| 1 | MacOS 27 - First Boot, (Tue, Sep 15th) | Sep 15, 4:10 pm |
|---|
| 2 | Hackers target WordPress sites via third-party WooCommerce plugin | Sep 15, 3:10 pm |
|---|
| 3 | BambooToken malware controls Windows and Linux systems via MQTT | Sep 15, 3:10 pm |
|---|
| 4 | What Zero-Day Response Should Be in the Post-Mythos Era | Sep 15, 2:10 pm |
|---|
| 5 | Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers | Sep 15, 1:10 pm |
|---|
| 6 | Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point | Sep 15, 1:10 pm |
|---|
| 7 | Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds | Sep 15, 1:10 pm |
|---|
| 8 | CISA: Critical VMware RCE flaw now exploited by ransomware gangs | Sep 15, 1:10 pm |
|---|
| 9 | Suspected Black Axe gang leaders face cybercrime charges in the US | Sep 15, 10:10 am |
|---|
| 10 | LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server | Sep 15, 9:10 am |
|---|
| 11 | Microsoft confirms KB5002914 Excel update breaks copy and paste | Sep 15, 9:10 am |
|---|
| 12 | Cisco patches Secure Email Gateway zero-day exploited in attacks | Sep 15, 8:10 am |
|---|
| 13 | China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE | Sep 15, 7:10 am |
|---|
| 14 | Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution | Sep 15, 7:10 am |
|---|
| 15 | ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th) | Sep 15, 3:10 am |
|---|
| 16 | Japan's Digital Agency says VPN flaw exposed 246,000 personnel records | Sep 14, 9:10 pm |
|---|
| 17 | Microsoft releases emergency Windows updates to fix RDS failures | Sep 14, 9:10 pm |
|---|
| 18 | Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports | Sep 14, 8:10 pm |
|---|
| 19 | 3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials | Sep 14, 8:10 pm |
|---|
| 20 | Homebrew 7.0.0 gets built-in GUI, better security controls | Sep 14, 8:10 pm |
|---|
| 21 | Apple Updates Everything, (Mon, Sep 14th) | Sep 14, 7:10 pm |
|---|
| 22 | Hackers hijack HBO Max Reddit account to push malware in ClickFix ads | Sep 14, 7:10 pm |
|---|
| 23 | Twitch extension with 30K installs exposes users’ OAuth tokens | Sep 14, 7:10 pm |
|---|
| 24 | Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries | Sep 14, 6:10 pm |
|---|
| 25 | New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing | Sep 14, 6:10 pm |
|---|
| 26 | WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution | Sep 14, 5:10 pm |
|---|
| 27 | Hackers target exposed Vite dev servers to steal AWS, Azure secrets | Sep 14, 5:10 pm |
|---|
| 28 | ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits | Sep 14, 4:10 pm |
|---|
| 29 | Why Patch Automation Needs Brakes, Not Just an Accelerator | Sep 14, 2:10 pm |
|---|
| 30 | AI Changed the Exposure Problem. Validation Needs to Change With It. | Sep 14, 1:10 pm |
|---|
| 31 | Webinar: How malicious OAuth apps can lead to Google Workspace breaches | Sep 14, 1:10 pm |
|---|
| 32 | Microsoft: September updates cause RDS failures on Windows Server | Sep 14, 10:10 am |
|---|
| 33 | Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users | Sep 14, 9:10 am |
|---|
| 34 | Microsoft: September updates break audio on some Windows PCs | Sep 14, 9:10 am |
|---|
| 35 | Revolut discloses data breach exposing financial info, passports | Sep 14, 9:10 am |
|---|
| 36 | CISA: Hackers now exploit max severity GitLab flaw in attacks | Sep 14, 7:10 am |
|---|
| 37 | ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th) | Sep 14, 2:10 am |
|---|
| 38 | Hackers exploit Tencent app flaw to deploy GrayRabbit malware | Sep 13, 3:10 pm |
|---|
| 39 | Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data | Sep 13, 11:10 am |
|---|
| 40 | CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV | Sep 12, 6:10 pm |
|---|
| 41 | Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent | Sep 12, 3:10 pm |
|---|
| 42 | When the Whole Company Adopts AI: What It Does to Your SOC | Sep 12, 11:10 am |
|---|
| 43 | OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers | Sep 12, 10:10 am |
|---|
| 44 | Hackers abused Claude to extract secrets from 1.8M Android apps | Sep 11, 9:10 pm |
|---|
| 45 | Florida confirms DMV database breached via stolen police account | Sep 11, 7:10 pm |
|---|
| 46 | Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks | Sep 11, 6:10 pm |
|---|
| 47 | GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure | Sep 11, 6:10 pm |
|---|
| 48 | Passkey-themed phishing attacks lead to Microsoft 365 data theft | Sep 11, 6:10 pm |
|---|
| 49 | Artifactory flaws chained in attacks deploying backdoor malware | Sep 11, 5:10 pm |
|---|
| 50 | Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection | Sep 11, 4:10 pm |
|---|
| 51 | Claude Used to Automate Exploitation and Data Theft Across Multiple Victims | Sep 11, 4:10 pm |
|---|
| 52 | The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th) | Sep 11, 3:10 pm |
|---|
| 53 | Your Critical Vulnerabilities Might Not Be Your Biggest Risk | Sep 11, 2:10 pm |
|---|
| 54 | How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface | Sep 11, 2:10 pm |
|---|
| 55 | GitLab urges users to patch max severity path traversal flaw | Sep 11, 12:10 pm |
|---|
| 56 | Microsoft fixes Teams, Outlook launch failures on ARM Windows PCs | Sep 11, 10:10 am |
|---|
| 57 | Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware | Sep 11, 8:10 am |
|---|
| 58 | PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws | Sep 11, 8:10 am |
|---|
| 59 | China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor | Sep 11, 8:10 am |
|---|
| 60 | Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors | Sep 11, 8:10 am |
|---|
| 61 | Trezor: 347,000 users targeted in phishing attacks after Brevo breach | Sep 11, 8:10 am |
|---|
| 62 | Conti ransomware gang member sentenced to 4 years in prison | Sep 11, 7:10 am |
|---|
| 63 | ISC Stormcast For Friday, September 11th, 2026 https://isc.sans.edu/podcastdetail/10090, (Fri, Sep 11th) | Sep 11, 2:10 am |
