| 1 | OpenAI engineer arrested for allegedly planting spy device in office | Oct 13, 11:10 pm |
|---|
| 2 | Anthropic warns self-replicating AI could spread to your smart devices | Oct 13, 10:10 pm |
|---|
| 3 | Ghostscript flaw lets hackers hijack servers via PDF uploads | Oct 13, 10:10 pm |
|---|
| 4 | October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th) | Oct 13, 8:10 pm |
|---|
| 5 | Microsoft releases Windows 10 KB5126657 extended security update | Oct 13, 8:10 pm |
|---|
| 6 | Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days | Oct 13, 8:10 pm |
|---|
| 7 | SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft | Oct 13, 7:10 pm |
|---|
| 8 | Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far | Oct 13, 7:10 pm |
|---|
| 9 | Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another | Oct 13, 7:10 pm |
|---|
| 10 | UK Housing Ombudsman Service investigates 'security incident' | Oct 13, 7:10 pm |
|---|
| 11 | Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets | Oct 13, 7:10 pm |
|---|
| 12 | Microsoft: Windows 11 24H2 Home and Pro reached end of support | Oct 13, 7:10 pm |
|---|
| 13 | Windows 11 KB5127648 & KB5126653 cumulative updates released | Oct 13, 6:10 pm |
|---|
| 14 | GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking | Oct 13, 5:10 pm |
|---|
| 15 | TFG London cyberattack disrupts systems at Hobbs and Whistles retailers | Oct 13, 5:10 pm |
|---|
| 16 | Docker Hub flaw let attackers impersonate users, tamper with images | Oct 13, 4:10 pm |
|---|
| 17 | Ivanti warns of Connect Secure zero-day exploited in attacks | Oct 13, 4:10 pm |
|---|
| 18 | Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation | Oct 13, 3:10 pm |
|---|
| 19 | The MFA Gaps Attackers are Still Exploiting | Oct 13, 3:10 pm |
|---|
| 20 | SAP warns of maximum severity OAuth2 SSRF security flaw | Oct 13, 2:10 pm |
|---|
| 21 | [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls | Oct 13, 1:10 pm |
|---|
| 22 | Product Walkthrough: Bitdefender AI Visibility and Control | Oct 13, 12:10 pm |
|---|
| 23 | LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network | Oct 13, 12:10 pm |
|---|
| 24 | GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code | Oct 13, 9:10 am |
|---|
| 25 | Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control | Oct 13, 9:10 am |
|---|
| 26 | Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers | Oct 13, 9:10 am |
|---|
| 27 | Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies | Oct 13, 7:10 am |
|---|
| 28 | ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th) | Oct 13, 2:10 am |
|---|
| 29 | Norway fines Microsoft ad firm $9.6 million over Grindr data sharing | Oct 12, 9:10 pm |
|---|
| 30 | Yandex confirms service outage as users lose access to cloud files | Oct 12, 8:10 pm |
|---|
| 31 | Anthropic takes risky AI tests offline after models breach govt sites | Oct 12, 7:10 pm |
|---|
| 32 | ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More | Oct 12, 5:10 pm |
|---|
| 33 | Ledger confirms spy chip implant behind wallet crypto thefts | Oct 12, 5:10 pm |
|---|
| 34 | Cyberattack shuts down refrigerators at French supermarkets | Oct 12, 4:10 pm |
|---|
| 35 | Retail giant Ahold Delhaize takes systems offline after cyberattack | Oct 12, 2:10 pm |
|---|
| 36 | Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption | Oct 12, 2:10 pm |
|---|
| 37 | Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports | Oct 12, 1:10 pm |
|---|
| 38 | Bring Your Own Agent: Your Employees' Assistants Are Already Logged In | Oct 12, 1:10 pm |
|---|
| 39 | GitLab warns of max severity code execution vulnerability | Oct 12, 1:10 pm |
|---|
| 40 | Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch | Oct 12, 12:10 pm |
|---|
| 41 | Microsoft: Windows 11 23H2 reaches end of support in 30 days | Oct 12, 12:10 pm |
|---|
| 42 | Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE | Oct 12, 10:10 am |
|---|
| 43 | CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records | Oct 12, 8:10 am |
|---|
| 44 | ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th) | Oct 12, 2:10 am |
|---|
| 45 | Nippon Columbia malware incident exposes 8.6 million karaoke fan records | Oct 11, 3:10 pm |
|---|
| 46 | FBI Arrests Executive at Ransomware Negotiation Firm | Oct 10, 3:10 pm |
|---|
| 47 | ARTEX AI, Claude agents used in cyberattacks on South Korean banks | Oct 10, 3:10 pm |
|---|
| 48 | Cyber exec arrested in case allegedly tied to ShinyHunters hackers | Oct 10, 3:10 pm |
|---|
| 49 | Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management | Oct 10, 1:10 pm |
|---|
| 50 | The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't | Oct 10, 12:10 pm |
|---|
| 51 | Why TLP should not replace your internal information classification, (Sat, Oct 10th) | Oct 10, 10:10 am |
|---|
| 52 | Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws | Oct 10, 10:10 am |
|---|
| 53 | FBI Arrests Founder of Ransomware Negotiation Firm | Oct 10, 1:10 am |
|---|
| 54 | Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories | Oct 9, 9:10 pm |
|---|
| 55 | Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks | Oct 9, 9:10 pm |
|---|
| 56 | FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack | Oct 9, 7:10 pm |
|---|
| 57 | Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto | Oct 9, 6:10 pm |
|---|
| 58 | P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands | Oct 9, 5:10 pm |
|---|
| 59 | FBI arrests another suspected ShinyHunters hacker after agency breach | Oct 9, 5:10 pm |
|---|
| 60 | Germany arrests alleged core Qilin ransomware member after extradition | Oct 9, 4:10 pm |
|---|
| 61 | Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge | Oct 9, 3:10 pm |
|---|
| 62 | Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects | Oct 9, 3:10 pm |
|---|
| 63 | Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access | Oct 9, 3:10 pm |
|---|
