:10 pm |
|---|
| 307 | OpenClaw AI agent found falling for phishing attacks, spills user data | Jun 9, 10:10 pm |
|---|
| 308 | ServiceNow discloses security incident exposing customer data | Jun 9, 10:10 pm |
|---|
| 309 | SAP fixes critical flaws in NetWeaver and Commerce Cloud | Jun 9, 8:10 pm |
|---|
| 310 | Microsoft releases Windows 10 KB5094127 extended security update | Jun 9, 7:10 pm |
|---|
| 311 | Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code | Jun 9, 6:10 pm |
|---|
| 312 | Meta to Use Off-Site Business Data for Feed and AI Personalization | Jun 9, 6:10 pm |
|---|
| 313 | Windows 11 KB5094126 & KB5093998 cumulative updates released | Jun 9, 6:10 pm |
|---|
| 314 | Microsoft June 2026 Patch Tuesday, (Tue, Jun 9th) | Jun 9, 6:10 pm |
|---|
| 315 | Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws | Jun 9, 6:10 pm |
|---|
| 316 | XBOW tests Anthropic's Mythos Preview for offensive security | Jun 9, 5:10 pm |
|---|
| 317 | Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues | Jun 9, 5:10 pm |
|---|
| 318 | GitHub disables Microsoft repos pushing password-stealing malware | Jun 9, 4:10 pm |
|---|
| 319 | New Veeam vulnerability exposes backup servers to RCE attacks | Jun 9, 3:10 pm |
|---|
| 320 | Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now | Jun 9, 1:10 pm |
|---|
| 321 | Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models | Jun 9, 1:10 pm |
|---|
| 322 | WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine | Jun 9, 1:10 pm |
|---|
| 323 | The Hidden Security Risk in Modern Networks: The Work Between Tools | Jun 9, 12:10 pm |
|---|
| 324 | Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer | Jun 9, 11:10 am |
|---|
| 325 | New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing | Jun 9, 11:10 am |
|---|
| 326 | French govt messaging service breached in account hijacking attack | Jun 9, 11:10 am |
|---|
| 327 | CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day | Jun 9, 9:10 am |
|---|
| 328 | LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE | Jun 9, 7:10 am |
|---|
| 329 | Google patches new Chrome zero-day flaw exploited in the wild | Jun 9, 7:10 am |
|---|
| 330 | ISC Stormcast For Tuesday, June 9th, 2026 https://isc.sans.edu/podcastdetail/9964, (Tue, Jun 9th) | Jun 9, 2:10 am |
|---|
| 331 | NFCShare Android malware spreads via fake banking app updates on GitHub | Jun 8, 11:10 pm |
|---|
| 332 | SoFi confirms third-party data breach at Hong Kong subsidiary | Jun 8, 10:10 pm |
|---|
| 333 | One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public | Jun 8, 9:10 pm |
|---|
| 334 | New Shai-Hulud attack trojanizes 19 science-focused PyPI packages | Jun 8, 9:10 pm |
|---|
| 335 | New Apple feature automatically changes your compromised passwords | Jun 8, 9:10 pm |
|---|
| 336 | WhatsApp says it disrupted new NSO spyware phishing attacks | Jun 8, 7:10 pm |
|---|
| 337 | TeamPCP Supply Chain Campaign: Activity Through 2026-06-07, (Mon, Jun 8th) | Jun 8, 6:10 pm |
|---|
| 338 | Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order | Jun 8, 6:10 pm |
|---|
| 339 | Gogs patches critical zero-day enabling remote code execution | Jun 8, 5:10 pm |
|---|
| 340 | Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups | Jun 8, 4:10 pm |
|---|
| 341 | Critical UniFi OS bug lets hackers gain root without authentication | Jun 8, 4:10 pm |
|---|
| 342 | ⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More | Jun 8, 3:10 pm |
|---|
| 343 | Reducing security operations complexity with Wazuh Cloud | Jun 8, 2:10 pm |
|---|
| 344 | The Hardest Fork | Jun 8, 1:10 pm |
|---|
| 345 | AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload | Jun 8, 1:10 pm |
|---|