|---|
| 64 | New Android malware encrypts files, steals data, and harasses victims | Sep 10, 10:10 pm |
|---|
| 65 | September Windows Server updates break Remote Desktop Services | Sep 10, 9:10 pm |
|---|
| 66 | Surfshark VPN says hackers breached internal testing, proxy servers | Sep 10, 8:10 pm |
|---|
| 67 | ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories | Sep 10, 7:10 pm |
|---|
| 68 | Microsoft Excel KB5002914 update breaks copy and paste for some users | Sep 10, 7:10 pm |
|---|
| 69 | Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers | Sep 10, 4:10 pm |
|---|
| 70 | AI-powered attack exploited PaperCut flaws to hack 395 organizations | Sep 10, 4:10 pm |
|---|
| 71 | New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws | Sep 10, 3:10 pm |
|---|
| 72 | Google Play Early Access Abused to Push Thousands of Deceptive Android Apps | Sep 10, 3:10 pm |
|---|
| 73 | IDScan confirms breach tied to 153 million stolen driver’s licenses | Sep 10, 3:10 pm |
|---|
| 74 | The Top 4 Threats We Found by Investigating Every Alert for a Quarter | Sep 10, 2:10 pm |
|---|
| 75 | Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks | Sep 10, 1:10 pm |
|---|
| 76 | PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances | Sep 10, 1:10 pm |
|---|
| 77 | Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE | Sep 10, 1:10 pm |
|---|
| 78 | Redtail Payload Analysis [Guest Diary], (Wed, Sep 9th) | Sep 10, 1:10 pm |
|---|
| 79 | CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline | Sep 10, 12:10 pm |
|---|
| 80 | Microsoft says September updates fix mouse settings reset issues | Sep 10, 12:10 pm |
|---|
| 81 | ISC Stormcast For Thursday, September 10th, 2026 https://isc.sans.edu/podcastdetail/10088, (Thu, Sep 10th) | Sep 10, 11:10 am |
|---|
| 82 | CISA: WatchGuard RCE flaw now exploited in ransomware attacks | Sep 10, 10:10 am |
|---|
| 83 | Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 | Sep 10, 9:10 am |
|---|
| 84 | Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key | Sep 10, 9:10 am |
|---|
| 85 | Microsoft fixes bug that wiped Windows desktop settings | Sep 10, 9:10 am |
|---|
| 86 | Trezor warns users of email provider breach, phishing attacks | Sep 10, 7:10 am |
|---|
| 87 | AdaptHealth confirms 4.1 million people exposed in July cyberattack | Sep 9, 10:10 pm |
|---|
| 88 | Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks | Sep 9, 10:10 pm |
|---|
| 89 | Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking | Sep 9, 9:10 pm |
|---|
| 90 | Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week | Sep 9, 8:10 pm |
|---|
| 91 | U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto | Sep 9, 8:10 pm |
|---|
| 92 | Scans for Proxmox Servers, (Wed, Sep 9th) | Sep 9, 6:10 pm |
|---|
| 93 | US says Chinese firms extracted billions of tokens from frontier AI models | Sep 9, 5:10 pm |
|---|
| 94 | Veradigm warns of patient data breach after ransomware gang claims attack | Sep 9, 4:10 pm |
|---|
| 95 | Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA | Sep 9, 3:10 pm |
|---|
| 96 | MFA's Weakest Link: Account Recovery Is the New Attack Path | Sep 9, 2:10 pm |
|---|
| 97 | Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE | Sep 9, 1:10 pm |
|---|
| 98 | U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok | Sep 9, 12:10 pm |
|---|
| 99 | Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets | Sep 9, 12:10 pm |
|---|
| 100 | DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval | Sep 9, 12:10 pm |
|---|
| 101 | Over 36,000 exposed Plex servers vulnerable to recent flaws | Sep 9, 11:10 am |
|---|
| 102 | SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution | Sep 9, 10:10 am |
|---|
| 103 | Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed | Sep 9, 10:10 am |
|---|
| 104 | F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans | Sep 9, 10:10 am |
|---|
| 105 | New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root | Sep 9, 10:10 am |
|---|
| 106 | Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox | Sep 9, 10:10 am |
|---|
| 107 | Man gets 15 years for extorting women with AI-generated porn videos | Sep 9, 9:10 am |
|---|
| 108 | New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access | Sep 9, 8:10 am |
|---|
| 109 | Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days | Sep 9, 7:10 am |
|---|
| 110 | Google warns of new Chrome zero-day bug exploited in attacks | Sep 9, 7:10 am |
|---|
| 111 | N-able N-central Pre-Auth RCE Flaw Exploited in the Wild | Sep 9, 5:10 am |
|---|
| 112 | Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults | Sep 9, 2:10 am |
|---|
| 113 | ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th) | Sep 9, 2:10 am |
|---|
| 114 | Microsoft Plugs Nearly 1,000 Security Holes | Sep 8, 10:10 pm |
|---|
| 115 | The EU CRA's Real Question: What Shipped, and When Did You Know? | Sep 8, 9:10 pm |
|---|
| 116 | DoppelCart fraud network uses 119,000 fake shops to steal credit cards | Sep 8, 9:10 pm |
|---|
| 117 | September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th) | Sep 8, 8:10 pm |
|---|
| 118 | Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit | Sep 8, 8:10 pm |
|---|
| 119 | Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days | Sep 8, 7:10 pm |
|---|
| 120 | Microsoft releases Windows 10 KB5122878 extended security update | Sep 8, 7:10 pm |
|---|
| 121 | Windows 11 cumulative updates KB5124008 & KB5122880 released | Sep 8, 6:10 pm |
|---|
| 122 | Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution | Sep 8, 5:10 pm |
|---|
| 123 | OpenAI says ChatGPT outage causes image generation errors | Sep 8, 5:10 pm |
|---|
| 124 | ShinyHunters hackers claim breach of Florida "DAVID" DMV database | Sep 8, 5:10 pm |
|---|
| 125 | Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours | Sep 8, 4:10 pm |
|---|