| 64 | TP-Link Sued by Four More U.S. States Over Router Security and China Ties | Oct 9, 3:10 pm |
|---|
| 65 | How to keep AI agents within their permissions | Oct 9, 2:10 pm |
|---|
| 66 | Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies | Oct 9, 1:10 pm |
|---|
| 67 | Max severity SonicWall SMA1000 flaw now exploited in attacks | Oct 9, 1:10 pm |
|---|
| 68 | Man admits to running network of 15,000 money mules for cybercriminals | Oct 9, 12:10 pm |
|---|
| 69 | The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition | Oct 9, 12:10 pm |
|---|
| 70 | Microsoft: Outdated Windows devices will stop receiving security updates | Oct 9, 11:10 am |
|---|
| 71 | Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments | Oct 9, 10:10 am |
|---|
| 72 | Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own | Oct 9, 10:10 am |
|---|
| 73 | GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys | Oct 9, 10:10 am |
|---|
| 74 | Citrix warns admins to patch new NetScaler RCE flaw immediately | Oct 9, 9:10 am |
|---|
| 75 | ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th) | Oct 9, 8:10 am |
|---|
| 76 | FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions | Oct 9, 7:10 am |
|---|
| 77 | Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland | Oct 9, 6:10 am |
|---|
| 78 | FBI disrupts Chinese hacking tools used to breach critical infrastructure | Oct 8, 10:10 pm |
|---|
| 79 | Low-cost Android phones ship with residential proxy malware | Oct 8, 8:10 pm |
|---|
| 80 | Ransomware attack disrupts Japan's IDCF Cloud used by govt clients | Oct 8, 8:10 pm |
|---|
| 81 | ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories | Oct 8, 7:10 pm |
|---|
| 82 | FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails | Oct 8, 7:10 pm |
|---|
| 83 | Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks | Oct 8, 6:10 pm |
|---|
| 84 | FakeGit malware campaign returns with 17,610 malicious GitHub repos | Oct 8, 6:10 pm |
|---|
| 85 | Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th) | Oct 8, 5:10 pm |
|---|
| 86 | ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms | Oct 8, 4:10 pm |
|---|
| 87 | Cisco warns of critical flaws allowing Nexus switch takeover | Oct 8, 4:10 pm |
|---|
| 88 | UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML | Oct 8, 4:10 pm |
|---|
| 89 | Uranium crypto exchange hacker convicted for stealing $53 million | Oct 8, 2:10 pm |
|---|
| 90 | OAuth grants pile up faster than you can review them. Here's how to keep up. | Oct 8, 2:10 pm |
|---|
| 91 | Microsoft Teams to get support for third-party deepfake detection tools | Oct 8, 1:10 pm |
|---|
| 92 | ASOS links data breach to social engineering attack, credential theft | Oct 8, 12:10 pm |
|---|
| 93 | Owner of Empire cybercrime market gets 40 years in prison | Oct 8, 11:10 am |
|---|
| 94 | Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia | Oct 8, 11:10 am |
|---|
| 95 | 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases | Oct 8, 10:10 am |
|---|
| 96 | MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data | Oct 8, 8:10 am |
|---|
| 97 | U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks | Oct 8, 8:10 am |
|---|
| 98 | Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm | Oct 8, 7:10 am |
|---|
| 99 | Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland | Oct 8, 7:10 am |
|---|
| 100 | ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th) | Oct 8, 2:10 am |
|---|
| 101 | Ransomware recovery CEO charged over secret ransom payments | Oct 7, 11:10 pm |
|---|
| 102 | FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins | Oct 7, 10:10 pm |
|---|
| 103 | Hackers hijack Google domains after breaching ccTLD registries | Oct 7, 9:10 pm |
|---|
| 104 | Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains | Oct 7, 8:10 pm |
|---|
| 105 | SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances | Oct 7, 6:10 pm |
|---|
| 106 | Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer | Oct 7, 6:10 pm |
|---|
| 107 | PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet | Oct 7, 5:10 pm |
|---|
| 108 | Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely | Oct 7, 5:10 pm |
|---|
| 109 | Microsoft Outlook to block MSIX attachments starting November | Oct 7, 4:10 pm |
|---|
| 110 | Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th) | Oct 7, 3:10 pm |
|---|
| 111 | PoeLLM malware infects exposed AI servers in cryptomining attacks | Oct 7, 3:10 pm |
|---|
| 112 | ShinyHunters Extorted Boeing Spin-off Prior to Arrests | Oct 7, 2:10 pm |
|---|
| 113 | Ransomware has a new target. Is your backup ready? | Oct 7, 2:10 pm |
|---|
| 114 | What Is Agentic Pentesting? What It Proves, and Where It Stops. | Oct 7, 1:10 pm |
|---|
| 115 | Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details | Oct 7, 1:10 pm |
|---|
| 116 | FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials | Oct 7, 1:10 pm |
|---|
| 117 | The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow | Oct 7, 1:10 pm |
|---|
| 118 | Hackers exploit critical Atlassian flaw after public PoC release | Oct 7, 1:10 pm |
|---|
| 119 | SonicWall warns of max severity SSRF flaw in SMA1000 gateways | Oct 7, 12:10 pm |
|---|
| 120 | Advantest confirms personal information stolen in ransomware attack | Oct 7, 11:10 am |
|---|
| 121 | Musician sent to prison for $10 million streaming fraud using AI bots | Oct 7, 11:10 am |
|---|
| 122 | Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws | Oct 7, 10:10 am |
|---|
| 123 | 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer | Oct 7, 8:10 am |
|---|
| 124 | ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th) | Oct 7, 2:10 am |
|---|
| 125 | Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan | Oct 6, 9:10 pm |
|---|
| 126 | Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes | Oct 6, 9:10 pm |
|---|
| 127 | Ninja Forms plugin flaw exploited to hack WordPress sites | Oct 6, 9:10 pm |
