| 1 | How MCP Servers Can Expose Enterprise Secrets | Aug 17, 1:10 pm |
|---|
| 2 | Windows Server 2022 reaches end of mainstream support in 60 days | Aug 17, 1:10 pm |
|---|
| 3 | Philips and GE investigating Clop ransomware data theft claims | Aug 17, 12:10 pm |
|---|
| 4 | Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware | Aug 17, 11:10 am |
|---|
| 5 | Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies | Aug 17, 11:10 am |
|---|
| 6 | French tax authority data breach affects 678,000 individuals | Aug 17, 10:10 am |
|---|
| 7 | Microsoft working on Defender patch for ShieldBreak zero-day | Aug 17, 9:10 am |
|---|
| 8 | ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th) | Aug 17, 2:10 am |
|---|
| 9 | SafePal data breach impacts 39,798 customers, stolen info for sale | Aug 17, 12:10 am |
|---|
| 10 | Anthropic confirms Claude is down in major outage affecting multiple services | Aug 16, 11:10 pm |
|---|
| 11 | Wireshark 4.6.8 Released, (Sun, Aug 16th) | Aug 16, 10:10 pm |
|---|
| 12 | Large-scale DDoS attacks disrupted Threema secure messaging service | Aug 16, 6:10 pm |
|---|
| 13 | New AmnesiaStealer macOS malware hijacks browser sessions via remote control | Aug 16, 3:10 pm |
|---|
| 14 | New Evooo1Bot Linux botnet turns routers into traffic relay nodes | Aug 15, 3:10 pm |
|---|
| 15 | How Anthropic plans to watermark Claude's AI-generated text | Aug 15, 12:10 am |
|---|
| 16 | Hackers arrested over €30M bank fraud exploiting service provider flaw | Aug 14, 6:10 pm |
|---|
| 17 | Hackers exploit macOS Screen Sharing flaw to deploy Monero miner | Aug 14, 3:10 pm |
|---|
| 18 | Max severity SAP Commerce Cloud flaw now targeted in attacks | Aug 14, 2:10 pm |
|---|
| 19 | The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI | Aug 14, 2:10 pm |
|---|
| 20 | Who’s Tracking You? Use This New Service to Find Out | Aug 14, 12:10 pm |
|---|
| 21 | Shell investigates 'potential incident' after Clop data theft claims | Aug 14, 12:10 pm |
|---|
| 22 | RingCentral data breach exposed info of 1.6 million accounts | Aug 14, 11:10 am |
|---|
| 23 | Data analyst sent to prison for stealing data, extorting employer | Aug 14, 9:10 am |
|---|
| 24 | Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks | Aug 14, 2:10 am |
|---|
| 25 | ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th) | Aug 14, 2:10 am |
|---|
| 26 | Ukraine shuts down 94 fraudulent call centers, seize millions in cash | Aug 13, 10:10 pm |
|---|
| 27 | Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt | Aug 13, 9:10 pm |
|---|
| 28 | Hackers breach govt webmail while running parallel crypto fraud | Aug 13, 7:10 pm |
|---|
| 29 | AI 'watermark removers' flood the web. Almost none can prove they work. | Aug 13, 6:10 pm |
|---|
| 30 | Microsoft patches LegacyHive Windows zero-day vulnerability | Aug 13, 6:10 pm |
|---|
| 31 | Critical VMware vCenter RCE flaw exploited for reverse SSH access | Aug 13, 5:10 pm |
|---|
| 32 | Trezor discloses data breach affecting nearly 14,000 customers | Aug 13, 4:10 pm |
|---|
| 33 | White House taps security firms for offensive hack-back operations | Aug 13, 2:10 pm |
|---|
| 34 | Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion | Aug 13, 2:10 pm |
|---|
| 35 | WhatsApp rolls out new feature that flags potential scam messages | Aug 13, 12:10 pm |
|---|
| 36 | Attackers Exploit SharePoint Authentication Bypass After Public PoC Release | Aug 13, 7:10 am |
|---|
| 37 | Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th) | Aug 13, 2:10 am |
|---|
| 38 | ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th) | Aug 13, 2:10 am |
|---|
| 39 | Android malware combo takes out loans and relays victims' credit cards | Aug 12, 11:10 pm |
|---|
| 40 | "City-Forum" data-theft attacks target Salesforce, ServiceNow portals | Aug 12, 11:10 pm |
|---|
| 41 | Hackers exploit critical Adobe Commerce flaw to hijack customer accounts | Aug 12, 9:10 pm |
|---|
| 42 | Hundreds of fake Chrome VPN extensions route traffic through a proxy | Aug 12, 7:10 pm |
|---|
| 43 | Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor | Aug 12, 6:10 pm |
|---|
| 44 | Lazarus hackers exploited Windows zero-day to target defense firms | Aug 12, 4:10 pm |
|---|
| 45 | Plug and Pwn attack uses fake USB devices for Windows SYSTEM access | Aug 12, 4:10 pm |
|---|
| 46 | 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One | Aug 12, 3:10 pm |
|---|
| 47 | FBI: Hackers target online accounts to steal nude photos | Aug 12, 3:10 pm |
|---|
| 48 | Linux Kernel Process Accounting, (Wed, Aug 12th) | Aug 12, 3:10 pm |
|---|
| 49 | Enterprise Defenses Recovered at the Edge and Collapsed Inside | Aug 12, 2:10 pm |
|---|
| 50 | OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning | Aug 12, 2:10 pm |
|---|