| 126 | ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account | Sep 8, 4:10 pm |
|---|
| 127 | Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC | Sep 8, 4:10 pm |
|---|
| 128 | August updates trigger 0xc0000409 errors on Windows Server 2016 | Sep 8, 4:10 pm |
|---|
| 129 | OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor | Sep 8, 3:10 pm |
|---|
| 130 | SAP warns of maximum severity 'OVERPASS' kernel vulnerability | Sep 8, 3:10 pm |
|---|
| 131 | Webinar: The forgotten Google Workspace access that can lead to a breach | Sep 8, 2:10 pm |
|---|
| 132 | Adobe fixes critical Magento zero-day exploited to backdoor servers | Sep 8, 2:10 pm |
|---|
| 133 | What It Took to Reach 1 Billion Build Manifests | Sep 8, 1:10 pm |
|---|
| 134 | WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls | Sep 8, 1:10 pm |
|---|
| 135 | FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials | Sep 8, 12:10 pm |
|---|
| 136 | Microsoft: Windows Server 2025 changes causing app crashes | Sep 8, 12:10 pm |
|---|
| 137 | Hackers build AI frameworks for widescale credential theft | Sep 8, 12:10 pm |
|---|
| 138 | BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams | Sep 8, 10:10 am |
|---|
| 139 | Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell | Sep 8, 10:10 am |
|---|
| 140 | Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing | Sep 8, 8:10 am |
|---|
| 141 | 220 million traveler records exposed in Vietnam-linked APIS leak | Sep 8, 8:10 am |
|---|
| 142 | ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th) | Sep 8, 2:10 am |
|---|
| 143 | PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution | Sep 7, 7:10 pm |
|---|
| 144 | Magento StyleSmuggler zero-day exploited to deploy Linux backdoor | Sep 7, 5:10 pm |
|---|
| 145 | ⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More | Sep 7, 4:10 pm |
|---|
| 146 | BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations | Sep 7, 4:10 pm |
|---|
| 147 | Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks | Sep 7, 4:10 pm |
|---|
| 148 | Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released | Sep 7, 1:10 pm |
|---|
| 149 | Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts | Sep 7, 1:10 pm |
|---|
| 150 | Your Cloud Security Checklist Doesn't Work the Way You Think It Does | Sep 7, 1:10 pm |
|---|
| 151 | Trezor data breach impact now reaches 81,000 customers | Sep 7, 1:10 pm |
|---|
| 152 | Mathspace discloses data breach affecting over 1 million people | Sep 7, 1:10 pm |
|---|
| 153 | Hackers exploit new MikroTik RouterOS flaws to hijack routers | Sep 7, 11:10 am |
|---|
| 154 | ChatGPT can now connect to your personal apps to mimic writing style | Sep 7, 11:10 am |
|---|
| 155 | N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw | Sep 7, 10:10 am |
|---|
| 156 | ConnectWise warns of new ScreenConnect flaw without patch | Sep 7, 10:10 am |
|---|
| 157 | JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies | Sep 7, 9:10 am |
|---|
| 158 | N-able patches max severity N-central flaw amid ongoing attacks | Sep 7, 7:10 am |
|---|
| 159 | ChatGPT Astra is now rolling out to $20 Plus subscription | Sep 7, 2:10 am |
|---|
| 160 | Critical MikroTik Vulnerability - Patch Now, (Sun, Sep 6th) | Sep 6, 10:10 pm |
|---|
| 161 | Attackers conceal phishing lures using invisible Unicode characters | Sep 6, 3:10 pm |
|---|
| 162 | Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner | Sep 6, 10:10 am |
|---|
| 163 | Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication | Sep 6, 10:10 am |
|---|
| 164 | Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores | Sep 5, 9:10 pm |
|---|
| 165 | Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code | Sep 5, 5:10 pm |
|---|
| 166 | Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials | Sep 5, 5:10 pm |
|---|
| 167 | Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted | Sep 5, 4:10 pm |
|---|
| 168 | Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain | Sep 5, 3:10 pm |
|---|
| 169 | OpenAI admits it didn't disclose rogue AI wiki hijacking incident | Sep 5, 12:10 pm |
|---|
| 170 | Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel | Sep 5, 9:10 am |
|---|
| 171 | Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities | Sep 5, 8:10 am |
|---|
| 172 | numbat - AI agent observability, (Fri, Sep 4th) | Sep 5, 2:10 am |
|---|
| 173 | IDScan sued over alleged data breach affecting 153 million drivers | Sep 4, 5:10 pm |
|---|
| 174 | PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution | Sep 4, 4:10 pm |
|---|
| 175 | Critical Citrix NetScaler auth bypass now leveraged in attacks | Sep 4, 4:10 pm |
|---|
| 176 | Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters | Sep 4, 4:10 pm |
|---|
| 177 | Microsoft says some users can’t open the Teams desktop client | Sep 4, 3:10 pm |
|---|
| 178 | New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic | Sep 4, 3:10 pm |
|---|
| 179 | New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges | Sep 4, 2:10 pm |
|---|
| 180 | 39 New Methods That Compromise Passkey Authentication | Sep 4, 2:10 pm |
|---|
| 181 | Exchange Online outage causes email delays, 'Server busy' errors | Sep 4, 1:10 pm |
|---|
| 182 | Google warns of new Chrome zero-day flaw exploited in attacks | Sep 4, 12:10 pm |
|---|
| 183 | Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws | Sep 4, 10:10 am |
|---|
| 184 | GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests | Sep 4, 9:10 am |
|---|
| 185 | Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day | Sep 4, 9:10 am |
|---|
| 186 | Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws | Sep 4, 9:10 am |
|---|
| 187 | ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th) | Sep 4, 2:10 am |
|---|
| 188 | French hospital fined €500,000 after breach exposes data of 727,000 | Sep 3, 10:10 pm |
|---|
| 189 | Coder's registry infrastructure compromised to push malicious modules | Sep 3, 8:10 pm |