|---|
| 128 | Hackers exploit 32 zero-days on first day of Pwn2Own Ireland | Oct 6, 8:10 pm |
|---|
| 129 | Atlassian warns of critical file-access flaw in Jira, Confluence | Oct 6, 6:10 pm |
|---|
| 130 | ASOS confirms data breach after “HACKED” in-app notifications | Oct 6, 5:10 pm |
|---|
| 131 | Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes | Oct 6, 4:10 pm |
|---|
| 132 | How to secure RMM software: 8 controls MSPs should test | Oct 6, 2:10 pm |
|---|
| 133 | Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers | Oct 6, 12:10 pm |
|---|
| 134 | Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies | Oct 6, 12:10 pm |
|---|
| 135 | Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits | Oct 6, 12:10 pm |
|---|
| 136 | ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th) | Oct 6, 12:10 pm |
|---|
| 137 | LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings | Oct 6, 12:10 pm |
|---|
| 138 | Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports | Oct 6, 10:10 am |
|---|
| 139 | Nikkei discloses breaches of employees’ Microsoft, Google email accounts | Oct 6, 10:10 am |
|---|
| 140 | More RMM Tools In the Wild, (Tue, Oct 6th) | Oct 6, 10:10 am |
|---|
| 141 | Engineer sentenced for locking over 3,000 devices on employer network | Oct 6, 9:10 am |
|---|
| 142 | FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach | Oct 6, 8:10 am |
|---|
| 143 | Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products | Oct 6, 8:10 am |
|---|
| 144 | ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits | Oct 6, 6:10 am |
|---|
| 145 | Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account | Oct 6, 6:10 am |
|---|
| 146 | OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU | Oct 5, 11:10 pm |
|---|
| 147 | Rejetto HFS servers now actively scanned for critical RCE flaw | Oct 5, 9:10 pm |
|---|
| 148 | Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes | Oct 5, 6:10 pm |
|---|
| 149 | IQVIA fined $7.8 million for failing to properly anonymize health data | Oct 5, 6:10 pm |
|---|
| 150 | Denmark population registry data breach affects 8.8 million people | Oct 5, 4:10 pm |
|---|
| 151 | ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests | Oct 5, 3:10 pm |
|---|
| 152 | South Korea probes bank breaches amid suspected AI-powered attacks | Oct 5, 3:10 pm |
|---|
| 153 | New Dell System Update flaw lets hackers gain root privileges | Oct 5, 3:10 pm |
|---|
| 154 | Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 | Oct 5, 2:10 pm |
|---|
| 155 | The Credential Layer Is Expanding Faster Than Security Teams Can See It | Oct 5, 2:10 pm |
|---|
| 156 | tenfold CE: Our free Identity Governance tool just got 2 new features | Oct 5, 2:10 pm |
|---|
| 157 | Alleged dev of Ploutus ATM malware appears in US court after arrest | Oct 5, 1:10 pm |
|---|
| 158 | Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access | Oct 5, 12:10 pm |
|---|
| 159 | OpenAI will show visual ads in ChatGPT while you generate images | Oct 5, 11:10 am |
|---|
| 160 | Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE | Oct 5, 10:10 am |
|---|
| 161 | Microsoft: Windows KB5124010 update crashes some games and apps | Oct 5, 10:10 am |
|---|
| 162 | Google halts open-source bug bounty program amid AI spam surge | Oct 5, 9:10 am |
|---|
| 163 | New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline | Oct 5, 8:10 am |
|---|
| 164 | ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th) | Oct 5, 2:10 am |
|---|
| 165 | TTY Logs and the Data it Captures, (Sun, Oct 4th) | Oct 5, 1:10 am |
|---|
| 166 | Citrix patches NetScaler SAML zero-day exploited in attacks | Oct 4, 10:10 pm |
|---|
| 167 | Anthropic asks Claude users to share voice data for AI model training | Oct 4, 11:10 am |
|---|
| 168 | China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing | Oct 4, 8:10 am |
|---|
| 169 | ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members | Oct 4, 8:10 am |
|---|
| 170 | User Agent Strings Curiosities, (Sun, Oct 4th) | Oct 4, 8:10 am |
|---|
| 171 | Google Gemini could soon get full access to your Mac’s files, apps and the web | Oct 4, 12:10 am |
|---|
| 172 | ShinyHunters hacker reportedly detained in Jordan, aiding FBI | Oct 3, 7:10 pm |
|---|
| 173 | Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware | Oct 3, 4:10 pm |
|---|
| 174 | MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics | Oct 3, 4:10 pm |
|---|
| 175 | Danish university DTU breach exposes data of up to 200,000 people | Oct 3, 3:10 pm |
|---|
| 176 | YARA-X 1.21.0 Release, (Sat, Oct 3rd) | Oct 3, 3:10 pm |
|---|
| 177 | The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations | Oct 3, 11:10 am |
|---|
| 178 | Warlock ransomware breach SharePoint in water, telecom operator attacks | Oct 2, 7:10 pm |
|---|
| 179 | Frontline Education breach exposes school district employee data | Oct 2, 7:10 pm |
|---|
| 180 | Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes | Oct 2, 6:10 pm |
|---|
| 181 | Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign | Oct 2, 6:10 pm |
|---|
| 182 | GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers | Oct 2, 6:10 pm |
|---|
| 183 | GitLab warns of critical RCE vulnerability in AI Gateway service | Oct 2, 5:10 pm |
|---|
| 184 | US sanctions Tren de Aragua gang members in ATM hacks crackdown | Oct 2, 4:10 pm |
|---|
| 185 | The EDR blind spot: 3 ways browser attacks evade endpoint telemetry | Oct 2, 2:10 pm |
|---|
| 186 | OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling | Oct 2, 1:10 pm |
|---|
| 187 | Dell asks admins to patch max severity CSM flaws as soon as possible | Oct 2, 1:10 pm |
|---|
| 188 | Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report | Oct 2, 12:10 pm |
|---|
| 189 | Microsoft’s X account hacked in crypto pump-and-dump scheme | Oct 2, 10:10 am |
|---|
| 190 | Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools | Oct 2, 8:10 am |