| 51 | The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In | Aug 12, 2:10 pm |
|---|
| 52 | Hackers leverage new Microsoft SharePoint exploit in attacks | Aug 12, 1:10 pm |
|---|
| 53 | Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws | Aug 12, 12:10 pm |
|---|
| 54 | Signal adds new security feature to thwart man-in-the-middle attacks | Aug 12, 12:10 pm |
|---|
| 55 | New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges | Aug 12, 11:10 am |
|---|
| 56 | Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access | Aug 12, 10:10 am |
|---|
| 57 | Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations | Aug 12, 9:10 am |
|---|
| 58 | Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS | Aug 12, 8:10 am |
|---|
| 59 | ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access | Aug 12, 8:10 am |
|---|
| 60 | SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code | Aug 12, 8:10 am |
|---|
| 61 | Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse | Aug 12, 2:10 am |
|---|
| 62 | ISC Stormcast For Wednesday, August 12th, 2026 https://isc.sans.edu/podcastdetail/10048, (Wed, Aug 12th) | Aug 12, 2:10 am |
|---|
| 63 | DeadLock ransomware uses blockchain to resist infrastructure takedown | Aug 11, 11:10 pm |
|---|
| 64 | Microsoft Plugs Nearly 400 Security Holes | Aug 11, 10:10 pm |
|---|
| 65 | Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client | Aug 11, 9:10 pm |
|---|
| 66 | Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing | Aug 11, 9:10 pm |
|---|
| 67 | Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack | Aug 11, 9:10 pm |
|---|
| 68 | Sandworm hackers target IT pros with trojanized WireGuard VPN client | Aug 11, 9:10 pm |
|---|
| 69 | Cisco warns of ASA and FTD VPN flaw exploited to crash devices | Aug 11, 8:10 pm |
|---|
| 70 | Microsoft releases Windows 10 KB5120249 extended security update | Aug 11, 7:10 pm |
|---|
| 71 | Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees | Aug 11, 7:10 pm |
|---|
| 72 | Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands | Aug 11, 7:10 pm |
|---|
| 73 | DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt | Aug 11, 6:10 pm |
|---|
| 74 | Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE | Aug 11, 6:10 pm |
|---|
| 75 | Windows 11 KB5121003 & KB5120240 cumulative updates released | Aug 11, 6:10 pm |
|---|
| 76 | Microsoft Patch Tuesday August 2026, (Tue, Aug 11th) | Aug 11, 6:10 pm |
|---|
| 77 | Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days | Aug 11, 6:10 pm |
|---|
| 78 | Wesco confirms security incident after ExfilSquad claims data theft | Aug 11, 4:10 pm |
|---|
| 79 | OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development | Aug 11, 2:10 pm |
|---|
| 80 | Vague Task, Total Access: When AI Delegation Becomes a Security Risk | Aug 11, 2:10 pm |
|---|
| 81 | Mozilla updates GPG signing key for Firefox releases after exposure | Aug 11, 2:10 pm |
|---|
| 82 | Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers | Aug 11, 1:10 pm |
|---|
| 83 | Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo | Aug 11, 1:10 pm |
|---|
| 84 | A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices | Aug 11, 1:10 pm |
|---|
| 85 | CISA: Microsoft SharePoint flaw now exploited in ransomware attacks | Aug 11, 1:10 pm |
|---|
| 86 | DDoS attacks over 1 Tbps surged fivefold in the second quarter | Aug 11, 1:10 pm |
|---|
| 87 | Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks | Aug 11, 11:10 am |
|---|
| 88 | Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets | Aug 11, 11:10 am |
|---|
| 89 | Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 | Aug 11, 11:10 am |
|---|
| 90 | Cisco warns of high-severity ClamAV flaws with public exploits | Aug 11, 11:10 am |
|---|
| 91 | US and South Korea warn of Gunra ransomware targeting govt agencies | Aug 11, 10:10 am |
|---|
| 92 | Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine | Aug 11, 8:10 am |
|---|
| 93 | BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins | Aug 11, 7:10 am |
|---|
| 94 | ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th) | Aug 11, 2:10 am |
|---|
| 95 | Hackers breached a small Polish energy plant via private APN last year | Aug 10, 11:10 pm |
|---|
| 96 | BdThemes plugins supply-chain hack creates rogue WordPress admins | Aug 10, 10:10 pm |
|---|
| 97 | OpenAI releases ChatGPT 5.6 Cyber, but it's only for approved users | Aug 10, 8:10 pm |
|---|
| 98 | China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw | Aug 10, 6:10 pm |
|---|
| 99 | New StormEncryptor ransomware used by former Medusa affiliate | Aug 10, 6:10 pm |
|---|
| 100 | ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors | Aug 10, 5:10 pm |
|---|
| 101 | Scans for Solana (Surfpool?) Endpoints, (Mon, Aug 10th) | Aug 10, 5:10 pm |
|---|