| 346 | Check Point links VPN zero-day attacks to Qilin ransomware gang | Jun 8, 1:10 pm |
|---|
| 347 | Oxford University discloses data breach after careers platform hack | Jun 8, 12:10 pm |
|---|
| 348 | VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances | Jun 8, 11:10 am |
|---|
| 349 | UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign | Jun 8, 9:10 am |
|---|
| 350 | VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks | Jun 8, 7:10 am |
|---|
| 351 | Over 20,000 Instagram accounts stolen in Meta AI support hack | Jun 8, 6:10 am |
|---|
| 352 | ISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th) | Jun 8, 2:10 am |
|---|
| 353 | Hands on with Intelligent Terminal, an AI-powered Windows Terminal | Jun 8, 12:12 am |
|---|
| 354 | Silent Ransom Group targets law firms with fake IT support calls | Jun 7, 3:10 pm |
|---|
| 355 | C0XMO botnet spreads via DD-WRT router flaw, kills rival malware | Jun 7, 3:10 pm |
|---|
| 356 | New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration | Jun 6, 3:10 pm |
|---|
| 357 | Critical Everest Forms Pro flaw exploited to take over WordPress sites | Jun 6, 3:10 pm |
|---|
| 358 | CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog | Jun 6, 9:10 am |
|---|
| 359 | Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI | Jun 6, 9:10 am |
|---|
| 360 | Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack | Jun 6, 8:10 am |
|---|
| 361 | AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs | Jun 6, 8:10 am |
|---|
| 362 | Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available | Jun 6, 6:10 am |
|---|
| 363 | Suspicious Polyfill login prompts pop up on Toshiba, Muji websites | Jun 5, 10:10 pm |
|---|
| 364 | CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers | Jun 5, 8:10 pm |
|---|
| 365 | IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks | Jun 5, 7:10 pm |
|---|
| 366 | Dark web Nemesis Market vendor gets 26 years for selling drugs | Jun 5, 6:10 pm |
|---|
| 367 | Chinese APT deploys new malware to keep access to hacked networks | Jun 5, 6:10 pm |
|---|
| 368 | Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps | Jun 5, 5:10 pm |
|---|
| 369 | Over 900 US gas station tank gauge systems exposed to attacks | Jun 5, 3:10 pm |
|---|
| 370 | New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework | Jun 5, 2:10 pm |
|---|
| 371 | What 2026 DBIR Confirms: Attacks Are Living in the Browser | Jun 5, 2:10 pm |
|---|
| 372 | Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver | Jun 5, 1:10 pm |
|---|
| 373 | Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites | Jun 5, 9:10 am |
|---|
| 374 | FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins | Jun 5, 8:10 am |
|---|
| 375 | Cisco warns of unpatched SD-WAN zero-day exploited in attacks | Jun 5, 7:10 am |
|---|
| 376 | The Evil MSI Background is Back!, (Fri, Jun 5th) | Jun 5, 7:10 am |
|---|
| 377 | PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network | Jun 5, 6:10 am |
|---|
| 378 | ISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th) | Jun 5, 2:10 am |
|---|
| 379 | Hola Browser for Windows compromised to deliver cryptominer | Jun 4, 10:10 pm |
|---|
| 380 | Brave Software releases Origin for a paid, bloat-free browsing experience | Jun 4, 10:10 pm |
|---|
| 381 | Credit card theft campaign abuses Stripe to host stolen payment info | Jun 4, 9:10 pm |
|---|
| 382 | DentaQuest data breach exposed info of 2.6 million accounts | Jun 4, 7:10 pm |
|---|
| 383 | China-Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africa | Jun 4, 5:10 pm |
|---|
| 384 | Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It | Jun 4, 5:10 pm |
|---|
| 385 | UN food agency discloses breach affecting 600,000 Gaza households | Jun 4, 5:10 pm |