|---|
| 191 | Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes | Oct 2, 7:10 am |
|---|
| 192 | ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd) | Oct 2, 2:10 am |
|---|
| 193 | Fortinet warns of critical FortiMail flaw exploited in zero-day attacks | Oct 1, 11:10 pm |
|---|
| 194 | Autonomous AI agents tried to hack US, Canadian government websites | Oct 1, 9:10 pm |
|---|
| 195 | Microsoft says threat actors are ahead in the early AI race | Oct 1, 8:10 pm |
|---|
| 196 | ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories | Oct 1, 5:10 pm |
|---|
| 197 | Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers | Oct 1, 5:10 pm |
|---|
| 198 | The Day-One Hole in Zero Trust Architecture | Oct 1, 3:10 pm |
|---|
| 199 | Police dismantle KillSec ransomware gang allegedly led by 16-year-old | Oct 1, 3:10 pm |
|---|
| 200 | WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory | Oct 1, 3:10 pm |
|---|
| 201 | Kiteworks patches max severity code injection vulnerability | Oct 1, 2:10 pm |
|---|
| 202 | How Financial Services Companies Can Modernize Their Software Supply Chain | Oct 1, 1:10 pm |
|---|
| 203 | Microsoft enables Windows settings backup by default for orgs | Oct 1, 12:10 pm |
|---|
| 204 | CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV | Oct 1, 11:10 am |
|---|
| 205 | OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates | Oct 1, 11:10 am |
|---|
| 206 | Hackers stole Pentagon personnel records of over 3 million people | Oct 1, 10:10 am |
|---|
| 207 | Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version | Oct 1, 9:10 am |
|---|
| 208 | Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path | Oct 1, 8:10 am |
|---|
| 209 | Metamask discloses security incident affecting its infrastructure | Oct 1, 8:10 am |
|---|
| 210 | MetaMask Security Incident Prompts Exit of Affected Ethereum Validators | Oct 1, 6:10 am |
|---|
| 211 | Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft | Oct 1, 6:10 am |
|---|
| 212 | ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st) | Oct 1, 6:10 am |
|---|
| 213 | Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs | Oct 1, 5:10 am |
|---|
| 214 | ISC Stormcast For Thursday, October 1st, 2026 https://isc.sans.edu/podcastdetail/10118, (Thu, Oct 1st) | Oct 1, 2:10 am |
|---|
| 215 | Russian state hackers use new RedFlick technique to push malware | Sep 30, 9:10 pm |
|---|
| 216 | DIVD says Zammad zero-days enabled AI-driven network breach | Sep 30, 8:10 pm |
|---|
| 217 | Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks | Sep 30, 6:10 pm |
|---|
| 218 | Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets | Sep 30, 6:10 pm |
|---|
| 219 | Over 543,000 valid credentials exposed in public GitHub repositories | Sep 30, 6:10 pm |
|---|
| 220 | Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures | Sep 30, 4:10 pm |
|---|
| 221 | Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager | Sep 30, 4:10 pm |
|---|
| 222 | CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS | Sep 30, 4:10 pm |
|---|
| 223 | Cisco warns of new SD-WAN zero-day exploited in attacks | Sep 30, 3:10 pm |
|---|
| 224 | Microsoft to block Entra ID script injection attacks starting October | Sep 30, 2:10 pm |
|---|
| 225 | AI's Third Wave: Coworkers Break the Security Model That Worked for Agents | Sep 30, 2:10 pm |
|---|
| 226 | Know Your Enemy: Browser-Based Attack Techniques in 2026 | Sep 30, 1:10 pm |
|---|
| 227 | TeamViewer urges users to patch severe flaws “as soon as possible” | Sep 30, 1:10 pm |
|---|
| 228 | US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access | Sep 30, 12:10 pm |
|---|
| 229 | Bitget hacked via zero-day in third-party security products | Sep 30, 12:10 pm |
|---|
| 230 | AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub | Sep 30, 12:10 pm |
|---|
| 231 | OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted | Sep 30, 10:10 am |
|---|
| 232 | Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT | Sep 30, 10:10 am |
|---|
| 233 | Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution | Sep 30, 7:10 am |
|---|
| 234 | ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th) | Sep 30, 2:10 am |
|---|
| 235 | Microsoft is rolling out Linux container support to WSL | Sep 30, 1:10 am |
|---|
| 236 | Signal adds encypted local backup support to iOS, desktop apps | Sep 29, 10:10 pm |
|---|
| 237 | Custom ChatGPTs push ClickFix attacks to deploy RAT malware | Sep 29, 9:10 pm |
|---|
| 238 | FBI tells ShinyHunters members to turn themselves in after recent arrest | Sep 29, 8:10 pm |
|---|
| 239 | Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor | Sep 29, 7:10 pm |
|---|
| 240 | French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks | Sep 29, 7:10 pm |
|---|
| 241 | Hackers exploit Citrix NetScaler zero-day to deploy web shells | Sep 29, 7:10 pm |
|---|
| 242 | New Spectre v2 attack variant leaks Linux root password hash in minutes | Sep 29, 6:10 pm |
|---|
| 243 | Windows 11 2026 Update released, here's everything you need to know | Sep 29, 6:10 pm |
|---|
| 244 | Former US Air Force members sent to prison over BEC attacks | Sep 29, 6:10 pm |
|---|
| 245 | New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses | Sep 29, 5:10 pm |
|---|
| 246 | 101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent | Sep 29, 4:10 pm |
|---|
| 247 | Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown | Sep 29, 4:10 pm |
|---|
| 248 | Automated AI agent used to breach cybersecurity nonprofit DIVD | Sep 29, 4:10 pm |
|---|
| 249 | Scans for Wordfence Protected Websites, (Tue, Sep 29th) | Sep 29, 2:10 pm |
|---|
| 250 | Catch threats before they escalate with real-time Identity Telemetry | Sep 29, 2:10 pm |
|---|
| 251 | Vietnamese man charged in $16 million 'pig butchering' crypto scam | Sep 29, 12:10 pm |
|---|
| 252 | Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation | Sep 29, 10:10 am |