| 102 | Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development | Aug 10, 3:10 pm |
|---|
| 103 | CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs | Aug 10, 3:10 pm |
|---|
| 104 | When Credentials Are No Longer Enough: Device Trust in the AI Era | Aug 10, 2:10 pm |
|---|
| 105 | TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore | Aug 10, 1:10 pm |
|---|
| 106 | Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development | Aug 10, 1:10 pm |
|---|
| 107 | LexisNexis shuts down services after suspicious activity on servers | Aug 10, 1:10 pm |
|---|
| 108 | New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA | Aug 10, 1:10 pm |
|---|
| 109 | Member of The Com sent to prison for blackmail, sextortion | Aug 10, 1:10 pm |
|---|
| 110 | Valve notifies Steam hardware customers of a data breach | Aug 10, 12:10 pm |
|---|
| 111 | Critical Progress LoadMaster flaw now actively exploited in attacks | Aug 10, 10:10 am |
|---|
| 112 | Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials | Aug 10, 8:10 am |
|---|
| 113 | OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause | Aug 10, 7:10 am |
|---|
| 114 | ISC Stormcast For Monday, August 10th, 2026 https://isc.sans.edu/podcastdetail/10044, (Mon, Aug 10th) | Aug 10, 2:10 am |
|---|
| 115 | Hackers breach TrueConf to trojanize client installers with backdoors | Aug 8, 3:10 pm |
|---|
| 116 | New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens | Aug 8, 10:10 am |
|---|
| 117 | Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers | Aug 8, 10:10 am |
|---|
| 118 | Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts | Aug 8, 8:10 am |
|---|
| 119 | N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist | Aug 8, 8:10 am |
|---|
| 120 | Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication | Aug 8, 8:10 am |
|---|
| 121 | Metabase SQLi zero-day exploited in customer data-theft attacks | Aug 7, 9:10 pm |
|---|
| 122 | UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data | Aug 7, 8:10 pm |
|---|
| 123 | ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets | Aug 7, 8:10 pm |
|---|
| 124 | Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer | Aug 7, 8:10 pm |
|---|
| 125 | Unlimited Technology Systems breach impacts 3.8 million people | Aug 7, 8:10 pm |
|---|
| 126 | Levi Strauss & Co. says hackers stole corporate data in cyberattack | Aug 7, 4:10 pm |
|---|
| 127 | New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP | Aug 7, 2:10 pm |
|---|
| 128 | North Carolina Ports confirms cyberattack disrupting operations | Aug 7, 2:10 pm |
|---|
| 129 | Real emails, hijacked payments: Two H1 2026 attack chains | Aug 7, 2:10 pm |
|---|
| 130 | 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers | Aug 7, 12:10 pm |
|---|
| 131 | Growing Up The Hard Way | Aug 7, 12:10 pm |
|---|
| 132 | AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day | Aug 7, 11:10 am |
|---|
| 133 | Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails | Aug 7, 11:10 am |
|---|
| 134 | Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets | Aug 7, 10:10 am |
|---|
| 135 | Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access | Aug 7, 10:10 am |
|---|
| 136 | New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables | Aug 7, 10:10 am |
|---|
| 137 | Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs | Aug 7, 8:10 am |
|---|
| 138 | TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign | Aug 7, 8:10 am |
|---|
| 139 | Linux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th) | Aug 7, 8:10 am |
|---|
| 140 | ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th) | Aug 7, 2:10 am |
|---|
| 141 | ClickFix attack pushes macOS infostealer for crypto theft attacks | Aug 6, 11:10 pm |
|---|
| 142 | OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it | Aug 6, 11:10 pm |
|---|
| 143 | Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group | Aug 6, 8:10 pm |
|---|
| 144 | Swiss government SharePoint breach compromised 200 accounts | Aug 6, 7:10 pm |
|---|
| 145 | Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs | Aug 6, 6:10 pm |
|---|
| 146 | New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts | Aug 6, 6:10 pm |
|---|
| 147 | New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes | Aug 6, 6:10 pm |
|---|
| 148 | Meta AI model hacked a company during misconfigured cyber test | Aug 6, 5:10 pm |
|---|
| 149 | New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs | Aug 6, 5:10 pm |
|---|
| 150 | Canadian Man Pleads Guilty in Snowflake Extortions | Aug 6, 5:10 pm |
|---|
| 151 | ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories | Aug 6, 4:10 pm |
|---|
| 152 | Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities | Aug 6, 2:10 pm |
|---|
| 153 | How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore | Aug 6, 2:10 pm |