|---|
| 190 | ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories | Sep 3, 7:10 pm |
|---|
| 191 | HPE patches critical ArubaOS-CX remote code execution flaw | Sep 3, 7:10 pm |
|---|
| 192 | Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data | Sep 3, 5:10 pm |
|---|
| 193 | BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory | Sep 3, 5:10 pm |
|---|
| 194 | Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root | Sep 3, 5:10 pm |
|---|
| 195 | OpenAI confirms ChatGPT is down ahead of 'Astra' model launch | Sep 3, 4:10 pm |
|---|
| 196 | Microsoft: KB5120998 mouse reset bug affects only non-English PCs | Sep 3, 4:10 pm |
|---|
| 197 | Critical Elementor Pro flaw exploited to take over WordPress sites | Sep 3, 3:10 pm |
|---|
| 198 | Anthropic confirms Claude is down, multiple models affected | Sep 3, 3:10 pm |
|---|
| 199 | Your Employee’s Password Appeared in an Infostealer Log. Now What? | Sep 3, 2:10 pm |
|---|
| 200 | US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries | Sep 3, 1:10 pm |
|---|
| 201 | Microsoft says KB5120998 Windows update resets desktop settings | Sep 3, 1:10 pm |
|---|
| 202 | Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means | Sep 3, 12:10 pm |
|---|
| 203 | Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks | Sep 3, 12:10 pm |
|---|
| 204 | Plex warns users to patch security vulnerabilities immediately | Sep 3, 11:10 am |
|---|
| 205 | Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone | Sep 3, 10:10 am |
|---|
| 206 | Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs | Sep 3, 9:10 am |
|---|
| 207 | CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners | Sep 3, 7:10 am |
|---|
| 208 | Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon | Sep 3, 7:10 am |
|---|
| 209 | ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd) | Sep 3, 2:10 am |
|---|
| 210 | Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd) | Sep 3, 2:10 am |
|---|
| 211 | Hackers exploit Sangoma Switchvox flaw to deploy reverse shells | Sep 2, 9:10 pm |
|---|
| 212 | Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs | Sep 2, 8:10 pm |
|---|
| 213 | WordPress backup plugin flaw exposes millions of sites to takeover attacks | Sep 2, 8:10 pm |
|---|
| 214 | Fake Software Installers Disable Windows Update and Weaken Microsoft Defender | Sep 2, 6:10 pm |
|---|
| 215 | Hackers exploit critical JFrog Artifactory flaw to forge admin tokens | Sep 2, 4:10 pm |
|---|
| 216 | Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages | Sep 2, 3:10 pm |
|---|
| 217 | Ransomware protection for MSPs: A 6-point checklist for faster recovery | Sep 2, 3:10 pm |
|---|
| 218 | Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code | Sep 2, 3:10 pm |
|---|
| 219 | Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control | Sep 2, 2:10 pm |
|---|
| 220 | BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access | Sep 2, 2:10 pm |
|---|
| 221 | Dropbox accounts breached through Lenovo email verification flaw | Sep 2, 1:10 pm |
|---|
| 222 | How to Secure Enterprise AI: From Adoption to Incident Readiness | Sep 2, 12:10 pm |
|---|
| 223 | Microsoft Defender flags legitimate Google search links as malicious | Sep 2, 11:10 am |
|---|
| 224 | Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain | Sep 2, 11:10 am |
|---|
| 225 | Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands | Sep 2, 10:10 am |
|---|
| 226 | GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends | Sep 2, 10:10 am |
|---|
| 227 | US charges Russian for infecting 80,000 freelancers with malware | Sep 2, 9:10 am |
|---|
| 228 | Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads | Sep 2, 8:10 am |
|---|
| 229 | Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials | Sep 2, 8:10 am |
|---|
| 230 | Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another | Sep 2, 8:10 am |
|---|
| 231 | Sality botnet infrastructure dismantled in joint global takedown | Sep 2, 8:10 am |
|---|
| 232 | SonicWall warns of actively exploited SMA1000 zero-day flaws | Sep 2, 7:10 am |
|---|
| 233 | ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd) | Sep 2, 2:10 am |
|---|
| 234 | FBI Probes Service Selling 153M+ Drivers Licenses | Sep 1, 11:10 pm |
|---|
| 235 | Hackers abuse Faronics Deploy admin tool to install ScreenConnect | Sep 1, 9:10 pm |
|---|
| 236 | Aesto Health says data breach affects over 9.5 million patients | Sep 1, 8:10 pm |
|---|
| 237 | Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems | Sep 1, 7:10 pm |
|---|
| 238 | Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure | Sep 1, 7:10 pm |
|---|
| 239 | Critical Langflow flaw exploited to steal OpenAI and AWS keys | Sep 1, 6:10 pm |
|---|
| 240 | 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds | Sep 1, 3:10 pm |
|---|
| 241 | Novocure data breach affects more than 1,400 cancer patients | Sep 1, 3:10 pm |
|---|
| 242 | Hackers push malicious Virtualizor update in BGP hijacking attack | Sep 1, 3:10 pm |
|---|
| 243 | Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests | Sep 1, 2:10 pm |
|---|
| 244 | Why Even the Best Edge Security Still Misses High-Risk Sessions | Sep 1, 2:10 pm |
|---|
| 245 | Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks | Sep 1, 1:10 pm |
|---|
| 246 | Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones | Sep 1, 12:10 pm |
|---|
| 247 | Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 | Sep 1, 11:10 am |
|---|
| 248 | Five Venezuelans plead guilty to ATM jackpotting attacks in US | Sep 1, 10:10 am |
|---|
| 249 | Massive Microsoft 365 outage causes auth issues, service failures | Sep 1, 9:10 am |
|---|
| 250 | Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis | Sep 1, 9:10 am |
|---|
| 251 | Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity | Sep 1, 8:10 am |
|---|
| 252 | Recently patched PaperCut zero-days used in data theft attacks | Sep 1, 8:10 am |