|---|
| 253 | Kiteworks patches critical flaw, brings customer systems online | Sep 29, 9:10 am |
|---|
| 254 | Apple patches CoreGraphics zero-day flaw exploited in attacks | Sep 29, 8:10 am |
|---|
| 255 | OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot | Sep 29, 7:10 am |
|---|
| 256 | OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions | Sep 29, 7:10 am |
|---|
| 257 | Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials | Sep 29, 7:10 am |
|---|
| 258 | ISC Stormcast For Tuesday, September 29th, 2026 https://isc.sans.edu/podcastdetail/10114, (Tue, Sep 29th) | Sep 29, 2:10 am |
|---|
| 259 | Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950), (Mon, Sep 28th) | Sep 28, 11:10 pm |
|---|
| 260 | Apple Emergency Patch for iOS 26/macOS26/macOS15 (CVE-2026-86950), (Mon, Sep 28th) | Sep 28, 10:10 pm |
|---|
| 261 | Times Car confirms data breach affecting 6.6 million user accounts | Sep 28, 9:10 pm |
|---|
| 262 | Japan's Keio confirms ransomware attack disrupted business systems | Sep 28, 9:10 pm |
|---|
| 263 | Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks | Sep 28, 8:10 pm |
|---|
| 264 | Over 16,000 Supabase databases expose PII, passwords, auth tokens | Sep 28, 8:10 pm |
|---|
| 265 | Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks | Sep 28, 8:10 pm |
|---|
| 266 | Dutch police confirm arrest in ShinyHunters hacking investigation | Sep 28, 8:10 pm |
|---|
| 267 | RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims | Sep 28, 7:10 pm |
|---|
| 268 | Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M | Sep 28, 7:10 pm |
|---|
| 269 | IAM for AI agents: A Practical Enterprise Framework | Sep 28, 7:10 pm |
|---|
| 270 | Misconfigured Supabase apps expose data in over 16,000 databases | Sep 28, 7:10 pm |
|---|
| 271 | JadePuffer agentic AI attacks target Azure, destroy cloud resources | Sep 28, 4:10 pm |
|---|
| 272 | Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | Sep 28, 3:10 pm |
|---|
| 273 | 80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking | Sep 28, 2:10 pm |
|---|
| 274 | ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats | Sep 28, 2:10 pm |
|---|
| 275 | Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent | Sep 28, 1:10 pm |
|---|
| 276 | Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI | Sep 28, 1:10 pm |
|---|
| 277 | CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally | Sep 28, 11:10 am |
|---|
| 278 | JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources | Sep 28, 11:10 am |
|---|
| 279 | Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist | Sep 28, 10:10 am |
|---|
| 280 | US soldier gets 70 months in prison for extorting 10 tech, telecom firms | Sep 28, 8:10 am |
|---|
| 281 | CISA orders feds to patch exploited Citrix flaws by Wednesday | Sep 28, 7:10 am |
|---|
| 282 | ISC Stormcast For Monday, September 28th, 2026 https://isc.sans.edu/podcastdetail/10112, (Mon, Sep 28th) | Sep 28, 2:10 am |
|---|
| 283 | OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email | Sep 28, 12:10 am |
|---|
| 284 | Citrix confirms two NetScaler RCE zero-days exploited in attacks | Sep 27, 6:10 pm |
|---|
| 285 | Wireshark 4.6.9 Released, (Sun, Sep 27th) | Sep 27, 4:10 pm |
|---|
| 286 | Citrix admins warned to shut down NetScalers over 2 exploited zero-days | Sep 27, 4:10 pm |
|---|
| 287 | Cloudflare fixes Containers cross-tenant flaw exposing customer data | Sep 27, 3:10 pm |
|---|
| 288 | Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors | Sep 27, 2:10 pm |
|---|
| 289 | Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation | Sep 27, 8:10 am |
|---|
| 290 | Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials | Sep 26, 7:10 pm |
|---|
| 291 | ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | Sep 26, 7:10 pm |
|---|
| 292 | Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer | Sep 26, 5:10 pm |
|---|
| 293 | Microsoft pauses KB5002907 update after Office license deactivations | Sep 26, 4:10 pm |
|---|
| 294 | Zero Trust for AI Agents Starts With Fixing Zero Visibility | Sep 26, 3:10 pm |
|---|
| 295 | Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells | Sep 26, 3:10 pm |
|---|
| 296 | GitHub Actions re-enabled with Mini Shai-Hulud payload still active | Sep 26, 3:10 pm |
|---|
| 297 | OpenAI's AI agents accidentally uploaded user-provided images to third-party sites | Sep 26, 1:10 pm |
|---|
| 298 | Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack | Sep 26, 10:10 am |
|---|
| 299 | SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild | Sep 26, 10:10 am |
|---|
| 300 | Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link | Sep 26, 10:10 am |
|---|
| 301 | Kiteworks urges 6-hour server shutdown over potential zero-day attacks | Sep 25, 10:10 pm |
|---|
| 302 | U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions | Sep 25, 10:10 pm |
|---|
| 303 | ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw | Sep 25, 9:10 pm |
|---|
| 304 | Elementor WordPress flaw lets attackers create admin accounts | Sep 25, 7:10 pm |
|---|
| 305 | CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks | Sep 25, 6:10 pm |
|---|
| 306 | PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence | Sep 25, 4:10 pm |
|---|
| 307 | Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware | Sep 25, 4:10 pm |
|---|
| 308 | Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions | Sep 25, 4:10 pm |
|---|
| 309 | With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance | Sep 25, 3:10 pm |
|---|
| 310 | OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex | Sep 25, 3:10 pm |
|---|
| 311 | The SOC Doesn't Need to Start Over with Every Alert | Sep 25, 1:10 pm |
|---|
| 312 | Microsoft plans to deprecate Windows Deployment Services | Sep 25, 1:10 pm |
|---|
| 313 | Rydox marketplace admin pleads guilty, faces 22 years in prison | Sep 25, 12:10 pm |
|---|
| 314 | Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild | Sep 25, 11:10 am |