|---|
| 154 | AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory | Aug 6, 1:10 pm |
|---|
| 155 | Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses | Aug 6, 1:10 pm |
|---|
| 156 | CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps | Aug 6, 1:10 pm |
|---|
| 157 | AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model | Aug 6, 10:10 am |
|---|
| 158 | Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access | Aug 6, 10:10 am |
|---|
| 159 | CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild | Aug 6, 9:10 am |
|---|
| 160 | Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service | Aug 6, 9:10 am |
|---|
| 161 | Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells | Aug 6, 9:10 am |
|---|
| 162 | Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People | Aug 6, 7:10 am |
|---|
| 163 | ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th) | Aug 6, 2:10 am |
|---|
| 164 | 22 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary], (Thu, Aug 6th) | Aug 6, 1:10 am |
|---|
| 165 | Ransom Cartel ransomware creator sentenced to 16 years in prison | Aug 5, 11:10 pm |
|---|
| 166 | Canadian pleads guilty to Snowflake cloud data-theft attacks | Aug 5, 10:10 pm |
|---|
| 167 | Hackers run khunt post-exploitation toolkit from Oracle database | Aug 5, 8:10 pm |
|---|
| 168 | OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes | Aug 5, 7:10 pm |
|---|
| 169 | Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures | Aug 5, 7:10 pm |
|---|
| 170 | COLDCARD security audit phishing attack installs remote access tool | Aug 5, 6:10 pm |
|---|
| 171 | Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm, (Wed, Aug 5th) | Aug 5, 6:10 pm |
|---|
| 172 | Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain | Aug 5, 5:10 pm |
|---|
| 173 | Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports | Aug 5, 5:10 pm |
|---|
| 174 | Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt | Aug 5, 5:10 pm |
|---|
| 175 | CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws | Aug 5, 4:10 pm |
|---|
| 176 | Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses | Aug 5, 3:10 pm |
|---|
| 177 | How AI-powered phishing killed blocklists for good | Aug 5, 3:10 pm |
|---|
| 178 | Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug | Aug 5, 3:10 pm |
|---|
| 179 | Google Blogger locks hundreds of blogs in malware false positive | Aug 5, 3:10 pm |
|---|
| 180 | Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk | Aug 5, 1:10 pm |
|---|
| 181 | New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch | Aug 5, 1:10 pm |
|---|
| 182 | Leaked n8n API Tokens Exposed Live Instances to Credential Theft | Aug 5, 12:10 pm |
|---|
| 183 | Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup | Aug 5, 12:10 pm |
|---|
| 184 | Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data | Aug 5, 10:10 am |
|---|
| 185 | CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited | Aug 5, 9:10 am |
|---|
| 186 | Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself | Aug 5, 9:10 am |
|---|
| 187 | QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer | Aug 5, 7:10 am |
|---|
| 188 | ISC Stormcast For Wednesday, August 5th, 2026 https://isc.sans.edu/podcastdetail/10038, (Wed, Aug 5th) | Aug 5, 2:10 am |
|---|
| 189 | OpenAI, Anthropic AI agents targeted real people and systems in cyber tests | Aug 5, 12:10 am |
|---|
| 190 | TP-Link patches Omada ZTP flaws allowing hackers to breach networks | Aug 4, 11:10 pm |
|---|
| 191 | Phishing service spoofs RingCentral to steal Microsoft 365 accounts | Aug 4, 10:10 pm |
|---|
| 192 | 77 Open VSX extensions found harvesting developer info | Aug 4, 7:10 pm |
|---|
| 193 | New XCSSET variant targets macOS devs via compromised Xcode projects | Aug 4, 7:10 pm |
|---|
| 194 | Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens | Aug 4, 6:10 pm |
|---|
| 195 | Massive ChainDrop npm supply-chain attack infects hundreds of packages | Aug 4, 4:10 pm |
|---|
| 196 | Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access | Aug 4, 2:10 pm |
|---|
| 197 | Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks | Aug 4, 2:10 pm |
|---|
| 198 | Varonis Agent IBAC keeps AI agents within their intended boundaries | Aug 4, 2:10 pm |
|---|
| 199 | Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent | Aug 4, 1:10 pm |
|---|
| 200 | When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted | Aug 4, 1:10 pm |
|---|
| 201 | Botnet Hunting for Vulnerabilities in Diagnostic Tools, (Tue, Aug 4th) | Aug 4, 1:10 pm |
|---|
| 202 | DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT | Aug 4, 11:10 am |
|---|
| 203 | New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root | Aug 4, 11:10 am |
|---|
| 204 | CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises | Aug 4, 8:10 am |