|---|
| 253 | ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st) | Sep 1, 2:10 am |
|---|
| 254 | Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st) | Sep 1, 1:10 am |
|---|
| 255 | Cronos blockchain restarts after $74 million Tectonic exploit | Aug 31, 9:10 pm |
|---|
| 256 | The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st) | Aug 31, 8:10 pm |
|---|
| 257 | Microsoft warns of TerminalFix attacks deploying reverse tunnels | Aug 31, 7:10 pm |
|---|
| 258 | North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales | Aug 31, 6:10 pm |
|---|
| 259 | OpenAI confirms ChatGPT outage as users report errors | Aug 31, 5:10 pm |
|---|
| 260 | Microsoft Exchange Online outage causes email failures, auth issues | Aug 31, 5:10 pm |
|---|
| 261 | ⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More | Aug 31, 3:10 pm |
|---|
| 262 | File servers are here to stay. Here’s how to manage them securely | Aug 31, 3:10 pm |
|---|
| 263 | Chinese Fire Ant hackers turn Cisco routers into spying platforms | Aug 31, 3:10 pm |
|---|
| 264 | Berlin confirms data theft after Rhysida ransomware attack claims | Aug 31, 2:10 pm |
|---|
| 265 | Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance | Aug 31, 1:10 pm |
|---|
| 266 | Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets | Aug 31, 1:10 pm |
|---|
| 267 | ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions | Aug 31, 1:10 pm |
|---|
| 268 | China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs | Aug 31, 11:10 am |
|---|
| 269 | Microsoft says Windows 11 KB5120998 update resets mouse settings | Aug 31, 11:10 am |
|---|
| 270 | Nigerians extradited to US for sextortion, deaths of two teens | Aug 31, 10:10 am |
|---|
| 271 | DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims | Aug 31, 9:10 am |
|---|
| 272 | Microsoft asks users to ignore 'Antivirus is turned off' errors | Aug 31, 9:10 am |
|---|
| 273 | ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st) | Aug 31, 2:10 am |
|---|
| 274 | Chrome Web Store extensions caught stealing crypto, browser data | Aug 30, 3:10 pm |
|---|
| 275 | Anthropic warns infostealer malware is hijacking Claude sessions to drain usage | Aug 30, 3:10 pm |
|---|
| 276 | FulcrumSec claims Manchester Airports hack, theft of 86 GB of data | Aug 30, 3:10 pm |
|---|
| 277 | TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor | Aug 30, 9:10 am |
|---|
| 278 | YARA-X 1.20.0 Release, (Sun, Aug 30th) | Aug 30, 8:10 am |
|---|
| 279 | Anthropic is cutting Claude Code's current weekly limits by 17% | Aug 30, 12:10 am |
|---|
| 280 | Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE | Aug 29, 6:10 pm |
|---|
| 281 | Brave browser adds email aliases to help users evade tracking | Aug 29, 3:10 pm |
|---|
| 282 | McKesson discloses breach after ShinyHunters claims patient data theft | Aug 28, 11:10 pm |
|---|
| 283 | Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network | Aug 28, 10:10 pm |
|---|
| 284 | Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable | Aug 28, 9:10 pm |
|---|
| 285 | ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body | Aug 28, 7:10 pm |
|---|
| 286 | Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers | Aug 28, 7:10 pm |
|---|
| 287 | Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication | Aug 28, 7:10 pm |
|---|
| 288 | GiveWP WordPress donation plugin flaw lets hackers execute server commands | Aug 28, 7:10 pm |
|---|
| 289 | PaperCut releases second emergency patch for exploited flaws | Aug 28, 7:10 pm |
|---|
| 290 | 68-year-old imprisoned after making $1.3 million by pirating IPTV services | Aug 28, 5:10 pm |
|---|
| 291 | 19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code | Aug 28, 4:10 pm |
|---|
| 292 | AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up? | Aug 28, 3:10 pm |
|---|
| 293 | Key Reasons Why Identity Fabric Matters in 2026 | Aug 28, 1:10 pm |
|---|
| 294 | Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth | Aug 28, 1:10 pm |
|---|
| 295 | Over 8,300 Gitea servers vulnerable to code execution attacks | Aug 28, 1:10 pm |
|---|
| 296 | China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access | Aug 28, 12:10 pm |
|---|
| 297 | Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL | Aug 28, 12:10 pm |
|---|
| 298 | Toy-making giant Hasbro disclose data breach affecting employees | Aug 28, 12:10 pm |
|---|
| 299 | Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server | Aug 28, 11:10 am |
|---|
| 300 | ServiceNow warns of three max severity security vulnerabilities | Aug 28, 11:10 am |
|---|
| 301 | Windows 11 KB5120998 update released with 35 changes and fixes | Aug 28, 10:10 am |
|---|
| 302 | APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations | Aug 28, 9:10 am |
|---|
| 303 | PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions | Aug 28, 9:10 am |
|---|
| 304 | Some Malicious PE Stats, (Thu, Aug 27th) | Aug 28, 7:10 am |
|---|
| 305 | ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th) | Aug 28, 2:10 am |
|---|
| 306 | Nearly 700 rogue AI agents coordinated in the Hugging Face attack | Aug 27, 10:10 pm |
|---|
| 307 | OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face | Aug 27, 9:10 pm |
|---|
| 308 | ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories | Aug 27, 5:10 pm |
|---|
| 309 | Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE | Aug 27, 5:10 pm |
|---|
| 310 | Manchester Airports Group says hackers stole travelers' data | Aug 27, 5:10 pm |
|---|
| 311 | PaperCut warns of NG, MF flaw exploited in zero-day attacks | Aug 27, 5:10 pm |
|---|
| 312 | Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers | Aug 27, 3:10 pm |
|---|
| 313 | Australia arrests alleged TeamPCP hackers behind supply-chain attacks | Aug 27, 2:10 pm |
|---|
| 314 | Android 17 adds ECH support to make web browsing harder to track | Aug 27, 2:10 pm |