|---|
| 386 | Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public | Jun 4, 5:10 pm |
|---|
| 387 | Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories | Jun 4, 4:10 pm |
|---|
| 388 | New IronWorm malware hits 36 packages in npm supply-chain attack | Jun 4, 4:10 pm |
|---|
| 389 | ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories | Jun 4, 3:10 pm |
|---|
| 390 | Microsoft blames unexpected Windows driver updates on caching issue | Jun 4, 2:10 pm |
|---|
| 391 | Hackers Are After the Gaps in Your Vulnerability Program: Here's Their Playbook | Jun 4, 2:10 pm |
|---|
| 392 | FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads | Jun 4, 1:10 pm |
|---|
| 393 | China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa | Jun 4, 1:10 pm |
|---|
| 394 | Police dismantles fake ID marketplace used by migrant smugglers | Jun 4, 1:10 pm |
|---|
| 395 | Cisco warns of critical Unified CM flaw with PoC exploit code | Jun 4, 11:10 am |
|---|
| 396 | Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months | Jun 4, 10:10 am |
|---|
| 397 | Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS | Jun 4, 10:10 am |
|---|
| 398 | CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog | Jun 4, 9:10 am |
|---|
| 399 | DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets | Jun 4, 7:10 am |
|---|
| 400 | Microsoft's Coreutils for Windows, (Thu, Jun 4th) | Jun 4, 7:10 am |
|---|
| 401 | U.S. sanctions Nobitex crypto exchange used by Iranian ransomware actors | Jun 4, 5:10 am |
|---|
| 402 | ISC Stormcast For Thursday, June 4th, 2026 https://isc.sans.edu/podcastdetail/9958, (Thu, Jun 4th) | Jun 4, 2:10 am |
|---|
| 403 | Chinese hackers use new Atlas RAT malware in European cyberattacks | Jun 3, 10:10 pm |
|---|
| 404 | Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479) | Jun 3, 9:10 pm |
|---|
| 405 | Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag | Jun 3, 9:10 pm |
|---|
| 406 | Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT | Jun 3, 9:10 pm |
|---|
| 407 | WhatsApp, Slack Notifications Could Hijack Google Gemini on Android | Jun 3, 9:10 pm |
|---|
| 408 | CISA warns of cyberattacks targeting fuel tank monitoring systems | Jun 3, 9:10 pm |
|---|
| 409 | The U.S. sanctions Nobitex crypto exchange used by ransomware | Jun 3, 9:10 pm |
|---|
| 410 | New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute | Jun 3, 7:10 pm |
|---|
| 411 | CISA warns of active attacks exploiting Android, Linux bugs | Jun 3, 4:10 pm |
|---|
| 412 | One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens | Jun 3, 2:10 pm |
|---|
| 413 | Continuing Scans for swagger.json, (Wed, Jun 3rd) | Jun 3, 2:10 pm |
|---|
| 414 | What 345 Days of Untested Exposure Looks Like at a Bank | Jun 3, 2:10 pm |
|---|
| 415 | Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore | Jun 3, 1:10 pm |
|---|
| 416 | Acer working to patch max severity zero-days in Wave 7 routers | Jun 3, 12:10 pm |
|---|
| 417 | Police dismantles 9 crime groups in illegal streaming crackdown | Jun 3, 11:10 am |
|---|
| 418 | Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes | Jun 3, 11:10 am |
|---|
| 419 | New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare | Jun 3, 10:10 am |
|---|
| 420 | Google adds Android protection against AI deepfake scam calls | Jun 3, 9:10 am |
|---|
| 421 | Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content | Jun 3, 8:10 am |
|---|
| 422 | VS Code zero-day lets hackers steal GitHub tokens in one click | Jun 3, 8:10 am |
|---|
| 423 | Over 116,000 Minecraft systems infected in WeedHack malware campaign | Jun 3, 4:10 am |
|---|