|---|
| 205 | ISC Stormcast For Tuesday, August 4th, 2026 https://isc.sans.edu/podcastdetail/10036, (Tue, Aug 4th) | Aug 4, 2:10 am |
|---|
| 206 | Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts | Aug 4, 1:10 am |
|---|
| 207 | New Pass-ta-key attacks let malware hijack Google-synced passkeys | Aug 4, 12:10 am |
|---|
| 208 | Fake Roblox Xeno script launcher pushes infostealer, RAT malware | Aug 3, 8:10 pm |
|---|
| 209 | New DOUBLECUP ClickFix service hides malware in browser cache images | Aug 3, 8:10 pm |
|---|
| 210 | 18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users | Aug 3, 7:10 pm |
|---|
| 211 | INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws | Aug 3, 5:10 pm |
|---|
| 212 | Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts | Aug 3, 5:10 pm |
|---|
| 213 | N-able warns of N-central auth bypass flaw exploited in attacks | Aug 3, 5:10 pm |
|---|
| 214 | ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks | Aug 3, 3:10 pm |
|---|
| 215 | Inside the Underground Business of the Android BTMOB RAT malware | Aug 3, 3:10 pm |
|---|
| 216 | ExfilSquad hackers leak info of over 100,000 UK police officers, staff | Aug 3, 3:10 pm |
|---|
| 217 | FOMO in the SOC: Where AI Platforms like Claude Actually Fit | Aug 3, 12:10 pm |
|---|
| 218 | PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web | Aug 3, 11:10 am |
|---|
| 219 | Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS | Aug 3, 11:10 am |
|---|
| 220 | Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable | Aug 3, 9:10 am |
|---|
| 221 | Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code | Aug 3, 8:10 am |
|---|
| 222 | N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete | Aug 3, 8:10 am |
|---|
| 223 | ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd) | Aug 3, 2:10 am |
|---|
| 224 | OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems | Aug 2, 11:10 pm |
|---|
| 225 | COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft | Aug 2, 10:10 pm |
|---|
| 226 | Google Chrome may soon block New Tab hijacker extensions by default | Aug 2, 3:10 pm |
|---|
| 227 | Atomic MacOS (AMOS) stealer infection, (Sun, Aug 2nd) | Aug 2, 4:10 am |
|---|
| 228 | Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes | Aug 1, 6:10 pm |
|---|
| 229 | Rails patches critical Active Storage flaw with RCE potential | Aug 1, 3:10 pm |
|---|
| 230 | Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites | Aug 1, 10:10 am |
|---|
| 231 | Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware | Aug 1, 8:10 am |
|---|
| 232 | Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction | Aug 1, 8:10 am |
|---|
| 233 | Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st) | Aug 1, 8:10 am |
|---|
| 234 | Amgen says cloud data breach exposed patient health, proprietary info | Jul 31, 11:10 pm |
|---|
| 235 | Arch Linux disables AUR package adoption to stop malware flood | Jul 31, 10:10 pm |
|---|
| 236 | Online ad firm Adform’s script compromised to steal cryptocurrency | Jul 31, 9:10 pm |
|---|
| 237 | Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk | Jul 31, 8:10 pm |
|---|
| 238 | OpenAI says its new GPT 5.6 models are becoming more cost-efficient | Jul 31, 7:10 pm |
|---|
| 239 | HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm | Jul 31, 6:10 pm |
|---|
| 240 | Hacker uses DeepSeek AI to autonomously attack vulnerable servers | Jul 31, 6:10 pm |
|---|
| 241 | CISA warns of cyberattacks disrupting U.S. water utilities | Jul 31, 5:10 pm |
|---|
| 242 | Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies | Jul 31, 4:10 pm |
|---|
| 243 | Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw | Jul 31, 3:10 pm |
|---|
| 244 | Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined | Jul 31, 3:10 pm |
|---|
| 245 | ESET tracks rise in malicious AI skills and adaptable malware | Jul 31, 3:10 pm |
|---|
| 246 | Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations | Jul 31, 12:10 pm |
|---|
| 247 | Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks | Jul 31, 12:10 pm |
|---|
| 248 | 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 | Jul 31, 12:10 pm |
|---|
| 249 | zipdump.py: Metadata Encoding, (Fri, Jul 31st) | Jul 31, 10:10 am |
|---|
| 250 | ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st) | Jul 31, 2:10 am |
|---|
| 251 | Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests | Jul 31, 1:10 am |
|---|
| 252 | South Korea fines telco giant KT $39 million for customer data breach | Jul 30, 11:10 pm |
|---|
| 253 | JetBrains warns of critical TeamCity remote code execution flaw | Jul 30, 10:10 pm |
|---|
| 254 | DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware | Jul 30, 8:10 pm |
|---|
| 255 | Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers | Jul 30, 7:10 pm |