|---|
| 315 | How Threat Research and MDR Help SMBs Build a Defensive Edge | Aug 27, 2:10 pm |
|---|
| 316 | What the Data Says About AI in Security Operations in 2026 | Aug 27, 1:10 pm |
|---|
| 317 | Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks | Aug 27, 1:10 pm |
|---|
| 318 | Learn How to Build Security Operations Ready for AI-Powered Attacks | Aug 27, 1:10 pm |
|---|
| 319 | Webinar: How Google Workspace breaches happen and what to do next | Aug 27, 1:10 pm |
|---|
| 320 | Microsoft rolls out fix for Windows 11 crashes, gaming issues | Aug 27, 1:10 pm |
|---|
| 321 | Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools | Aug 27, 12:10 pm |
|---|
| 322 | Carhartt data breach exposes information of 12.9 million accounts | Aug 27, 12:10 pm |
|---|
| 323 | Two Alleged ‘TeamPCP’ Hackers Arrested in Australia | Aug 27, 11:10 am |
|---|
| 324 | CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday | Aug 27, 10:10 am |
|---|
| 325 | GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address | Aug 27, 10:10 am |
|---|
| 326 | A polymorphic phishing page (that occasionally breaks itself), (Thu, Aug 27th) | Aug 27, 10:10 am |
|---|
| 327 | New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access | Aug 27, 9:10 am |
|---|
| 328 | ATF confirms “major incident” after recent Qilin breach claims | Aug 27, 9:10 am |
|---|
| 329 | CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs | Aug 27, 7:10 am |
|---|
| 330 | ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th) | Aug 27, 2:10 am |
|---|
| 331 | Critical Avada WordPress theme flaw enables zero-click RCE | Aug 26, 10:10 pm |
|---|
| 332 | New GPUThor attack defeats NVIDIA ECC protection for root access | Aug 26, 7:10 pm |
|---|
| 333 | Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler | Aug 26, 6:10 pm |
|---|
| 334 | FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations | Aug 26, 6:10 pm |
|---|
| 335 | Meta agrees to $18 billion settlement over teen social media harms | Aug 26, 5:10 pm |
|---|
| 336 | Boston Scientific says cyberattack disrupted operations globally | Aug 26, 4:10 pm |
|---|
| 337 | Who Has Admin Rights in your Entra ID Directory?, (Wed, Aug 26th) | Aug 26, 4:10 pm |
|---|
| 338 | CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing | Aug 26, 3:10 pm |
|---|
| 339 | NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions | Aug 26, 3:10 pm |
|---|
| 340 | FBI disrupts proxy network enabling Chinese espionage operations | Aug 26, 3:10 pm |
|---|
| 341 | Hackers target Microsoft SharePoint RCE chain with PoC exploit | Aug 26, 3:10 pm |
|---|
| 342 | Ubiquiti patches three max severity security vulnerabilities | Aug 26, 2:10 pm |
|---|
| 343 | Snowflake ends service-account passwords. Now comes the hard part | Aug 26, 2:10 pm |
|---|
| 344 | New SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode | Aug 26, 1:10 pm |
|---|
| 345 | Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code | Aug 26, 1:10 pm |
|---|
| 346 | Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine | Aug 26, 12:10 pm |
|---|
| 347 | Microsoft tests new privacy controls for Windows 11 desktop apps | Aug 26, 12:10 pm |
|---|
| 348 | OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation | Aug 26, 11:10 am |
|---|
| 349 | Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests | Aug 26, 11:10 am |
|---|
| 350 | Hackers now exploit critical Gitea flaw in code injection attacks | Aug 26, 11:10 am |
|---|
| 351 | Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode | Aug 26, 9:10 am |
|---|
| 352 | INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown | Aug 26, 9:10 am |
|---|
| 353 | Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes | Aug 26, 7:10 am |
|---|
| 354 | Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload | Aug 26, 7:10 am |
|---|
| 355 | ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th) | Aug 26, 3:10 am |
|---|
| 356 | Hackers abuse npm mirrors to host phishing redirect pages | Aug 25, 10:10 pm |
|---|
| 357 | LACMA data breach last year exposed social security and medical data | Aug 25, 10:10 pm |
|---|
| 358 | AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes | Aug 25, 9:10 pm |
|---|
| 359 | U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches | Aug 25, 7:10 pm |
|---|
| 360 | Massive DDoS attack disrupts Norway’s government digital services | Aug 25, 4:10 pm |
|---|
| 361 | A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw | Aug 25, 3:10 pm |
|---|
| 362 | Hospital operator Nutex Health says data stolen in cyberattack | Aug 25, 3:10 pm |
|---|
| 363 | Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th) | Aug 25, 3:10 pm |
|---|
| 364 | Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode | Aug 25, 2:10 pm |
|---|
| 365 | WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android | Aug 25, 2:10 pm |
|---|
| 366 | Microsoft PowerToys adds Alt+Tab-style switching for an app's windows | Aug 25, 2:10 pm |
|---|
| 367 | From Fake Workers to Account Recovery: The Growing Identity Verification Risk | Aug 25, 2:10 pm |
|---|
| 368 | Frontier AI: Vulnerability Management's Systemic Revolution | Aug 25, 1:10 pm |
|---|
| 369 | E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands | Aug 25, 1:10 pm |
|---|
| 370 | 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages | Aug 25, 1:10 pm |
|---|
| 371 | Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows | Aug 25, 1:10 pm |
|---|
| 372 | WhatsApp adds stronger two-step verification, multiple passkeys | Aug 25, 1:10 pm |
|---|
| 373 | Hackers breached over 270 Zimbra servers in ongoing attacks | Aug 25, 12:10 pm |
|---|
| 374 | Police arrests dozens of suspects in global cybercrime crackdown | Aug 25, 11:10 am |
|---|
| 375 | Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access | Aug 25, 10:10 am |
|---|
| 376 | Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data | Aug 25, 7:10 am |