| 424 | ISC Stormcast For Wednesday, June 3rd, 2026 https://isc.sans.edu/podcastdetail/9956, (Wed, Jun 3rd) | Jun 3, 2:10 am |
|---|
| 425 | OpenAI upgrades GPT-5.5, as it plans to retire legacy ChatGPT models | Jun 2, 11:10 pm |
|---|
| 426 | Microsoft's Coreutils project brings Linux commands to Windows | Jun 2, 11:10 pm |
|---|
| 427 | Over 116,000 Mincraft systems infected in WeedHack malware campaign | Jun 2, 10:15 pm |
|---|
| 428 | Critical Kirki flaw exploited to hijack WordPress admin accounts | Jun 2, 10:15 pm |
|---|
| 429 | Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited | Jun 2, 8:10 pm |
|---|
| 430 | AI-built ransomware toolkit automates EDR evasion, AD discovery | Jun 2, 8:10 pm |
|---|
| 431 | Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation | Jun 2, 7:10 pm |
|---|
| 432 | Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine | Jun 2, 7:10 pm |
|---|
| 433 | Microsoft Exchange Online outage causes email delays, failures | Jun 2, 5:10 pm |
|---|
| 434 | Why the browser is now the front line for AI security | Jun 2, 4:10 pm |
|---|
| 435 | Instagram users locked out after Meta AI abused to steal accounts | Jun 2, 4:10 pm |
|---|
| 436 | CISA flags two-year-old Oracle flaw as actively exploited in attacks | Jun 2, 1:10 pm |
|---|
| 437 | How Leading Organizations Are Turning EDR Into Operational Resilience | Jun 2, 12:10 pm |
|---|
| 438 | Google fixes one actively exploited Android zero-day, 124 flaws | Jun 2, 12:10 pm |
|---|
| 439 | AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It. | Jun 2, 12:10 pm |
|---|
| 440 | Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT | Jun 2, 10:10 am |
|---|
| 441 | New Wave Of Phishing Emails with SVG Files, (Tue, Jun 2nd) | Jun 2, 8:10 am |
|---|
| 442 | Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded | Jun 2, 5:10 am |
|---|
| 443 | ISC Stormcast For Tuesday, June 2nd, 2026 https://isc.sans.edu/podcastdetail/9954, (Tue, Jun 2nd) | Jun 2, 2:10 am |
|---|
| 444 | Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks | Jun 1, 11:10 pm |
|---|
| 445 | Spain arrests doxer leaking sensitive data of govt employees | Jun 1, 10:10 pm |
|---|
| 446 | Red Hat npm packages compromised to steal developer credentials | Jun 1, 10:10 pm |
|---|
| 447 | Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm | Jun 1, 7:10 pm |
|---|
| 448 | Dashlane password manager users locked out by brute force attacks | Jun 1, 7:10 pm |
|---|
| 449 | Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts | Jun 1, 6:10 pm |
|---|
| 450 | WordPress malware campaign hides payloads in Steam profiles | Jun 1, 5:10 pm |
|---|
| 451 | Microsoft investigates Office Apps, Teams file access issues | Jun 1, 3:10 pm |
|---|
| 452 | China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan | Jun 1, 2:10 pm |
|---|
| 453 | ⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More | Jun 1, 2:10 pm |
|---|
| 454 | Race Against Time: Why Faster Vulnerability Alerts Matter | Jun 1, 2:10 pm |
|---|
| 455 | Microsoft fixes outage affecting MFA setup, MySignIn service | Jun 1, 1:10 pm |
|---|
| 456 | Webinar tomorrow: From alert to resolution in network incident response | Jun 1, 1:10 pm |
|---|
| 457 | Critical Windows Netlogon RCE flaw now exploited in attacks | Jun 1, 1:10 pm |
|---|
| 458 | The Security Growth Platform: Why MSPs Are Moving Beyond vCISO Tools | Jun 1, 12:10 pm |
|---|
| 459 | Microsoft confirms outage affecting MFA, My Sign-Ins platform | Jun 1, 12:10 pm |
|---|
| 460 | OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack | Jun 1, 11:10 am |
|---|
| 461 | Microsoft fixes KB5089549 Windows security update install issues | Jun 1, 11:10 am |
|---|
| 462 | Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts | Jun 1, 10:10 am |
|---|