|---|
| 256 | VMware fixes three critical flaws allowing auth bypass, VM escapes | Jul 30, 6:10 pm |
|---|
| 257 | ShinyHunters claims Brinks Home breach, threatens to leak stolen data | Jul 30, 5:10 pm |
|---|
| 258 | Read This Before You Buy That TV Streaming Stick | Jul 30, 5:10 pm |
|---|
| 259 | Google says AI helped Chrome fix 1,072 security bugs in two releases | Jul 30, 5:10 pm |
|---|
| 260 | Analog Devices discloses data breach, says operations unaffected | Jul 30, 4:10 pm |
|---|
| 261 | ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories | Jul 30, 4:10 pm |
|---|
| 262 | Microsoft Teams vishing attacks lead to Chaos ransomware attacks | Jul 30, 4:10 pm |
|---|
| 263 | Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database | Jul 30, 3:10 pm |
|---|
| 264 | After the Break-In: What Attackers Do Once They're Already Inside | Jul 30, 2:10 pm |
|---|
| 265 | The Network Has Become the Control Plane for AI Security | Jul 30, 1:10 pm |
|---|
| 266 | Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents | Jul 30, 1:10 pm |
|---|
| 267 | SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT | Jul 30, 11:10 am |
|---|
| 268 | Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts | Jul 30, 11:10 am |
|---|
| 269 | FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks | Jul 30, 8:10 am |
|---|
| 270 | Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation | Jul 30, 8:10 am |
|---|
| 271 | Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet | Jul 30, 7:10 am |
|---|
| 272 | Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data | Jul 30, 6:10 am |
|---|
| 273 | ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th) | Jul 30, 2:10 am |
|---|
| 274 | Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th) | Jul 30, 1:10 am |
|---|
| 275 | Russian hackers exploit Exchange OWA zero-day for long-term mailbox access | Jul 30, 12:10 am |
|---|
| 276 | Cisco warns of FMC static credential flaw exploited in zero-day attacks | Jul 29, 10:10 pm |
|---|
| 277 | Anthropic confirms Claude is down worldwide | Jul 29, 9:10 pm |
|---|
| 278 | Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads | Jul 29, 7:10 pm |
|---|
| 279 | Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack | Jul 29, 6:10 pm |
|---|
| 280 | Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare | Jul 29, 6:10 pm |
|---|
| 281 | Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape | Jul 29, 4:10 pm |
|---|
| 282 | Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory | Jul 29, 4:10 pm |
|---|
| 283 | OpenAI agent used exposed credentials at 4 services in Hugging Face breach | Jul 29, 4:10 pm |
|---|
| 284 | Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments | Jul 29, 3:10 pm |
|---|
| 285 | Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline | Jul 29, 3:10 pm |
|---|
| 286 | Hackers target over 30 Minnesota water utilities in coordinated OT attack | Jul 29, 3:10 pm |
|---|
| 287 | Windows 11 KB5101684 update released with 42 changes and fixes | Jul 29, 2:10 pm |
|---|
| 288 | Your AI Agents Are Guessing at Scale: Permissions Decide the Damage | Jul 29, 2:10 pm |
|---|
| 289 | 73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack | Jul 29, 1:10 pm |
|---|
| 290 | Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser | Jul 29, 1:10 pm |
|---|
| 291 | Mythos Asks the Right Question. It Doesn't Answer It. | Jul 29, 1:10 pm |
|---|
| 292 | These near-mint ASUS Chromebook refurbs are only $145 | Jul 29, 12:10 pm |
|---|
| 293 | Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity | Jul 29, 11:10 am |
|---|
| 294 | New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands | Jul 29, 9:10 am |
|---|
| 295 | Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass | Jul 29, 9:10 am |
|---|
| 296 | Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates | Jul 29, 8:10 am |
|---|
| 297 | Apple Patches Everything (July 2026), (Wed, Jul 29th) | Jul 29, 8:10 am |
|---|
| 298 | OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach | Jul 29, 7:10 am |
|---|
| 299 | Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js | Jul 29, 5:10 am |
|---|
| 300 | ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th) | Jul 29, 2:10 am |
|---|
| 301 | CubePilot drone software dev hit by DNS hijacking to intercept traffic | Jul 28, 10:10 pm |
|---|
| 302 | OpenAI models used Artifactory zero-days to escape to the internet | Jul 28, 9:10 pm |
|---|
| 303 | Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack | Jul 28, 8:10 pm |
|---|
| 304 | CISA shares advice on isolating vital systems during cyberattacks | Jul 28, 7:10 pm |
|---|
| 305 | vBulletin fixes critical pre-auth RCE flaw with public exploit | Jul 28, 6:10 pm |
|---|
| 306 | 24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login | Jul 28, 4:10 pm |