|---|
| 315 | Microsoft: Recent Windows updates cause desktop loading issues | Sep 25, 11:10 am |
|---|
| 316 | Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise | Sep 25, 11:10 am |
|---|
| 317 | Hackers steal $351.6 million in Bitget crypto exchange hack | Sep 25, 9:10 am |
|---|
| 318 | WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV | Sep 25, 7:10 am |
|---|
| 319 | Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data | Sep 25, 7:10 am |
|---|
| 320 | A Closer Look at Malware From the Macfinger ClickFix Campaign, (Fri, Sep 25th) | Sep 25, 7:10 am |
|---|
| 321 | ISC Stormcast For Friday, September 25th, 2026 https://isc.sans.edu/podcastdetail/10110, (Fri, Sep 25th) | Sep 25, 4:10 am |
|---|
| 322 | New Carbonato malware uses AI agents to hijack exposed Docker hosts | Sep 24, 9:10 pm |
|---|
| 323 | MacSync malware uses public iCloud calendars to deliver new payloads | Sep 24, 9:10 pm |
|---|
| 324 | ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories | Sep 24, 7:10 pm |
|---|
| 325 | Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions | Sep 24, 7:10 pm |
|---|
| 326 | Exposed GitLab project email addresses let attackers push code | Sep 24, 6:10 pm |
|---|
| 327 | Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content | Sep 24, 5:10 pm |
|---|
| 328 | FedRAMP VDR & VER: Daily Scans Are Only the Beginning | Sep 24, 3:10 pm |
|---|
| 329 | Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer | Sep 24, 3:10 pm |
|---|
| 330 | Hackers now exploit critical Roundcube flaw in code injection attacks | Sep 24, 2:10 pm |
|---|
| 331 | Windows 11 KB5124010 update released with 46 changes and fixes | Sep 24, 1:10 pm |
|---|
| 332 | Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore | Sep 24, 12:10 pm |
|---|
| 333 | Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls | Sep 24, 12:10 pm |
|---|
| 334 | 17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360 | Sep 24, 11:10 am |
|---|
| 335 | CISA: Ransomware gangs now exploiting critical TeamCity flaw | Sep 24, 11:10 am |
|---|
| 336 | OpenAI hacked Australian Medicare govt site, probed data providers | Sep 24, 10:10 am |
|---|
| 337 | Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure | Sep 24, 9:10 am |
|---|
| 338 | TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords | Sep 24, 9:10 am |
|---|
| 339 | OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files | Sep 24, 9:10 am |
|---|
| 340 | Microsoft fixes bug that broke Windows File History backup feature | Sep 24, 9:10 am |
|---|
| 341 | One URL, Three Different Tricks, (Thu, Sep 24th) | Sep 24, 7:10 am |
|---|
| 342 | ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th) | Sep 24, 4:10 am |
|---|
| 343 | Placeholder domain used in dev docs now serves ClickFix attacks | Sep 23, 11:10 pm |
|---|
| 344 | New RemControl Android banking malware targets users in Europe and Canada | Sep 23, 10:10 pm |
|---|
| 345 | Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry | Sep 23, 8:10 pm |
|---|
| 346 | Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | Sep 23, 8:10 pm |
|---|
| 347 | Hackers start exploiting critical WordPress flaw for code execution | Sep 23, 7:10 pm |
|---|
| 348 | A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You | Sep 23, 6:10 pm |
|---|
| 349 | MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key | Sep 23, 5:10 pm |
|---|
| 350 | Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers | Sep 23, 5:10 pm |
|---|
| 351 | This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move | Sep 23, 4:10 pm |
|---|
| 352 | InfraTrust report warns network management systems under attack | Sep 23, 3:10 pm |
|---|
| 353 | Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI | Sep 23, 2:10 pm |
|---|
| 354 | How One Kubernetes YAML Can Hand Over a GCP Organization | Sep 23, 2:10 pm |
|---|
| 355 | Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape | Sep 23, 1:10 pm |
|---|
| 356 | Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests | Sep 23, 1:10 pm |
|---|
| 357 | 545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent | Sep 23, 1:10 pm |
|---|
| 358 | New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control | Sep 23, 1:10 pm |
|---|
| 359 | Arista patches actively exploited VeloCloud Orchestrator zero-day | Sep 23, 1:10 pm |
|---|
| 360 | Microsoft: September Windows updates break Always On VPN connections | Sep 23, 12:10 pm |
|---|
| 361 | Ryuk ransomware member sentenced to 24 months in prison | Sep 23, 9:10 am |
|---|
| 362 | Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware | Sep 23, 9:10 am |
|---|
| 363 | F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers | Sep 23, 9:10 am |
|---|
| 364 | Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input | Sep 23, 8:10 am |
|---|
| 365 | F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks | Sep 23, 8:10 am |
|---|
| 366 | ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants | Sep 23, 7:10 am |
|---|
| 367 | ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd) | Sep 23, 3:10 am |
|---|
| 368 | Macfinger ClickFix campaign, (Tue, Sep 22nd) | Sep 23, 1:10 am |
|---|
| 369 | Sweden fines Miljödata $183,000 over breach affecting 2.2 million | Sep 22, 10:10 pm |
|---|
| 370 | Rogue external MFA providers can steal passwords during logins | Sep 22, 10:10 pm |
|---|
| 371 | Chinese hackers exploit WordPress, Zyxel flaws to steal govt data | Sep 22, 9:10 pm |
|---|
| 372 | Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials | Sep 22, 8:10 pm |
|---|
| 373 | WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers | Sep 22, 8:10 pm |
|---|
| 374 | Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks | Sep 22, 8:10 pm |
|---|
| 375 | ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach | Sep 22, 8:10 pm |
|---|
| 376 | Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates | Sep 22, 6:10 pm |
|---|