|---|
| 377 | ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th) | Aug 25, 2:10 am |
|---|
| 378 | Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning | Aug 25, 12:10 am |
|---|
| 379 | Unpatched Calix flaw lets hackers bypass NAT to expose internal devices | Aug 24, 10:10 pm |
|---|
| 380 | Hackers target WordPress sites in miniOrange auth bypass attacks | Aug 24, 8:10 pm |
|---|
| 381 | TikTok reaches $400M settlement with US over COPPA violations | Aug 24, 6:10 pm |
|---|
| 382 | ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More | Aug 24, 4:10 pm |
|---|
| 383 | ReliaQuest confirms failed data-theft attack after ShinyHunters breach | Aug 24, 4:10 pm |
|---|
| 384 | WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords | Aug 24, 2:10 pm |
|---|
| 385 | South Korean startup platform breach exposes key management failures | Aug 24, 2:10 pm |
|---|
| 386 | Microsoft Teams now lets admins block external bots from meetings | Aug 24, 2:10 pm |
|---|
| 387 | Microsoft: August updates break printing, PDF export in WPF apps | Aug 24, 1:10 pm |
|---|
| 388 | The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk | Aug 24, 12:10 pm |
|---|
| 389 | Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor | Aug 24, 12:10 pm |
|---|
| 390 | Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account | Aug 24, 12:10 pm |
|---|
| 391 | Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt | Aug 24, 12:10 pm |
|---|
| 392 | CISA orders urgent patching of actively exploited Zimbra flaw | Aug 24, 11:10 am |
|---|
| 393 | Microsoft shares temporary fix for Windows 11 gaming issues | Aug 24, 10:10 am |
|---|
| 394 | UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit | Aug 24, 9:10 am |
|---|
| 395 | DOUBLECUP's PNG Payload, (Mon, Aug 24th) | Aug 24, 8:10 am |
|---|
| 396 | ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th) | Aug 24, 2:10 am |
|---|
| 397 | ToxicPanda Android malware uses VPN permissions to block Google Play | Aug 23, 3:10 pm |
|---|
| 398 | Hackers infect Android car head units with proxy botnet malware | Aug 22, 3:10 pm |
|---|
| 399 | TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit | Aug 22, 3:10 pm |
|---|
| 400 | Named Pipes Under Attack: Securing Windows Interprocess Communication | Aug 22, 1:10 pm |
|---|
| 401 | 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 | Aug 21, 9:10 pm |
|---|
| 402 | New SynkLoader malware pushed in Microsoft Teams phishing campaign | Aug 21, 6:10 pm |
|---|
| 403 | Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet | Aug 21, 5:10 pm |
|---|
| 404 | Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot | Aug 21, 5:10 pm |
|---|
| 405 | Hundreds of leaked AWS keys give full control over corporate accounts | Aug 21, 4:10 pm |
|---|
| 406 | Microsoft blames Windows gaming issues on RGB lighting devices | Aug 21, 3:10 pm |
|---|
| 407 | Microsoft rolls out Classic Outlook theme for New Outlook users | Aug 21, 2:10 pm |
|---|
| 408 | Is Online Privacy Possible? How Digital Identities Can Help | Aug 21, 2:10 pm |
|---|
| 409 | Wazuh and AI For Enhanced SOC Workflows | Aug 21, 1:10 pm |
|---|
| 410 | CISA orders feds to patch actively exploited TrueConf Server flaws | Aug 21, 1:10 pm |
|---|
| 411 | Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 | Aug 21, 12:10 pm |
|---|
| 412 | SickKids data breach exposes employee and job applicant info | Aug 21, 11:10 am |
|---|
| 413 | Hackers abuse FTP server banners to deliver new Windows malware | Aug 21, 11:10 am |
|---|
| 414 | Microsoft warns of max severity Entra ID flaw exploited in attacks | Aug 21, 11:10 am |
|---|
| 415 | GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure | Aug 21, 8:10 am |
|---|
| 416 | Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution | Aug 21, 7:10 am |
|---|
| 417 | ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More | Aug 21, 6:10 am |
|---|
| 418 | Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st) | Aug 21, 3:10 am |
|---|
| 419 | Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st) | Aug 21, 2:10 am |
|---|
| 420 | ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st) | Aug 21, 2:10 am |
|---|
| 421 | Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads | Aug 20, 10:10 pm |
|---|
| 422 | Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts | Aug 20, 9:10 pm |
|---|
| 423 | ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More | Aug 20, 7:10 pm |
|---|
| 424 | AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure | Aug 20, 6:10 pm |
|---|
| 425 | Hackers poison arrayref Rust crate to push infostealer malware | Aug 20, 6:10 pm |
|---|
| 426 | New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data | Aug 20, 4:10 pm |
|---|
| 427 | Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution | Aug 20, 3:10 pm |
|---|
| 428 | Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers | Aug 20, 3:10 pm |
|---|
| 429 | Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE | Aug 20, 3:10 pm |
|---|
| 430 | Critical Elementor Pro bug exposes WordPress sites to RCE attacks | Aug 20, 3:10 pm |
|---|
| 431 | Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices | Aug 20, 2:10 pm |
|---|
| 432 | CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification | Aug 20, 2:10 pm |
|---|
| 433 | Why "Shady AI" is Security's Next Big Governance Problem | Aug 20, 2:10 pm |
|---|
| 434 | Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments | Aug 20, 2:10 pm |
|---|
| 435 | Using Microsoft Graph and Powershell - Risk Detection Commands, (Thu, Aug 20th) | Aug 20, 2:10 pm |
|---|
| 436 | How MSPs can catch phishing attacks email filters miss | Aug 20, 2:10 pm |
|---|
| 437 | Citrix urges admins to patch new NetScaler flaws as soon as possible | Aug 20, 1:10 pm |
|---|
| 438 | Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses, (Thu, Aug 20th) | Aug 20, 12:10 pm |