|---|
| 307 | Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process | Jul 28, 4:10 pm |
|---|
| 308 | Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root | Jul 28, 2:10 pm |
|---|
| 309 | JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach | Jul 28, 2:10 pm |
|---|
| 310 | Is Your SSO Protected Against Modern Credential Attacks? | Jul 28, 2:10 pm |
|---|
| 311 | Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays | Jul 28, 1:10 pm |
|---|
| 312 | Over 24,000 exposed server BMCs leak password hash via decades-old flaw | Jul 28, 1:10 pm |
|---|
| 313 | Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost | Jul 28, 10:10 am |
|---|
| 314 | Data breach at medical billing firm MCBS affects 1.26 million people | Jul 28, 10:10 am |
|---|
| 315 | Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit | Jul 28, 9:10 am |
|---|
| 316 | Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In | Jul 28, 9:10 am |
|---|
| 317 | AutoIT Payload Injector , (Tue, Jul 28th) | Jul 28, 8:10 am |
|---|
| 318 | Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost | Jul 28, 7:10 am |
|---|
| 319 | Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw | Jul 28, 6:10 am |
|---|
| 320 | ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th) | Jul 28, 2:10 am |
|---|
| 321 | Hackers target US firms in FastJson RCE zero-day attacks | Jul 28, 12:10 am |
|---|
| 322 | Arista patches VeloCloud Orchestrator zero-day exploited in attacks | Jul 27, 11:10 pm |
|---|
| 323 | New Certighost PoC exploit lets attackers hijack Windows domains | Jul 27, 9:10 pm |
|---|
| 324 | New Dysphoria DDoS botnet spreads to 200k devices worldwide | Jul 27, 9:10 pm |
|---|
| 325 | NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework | Jul 27, 8:10 pm |
|---|
| 326 | Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption | Jul 27, 6:10 pm |
|---|
| 327 | Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin | Jul 27, 6:10 pm |
|---|
| 328 | Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw | Jul 27, 4:10 pm |
|---|
| 329 | Ernst & Young data breach claimed by ShinyHunters extortion gang | Jul 27, 4:10 pm |
|---|
| 330 | Coca-Cola confirms data theft in Fairlife ransomware attack | Jul 27, 4:10 pm |
|---|
| 331 | ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More | Jul 27, 3:10 pm |
|---|
| 332 | Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update | Jul 27, 2:10 pm |
|---|
| 333 | n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process | Jul 27, 2:10 pm |
|---|
| 334 | Shadow AI agents are multiplying. Here's how to find and secure them. | Jul 27, 2:10 pm |
|---|
| 335 | Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware | Jul 27, 12:10 pm |
|---|
| 336 | Java Spring Boot "heapdump" scans, (Mon, Jul 27th) | Jul 27, 10:10 am |
|---|
| 337 | GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption | Jul 27, 9:10 am |
|---|
| 338 | TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments | Jul 27, 9:10 am |
|---|
| 339 | ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th) | Jul 27, 2:10 am |
|---|
| 340 | GitHub, PyPI add time-based defenses against supply chain attacks | Jul 26, 8:10 pm |
|---|
| 341 | Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th) | Jul 26, 4:11 pm |
|---|
| 342 | GitHub, PyPI add time-absed defenses against supply chain attacks | Jul 26, 3:10 pm |
|---|
| 343 | Steam forum ClickFix attacks infect gamers with XMRig cryptominers | Jul 25, 11:10 pm |
|---|
| 344 | Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable | Jul 25, 8:10 pm |
|---|
| 345 | Malicious sites use JavaScript to build malware in browser memory | Jul 25, 4:10 pm |
|---|
| 346 | ShinyHunters data leaks fuel $2,000 sextortion email scam | Jul 25, 3:10 pm |
|---|
| 347 | Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available | Jul 25, 2:10 pm |
|---|
| 348 | DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts | Jul 25, 12:10 pm |
|---|
| 349 | Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE | Jul 25, 12:10 pm |
|---|
| 350 | CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking | Jul 25, 12:10 pm |
|---|
| 351 | OpenAI confirms ChatGPT is down worldwide | Jul 25, 10:10 am |
|---|
| 352 | Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git | Jul 25, 9:10 am |
|---|
| 353 | OnTrac notifies customers of data breach after network hack | Jul 24, 8:10 pm |
|---|
| 354 | Hermes AI agent used to automate attack on Thai Finance Ministry | Jul 24, 7:10 pm |
|---|
| 355 | Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts | Jul 24, 6:10 pm |
|---|
| 356 | BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery | Jul 24, 5:10 pm |
|---|
| 357 | Microsoft blames massive Microsoft 365 outage on maintenance bug | Jul 24, 4:10 pm |
|---|