| 377 | Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials | Sep 22, 6:10 pm |
|---|
| 378 | Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises | Sep 22, 6:10 pm |
|---|
| 379 | Reducing shadow IT visibility gaps with Wazuh | Sep 22, 6:10 pm |
|---|
| 380 | New ClosedQuorum Windows malware uses AI for attack decisions | Sep 22, 6:10 pm |
|---|
| 381 | Check Point warns of Management Server zero-day exploited in attacks | Sep 22, 5:10 pm |
|---|
| 382 | The Truth about GET and HTTP Standards, (Tue, Sep 22nd) | Sep 22, 3:10 pm |
|---|
| 383 | EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts | Sep 22, 3:10 pm |
|---|
| 384 | New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups | Sep 22, 2:10 pm |
|---|
| 385 | AI Agents Are Rewriting the Rules of Lateral Movement | Sep 22, 2:10 pm |
|---|
| 386 | D-Link warns of max severity zero-day bug in DIR-822A routers | Sep 22, 1:10 pm |
|---|
| 387 | Webinar tomorrow: Inside real-world Google Workspace breaches | Sep 22, 1:10 pm |
|---|
| 388 | SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE | Sep 22, 12:10 pm |
|---|
| 389 | New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory | Sep 22, 12:10 pm |
|---|
| 390 | DORA Year Two: Can Your SOC Actually See the Attack? | Sep 22, 12:10 pm |
|---|
| 391 | Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal | Sep 22, 11:10 am |
|---|
| 392 | SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing | Sep 22, 10:10 am |
|---|
| 393 | New Windows Defender zero-day blocks Microsoft antivirus updates | Sep 22, 10:10 am |
|---|
| 394 | CISA orders feds to patch Zyxel flaw exploited for data theft | Sep 22, 9:10 am |
|---|
| 395 | Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access | Sep 22, 7:10 am |
|---|
| 396 | WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session | Sep 22, 7:10 am |
|---|
| 397 | One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor | Sep 22, 7:10 am |
|---|
| 398 | ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd) | Sep 22, 4:10 am |
|---|
| 399 | BigCommerce alerts merchants of data breach linked to Ribon apps | Sep 21, 10:10 pm |
|---|
| 400 | CISA alerts of active exploitation of three Linux kernel flaws | Sep 21, 9:10 pm |
|---|
| 401 | WordPress Click2Shell flaw lets hackers execute PHP on the server | Sep 21, 7:10 pm |
|---|
| 402 | Google Fined €403 Million Over GDPR Violations Tied to Location Data | Sep 21, 6:10 pm |
|---|
| 403 | Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto | Sep 21, 6:10 pm |
|---|
| 404 | Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR | Sep 21, 6:10 pm |
|---|
| 405 | Microsoft to retire Microsoft 365 Companion apps in December | Sep 21, 6:10 pm |
|---|
| 406 | Google fined €403 million over location data privacy violations | Sep 21, 4:10 pm |
|---|
| 407 | TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data | Sep 21, 3:10 pm |
|---|
| 408 | ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks | Sep 21, 3:10 pm |
|---|
| 409 | Microsoft fixes broken Excel copy and paste for all Office users | Sep 21, 3:10 pm |
|---|
| 410 | Microsoft reminds admins to migrate Entra ID users to passkeys | Sep 21, 2:10 pm |
|---|
| 411 | FBI's CJIS v6.1: What Security Teams Need to Know. | Sep 21, 2:10 pm |
|---|
| 412 | Microsoft: September updates break File History backup feature | Sep 21, 12:10 pm |
|---|
| 413 | TerminalFix: PNG Steganography, (Mon, Sep 21st) | Sep 21, 11:10 am |
|---|
| 414 | ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure | Sep 21, 9:10 am |
|---|
| 415 | Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors | Sep 21, 7:10 am |
|---|
| 416 | ISC Stormcast For Monday, September 21st, 2026 https://isc.sans.edu/podcastdetail/10102, (Mon, Sep 21st) | Sep 21, 6:10 am |
|---|
| 417 | Malicious npm packages evade install-script defenses at runtime | Sep 20, 3:10 pm |
|---|
| 418 | Researchers escape OpenAI Codex sandbox to run commands on host | Sep 20, 12:10 pm |
|---|
| 419 | Viral AI actress' hotline face-scans every caller, watches their mood | Sep 19, 5:10 pm |
|---|
| 420 | Identity Visibility in 2026: The Foundation of Identity Security | Sep 19, 3:10 pm |
|---|
| 421 | BragJack attacks hijack AI browser agents through malicious extensions | Sep 19, 3:10 pm |
|---|
| 422 | ShinyHunters hacks Clop leak site, threatens to extort ransomware gang | Sep 19, 2:10 pm |
|---|
| 423 | North Korean WaterPlum hackers infected 30,000 devices worldwide | Sep 19, 2:10 pm |
|---|
| 424 | SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE | Sep 19, 12:10 pm |
|---|
| 425 | Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws | Sep 19, 12:10 pm |
|---|
| 426 | Calling viral AI actress Tilly Norwood? Agree to a face scan first | Sep 19, 12:10 pm |
|---|
| 427 | Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up | Sep 19, 9:10 am |
|---|
| 428 | Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild | Sep 19, 9:10 am |
|---|
| 429 | CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories | Sep 19, 8:10 am |
|---|
| 430 | CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild | Sep 19, 7:10 am |
|---|
| 431 | Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root | Sep 18, 9:10 pm |
|---|
| 432 | New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution | Sep 18, 6:10 pm |
|---|
| 433 | Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer | Sep 18, 4:10 pm |
|---|
| 434 | Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2 | Sep 18, 4:10 pm |
|---|
| 435 | Gyazo server flaw exploited to steal 23.6 million user records | Sep 18, 4:10 pm |
|---|
| 436 | Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents | Sep 18, 2:10 pm |
|---|
| 437 | An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. | Sep 18, 2:10 pm |
|---|
| 438 | Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation | Sep 18, 2:10 pm |
|---|
| 439 | Webinar: Which Google Workspace security controls actually matter? | Sep 18, 2:10 pm |