|---|
| 439 | 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets | Aug 20, 11:10 am |
|---|
| 440 | ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud | Aug 20, 11:10 am |
|---|
| 441 | NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands | Aug 20, 11:10 am |
|---|
| 442 | CISA warns of hackers exploiting critical MLflow vulnerability | Aug 20, 11:10 am |
|---|
| 443 | Critical Zimbra RCE flaw now actively exploited in attacks | Aug 20, 10:10 am |
|---|
| 444 | New Manic Android malware can exfiltrate data through nearby devices | Aug 20, 10:10 am |
|---|
| 445 | Microsoft says August Windows updates may cause gaming issues | Aug 20, 7:10 am |
|---|
| 446 | Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code | Aug 20, 6:10 am |
|---|
| 447 | ISC Stormcast For Thursday, August 20th, 2026 https://isc.sans.edu/podcastdetail/10060, (Thu, Aug 20th) | Aug 20, 2:10 am |
|---|
| 448 | OpenAI confirms ChatGPT is down as logins and signups fail | Aug 20, 1:10 am |
|---|
| 449 | Rogue ransomware affiliate poses as recovery firm to steal payments | Aug 19, 11:10 pm |
|---|
| 450 | Sakura Internet hack exposes data of up to 1.36 million accounts | Aug 19, 9:10 pm |
|---|
| 451 | Rogue ransomware affiliate poses as data recovery firm to steal payments | Aug 19, 9:10 pm |
|---|
| 452 | OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior | Aug 19, 8:10 pm |
|---|
| 453 | Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second | Aug 19, 8:10 pm |
|---|
| 454 | Healthtech firm CareCloud data breach impacts 3.7 million patients | Aug 19, 8:10 pm |
|---|
| 455 | US warns of AI-powered attacks on Siemens PLCs in critical infrastructure | Aug 19, 6:10 pm |
|---|
| 456 | Hackers compromise 14,500 Dahua web cameras in 35-day campaign | Aug 19, 6:10 pm |
|---|
| 457 | US charges Iranian hackers over $3.4 billion intellectual property theft | Aug 19, 4:10 pm |
|---|
| 458 | Simple Scans for Cloud Metadata Service, (Wed, Aug 19th) | Aug 19, 3:10 pm |
|---|
| 459 | Phishing 3.0: The Fight Moves to Agent Versus Agent | Aug 19, 2:10 pm |
|---|
| 460 | Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P | Aug 19, 2:10 pm |
|---|
| 461 | SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs | Aug 19, 2:10 pm |
|---|
| 462 | Password spraying attacks surge 155x as hackers exploit MFA gaps | Aug 19, 2:10 pm |
|---|
| 463 | Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation | Aug 19, 12:10 pm |
|---|
| 464 | Microsoft fixes known issue causing Windows Defender crashes | Aug 19, 12:10 pm |
|---|
| 465 | StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data | Aug 19, 12:10 pm |
|---|
| 466 | Critical RCE flaw in Windows IKE Extension now actively exploited | Aug 19, 11:10 am |
|---|
| 467 | Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data | Aug 19, 10:10 am |
|---|
| 468 | Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure | Aug 19, 10:10 am |
|---|
| 469 | Windows 11 24H2 Home and Pro reach end of support in 2 months | Aug 19, 10:10 am |
|---|
| 470 | CISA: Medusa ransomware hit over 500 critical infrastructure orgs | Aug 19, 8:10 am |
|---|
| 471 | ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th) | Aug 19, 2:10 am |
|---|
| 472 | Comcast turns your Xfinity WiFi into a home motion detector | Aug 18, 9:10 pm |
|---|
| 473 | Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 | Aug 18, 7:10 pm |
|---|
| 474 | Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets | Aug 18, 7:10 pm |
|---|
| 475 | Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps | Aug 18, 7:10 pm |
|---|
| 476 | Clop created custom web shell for Windchill data theft attacks | Aug 18, 6:10 pm |
|---|
| 477 | Your Controls Block Known Attacks. What About the Behavior? | Aug 18, 2:10 pm |
|---|
| 478 | TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks | Aug 18, 1:10 pm |
|---|
| 479 | AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files | Aug 18, 1:10 pm |
|---|
| 480 | Microsoft tests faster Windows File Explorer, new context menu | Aug 18, 12:10 pm |
|---|
| 481 | One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 | Aug 18, 12:10 pm |
|---|
| 482 | 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets | Aug 18, 12:10 pm |
|---|
| 483 | CISA: Windows Task Host flaw now exploited by ransomware gangs | Aug 18, 11:10 am |
|---|
| 484 | SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers | Aug 18, 10:10 am |
|---|
| 485 | Microsoft confirms outage affecting search in Microsoft 365 apps | Aug 18, 10:10 am |
|---|
| 486 | Microsoft starts removing WMIC tool used by cybercriminals | Aug 18, 9:10 am |
|---|
| 487 | CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE | Aug 18, 7:10 am |
|---|
| 488 | ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th) | Aug 18, 2:10 am |
|---|
| 489 | Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects | Aug 17, 10:10 pm |
|---|
| 490 | Apple Patches iOS and macOS, (Mon, Aug 17th) | Aug 17, 9:10 pm |
|---|
| 491 | Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic | Aug 17, 8:10 pm |
|---|
| 492 | Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads | Aug 17, 8:10 pm |
|---|
| 493 | Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection | Aug 17, 8:10 pm |
|---|
| 494 | Pokémon Center data breach exposes customer info, cancels some orders | Aug 17, 8:10 pm |
|---|
| 495 | Hacker claims 3.6 million Azure account records stolen from major companies | Aug 17, 8:10 pm |
|---|
| 496 | Apple Screen Sharing Security, (Mon, Aug 17th) | Aug 17, 3:10 pm |
|---|
| 497 | Microsoft confirms GitHub is down worldwide | Aug 17, 3:10 pm |
|---|
| 498 | ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More | Aug 17, 2:10 pm |
|---|
| 499 | Certighost and the Privilege Hiding in Your Certificate Authority | Aug 17, 2:10 pm |
|---|
| 500 | Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access | Aug 17, 1:10 pm |
|---|