| 463 | ISC Stormcast For Monday, June 1st, 2026 https://isc.sans.edu/podcastdetail/9952, (Mon, Jun 1st) | Jun 1, 2:10 am |
|---|
| 464 | Unidentified RAT pushes NetSupport RAT, (Mon, Jun 1st) | Jun 1, 12:10 am |
|---|
| 465 | YARA-X 1.17.0 Release, (Sun, May 31st) | May 31, 4:10 pm |
|---|
| 466 | WP Maps Pro bug exploited to create admin accounts on WordPress sites | May 31, 3:10 pm |
|---|
| 467 | Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices | May 31, 1:10 pm |
|---|
| 468 | Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks | May 30, 6:10 pm |
|---|
| 469 | New CIFSwitch Linux flaw gives root on multiple distributions | May 30, 3:10 pm |
|---|
| 470 | PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation | May 30, 8:10 am |
|---|
| 471 | New Russia-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks | May 30, 7:10 am |
|---|
| 472 | ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface | May 29, 7:10 pm |
|---|
| 473 | ChatGPT share links abused to host fake outage pages to deliver malware | May 29, 7:10 pm |
|---|
| 474 | California AG sues 23andMe over 2023 breach exposing health data | May 29, 6:10 pm |
|---|
| 475 | Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit | May 29, 4:10 pm |
|---|
| 476 | Dutch govt disrupts malware botnet with 17 million infected devices | May 29, 3:10 pm |
|---|
| 477 | From $5 Attacks to Botnet-Powered Platforms: Inside the DDoS-as-a- Service Market | May 29, 3:10 pm |
|---|
| 478 | Google Chrome adds session cookie theft protection for all users | May 29, 1:10 pm |
|---|
| 479 | What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks | May 29, 12:10 pm |
|---|
| 480 | Man sent to prison for selling data of 7 millions elderly Americans | May 29, 12:10 pm |
|---|
| 481 | New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks | May 29, 12:10 pm |
|---|
| 482 | US charges Google security engineer with Polymarket insider trading | May 29, 11:10 am |
|---|
| 483 | Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets | May 29, 10:10 am |
|---|
| 484 | Charter Communications data breach affects 4.9 million accounts | May 29, 9:10 am |
|---|
| 485 | Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels | May 29, 7:10 am |
|---|
| 486 | ISC Stormcast For Friday, May 29th, 2026 https://isc.sans.edu/podcastdetail/9950, (Fri, May 29th) | May 29, 2:10 am |
|---|
| 487 | Anthropic confirms Claude Mythos-class models will roll out to the public | May 29, 1:10 am |
|---|
| 488 | GreyVibe hackers use ChatGPT, Gemini to power cyberattacks | May 28, 11:10 pm |
|---|
| 489 | BTMOB Android malware service generates custom phishing payloads | May 28, 10:10 pm |
|---|
| 490 | Analysis of a Year of Files Uploaded to DShield Sensors, (Wed, May 27th) | May 28, 8:10 pm |
|---|
| 491 | FBI warns of fake FIFA websites running World Cup fraud schemes | May 28, 7:10 pm |
|---|
| 492 | Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code | May 28, 6:10 pm |
|---|
| 493 | Hackers exploit FortiClient EMS flaw to push infostealer malware | May 28, 6:10 pm |
|---|
| 494 | Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer | May 28, 5:10 pm |
|---|
| 495 | New Gogs zero-day flaw lets hackers get remote code execution | May 28, 3:10 pm |
|---|
| 496 | ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More | May 28, 2:10 pm |
|---|
| 497 | Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal | May 28, 2:10 pm |
|---|
| 498 | How SIEM helps MSPs reduce noise and stop threats faster | May 28, 2:10 pm |
|---|
| 499 | New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users" | May 28, 1:10 pm |
|---|
| 500 | Webinar: Why network incidents take too long to resolve | May 28, 1:10 pm |
|---|