|---|
| 440 | Microsoft Teams will let admins block custom file extensions | Sep 18, 2:10 pm |
|---|
| 441 | Secure enterprise sharing with access reviews for Microsoft 365 | Sep 18, 2:10 pm |
|---|
| 442 | Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts | Sep 18, 1:10 pm |
|---|
| 443 | WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage | Sep 18, 11:10 am |
|---|
| 444 | Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer | Sep 18, 10:10 am |
|---|
| 445 | New Check Point flaw lets hackers execute code with root privileges | Sep 18, 10:10 am |
|---|
| 446 | Microsoft fixes broken copy and paste for Excel 2016 users | Sep 18, 8:10 am |
|---|
| 447 | HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th) | Sep 18, 7:10 am |
|---|
| 448 | RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall | Sep 18, 7:10 am |
|---|
| 449 | Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords | Sep 18, 4:10 am |
|---|
| 450 | Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files | Sep 18, 4:10 am |
|---|
| 451 | ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories | Sep 18, 4:10 am |
|---|
| 452 | Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root | Sep 18, 4:10 am |
|---|
| 453 | ISC Stormcast For Friday, September 18th, 2026 https://isc.sans.edu/podcastdetail/10100, (Fri, Sep 18th) | Sep 18, 2:10 am |
|---|
| 454 | New RatHat Android malware uses AI to automate device control | Sep 17, 10:10 pm |
|---|
| 455 | OpenAI details more cases of AI agents taking unauthorized actions | Sep 17, 7:10 pm |
|---|
| 456 | Brevo supply-chain attack injected ClickFix scripts on customer sites | Sep 17, 6:10 pm |
|---|
| 457 | LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th) | Sep 17, 3:10 pm |
|---|
| 458 | OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads | Sep 17, 2:10 pm |
|---|
| 459 | China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America | Sep 17, 2:10 pm |
|---|
| 460 | CISO's Expert Guide to Agentic Pentesting for Websites | Sep 17, 2:10 pm |
|---|
| 461 | Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar | Sep 17, 2:10 pm |
|---|
| 462 | Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone | Sep 17, 2:10 pm |
|---|
| 463 | Windows 11 24H2 Home and Pro reach end of support in October | Sep 17, 2:10 pm |
|---|
| 464 | What Recent AI-Powered Attacks Mean for Your Identity Security | Sep 17, 2:10 pm |
|---|
| 465 | US takes down NightmareStresser DDoS-for-hire platform | Sep 17, 12:10 pm |
|---|
| 466 | Microsoft shares workaround for Windows domain login issues | Sep 17, 9:10 am |
|---|
| 467 | Chinese hackers use SparroWocky malware in govt espionage attacks | Sep 17, 9:10 am |
|---|
| 468 | Cisco warns of max severity ISE zero-day exploited in attacks | Sep 17, 8:10 am |
|---|
| 469 | ISC Stormcast For Thursday, September 17th, 2026 https://isc.sans.edu/podcastdetail/10098, (Thu, Sep 17th) | Sep 17, 2:10 am |
|---|
| 470 | Anthropic wants Claude to analyze your bank account and financial data | Sep 17, 1:10 am |
|---|
| 471 | Iranian hackers use CHOSEN BRICK Windows malware to spy on targets | Sep 16, 9:10 pm |
|---|
| 472 | Windows 11 KB5124008 update breaks domain trust for some users | Sep 16, 9:10 pm |
|---|
| 473 | Data Broker Radaris Loses Domains in Privacy Fight | Sep 16, 7:10 pm |
|---|
| 474 | Scans Targeting Hospitality Applications, (Wed, Sep 16th) | Sep 16, 7:10 pm |
|---|
| 475 | Malware bypasses browser checks to force install Chrome, Edge extensions | Sep 16, 7:10 pm |
|---|
| 476 | Spain's data agency gets first report of AI-powered data breach | Sep 16, 6:10 pm |
|---|
| 477 | One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude | Sep 16, 5:10 pm |
|---|
| 478 | Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers | Sep 16, 5:10 pm |
|---|
| 479 | Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution | Sep 16, 5:10 pm |
|---|
| 480 | Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix | Sep 16, 2:10 pm |
|---|
| 481 | Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories | Sep 16, 2:10 pm |
|---|
| 482 | The true cost of a ransomware attack, with and without BCDR | Sep 16, 2:10 pm |
|---|
| 483 | N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security | Sep 16, 1:10 pm |
|---|
| 484 | Webinar: What happens in the first hours of a Google Workspace breach | Sep 16, 1:10 pm |
|---|
| 485 | Microsoft says Copilot buttons still missing in classic Outlook | Sep 16, 1:10 pm |
|---|
| 486 | Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks | Sep 16, 12:10 pm |
|---|
| 487 | Critical ScreenConnect flaw now actively exploited in attacks | Sep 16, 12:10 pm |
|---|
| 488 | Threat Intelligence Alone Won't Close the Exploitation Gap | Sep 16, 12:10 pm |
|---|
| 489 | Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation | Sep 16, 12:10 pm |
|---|
| 490 | Windows Server 2022 reaches end of mainstream support next month | Sep 16, 10:10 am |
|---|
| 491 | Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens | Sep 16, 7:10 am |
|---|
| 492 | Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells | Sep 16, 7:10 am |
|---|
| 493 | Google fixes actively exploited Android zero-day on Pixel devices | Sep 16, 7:10 am |
|---|
| 494 | ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096, (Wed, Sep 16th) | Sep 16, 2:10 am |
|---|
| 495 | Acronis warns of actively exploited flaw in its cPanel backup plugin | Sep 15, 10:10 pm |
|---|
| 496 | Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites | Sep 15, 9:10 pm |
|---|
| 497 | KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens | Sep 15, 7:10 pm |
|---|
| 498 | Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists | Sep 15, 6:10 pm |
|---|
| 499 | CenterPoint Energy confirms customer data stolen in cyberattack | Sep 15, 5:10 pm |
|---|
| 500 | BambooToken Malware Uses MQTT to Control Windows and Linux Systems | Sep 15, 4:10 pm |
|---|