| 358 | Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller | Jul 24, 3:10 pm |
|---|
| 359 | Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack | Jul 24, 2:10 pm |
|---|
| 360 | Chick-fil-A data breach affects more than 13,000 customers | Jul 24, 2:10 pm |
|---|
| 361 | Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers | Jul 24, 1:10 pm |
|---|
| 362 | ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link | Jul 24, 1:10 pm |
|---|
| 363 | Europol flags 4,340 URLs for removal in 'The Com' crackdown | Jul 24, 1:10 pm |
|---|
| 364 | Man gets six years for hacking 750 women's Snapchat accounts | Jul 24, 12:10 pm |
|---|
| 365 | Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do | Jul 24, 12:10 pm |
|---|
| 366 | Golden Chickens Resurfaces With Four New Malware Families and Modular Implants | Jul 24, 11:10 am |
|---|
| 367 | Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry | Jul 24, 11:10 am |
|---|
| 368 | Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say | Jul 24, 9:10 am |
|---|
| 369 | NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats | Jul 24, 9:10 am |
|---|
| 370 | Clop ransomware targets Windchill, FlexPLM in data theft attacks | Jul 24, 8:10 am |
|---|
| 371 | Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks | Jul 24, 7:10 am |
|---|
| 372 | ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th) | Jul 24, 2:10 am |
|---|
| 373 | New Dolphin X malware uses AI to rank high-value targets | Jul 23, 10:10 pm |
|---|
| 374 | Australian energy provider Origin says data breach exposes client data | Jul 23, 9:10 pm |
|---|
| 375 | Fake Claude app promoted by Bing ads pushes SectopRAT malware | Jul 23, 8:10 pm |
|---|
| 376 | Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes | Jul 23, 7:10 pm |
|---|
| 377 | ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories | Jul 23, 5:10 pm |
|---|
| 378 | Hackers abuse Notepad++ plugins to stealthily install malware | Jul 23, 5:10 pm |
|---|
| 379 | Russian hackers exploit Zimbra zero-click flaw for email theft | Jul 23, 5:10 pm |
|---|
| 380 | Microsoft 365 outage affects Teams, SharePoint and other services | Jul 23, 4:10 pm |
|---|
| 381 | China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks | Jul 23, 3:10 pm |
|---|
| 382 | Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge | Jul 23, 3:10 pm |
|---|
| 383 | Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files | Jul 23, 3:10 pm |
|---|
| 384 | When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd) | Jul 23, 2:10 pm |
|---|
| 385 | FedRAMP Rev5 Is Ending: What the 20x Transition Really Requires | Jul 23, 2:10 pm |
|---|
| 386 | EU fines Google $1 billion for search, app store antitrust violations | Jul 23, 1:10 pm |
|---|
| 387 | Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts | Jul 23, 12:10 pm |
|---|
| 388 | Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers | Jul 23, 12:10 pm |
|---|
| 389 | New RefluXFS Linux flaw lets attackers gain root privileges | Jul 23, 12:10 pm |
|---|
| 390 | How Synthetic Identity Fraud is Coming for Machine Identities | Jul 23, 12:10 pm |
|---|
| 391 | Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs | Jul 23, 10:10 am |
|---|
| 392 | Microsoft working to fix Exchange Online mailbox quarantine issue | Jul 23, 10:10 am |
|---|
| 393 | New msaRAT malware uses Chrome, Edge browsers to route C2 traffic | Jul 23, 10:10 am |
|---|
| 394 | Check Point warns of SmartConsole zero-day exploited in attacks | Jul 23, 9:10 am |
|---|
| 395 | Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access | Jul 23, 8:10 am |
|---|
| 396 | ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd) | Jul 23, 2:10 am |
|---|
| 397 | Upbound says hack caused $13 million in fraudulent Acima leases | Jul 22, 10:10 pm |
|---|
| 398 | GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier | Jul 22, 9:10 pm |
|---|
| 399 | South Korea discloses data breach impacting diplomats worldwide | Jul 22, 8:10 pm |
|---|
| 400 | Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data | Jul 22, 7:10 pm |
|---|
| 401 | Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs | Jul 22, 7:10 pm |
|---|
| 402 | Rondo Meets Geoserver, (Wed, Jul 22nd) | Jul 22, 6:10 pm |
|---|
| 403 | Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack | Jul 22, 5:10 pm |
|---|
| 404 | How enterprise GenAI can amplify ransomware risk — and how to contain it | Jul 22, 4:10 pm |
|---|
| 405 | New InfraTrust report reveals infrastructure flaws admins should patch first | Jul 22, 3:10 pm |
|---|
| 406 | The Fastest Path to AI Adoption Runs Through Security | Jul 22, 2:10 pm |
|---|
| 407 | Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication | Jul 22, 2:10 pm |
|---|
| 408 | Adobe Chrome extension flaw let sites access private WhatsApp chats | Jul 22, 2:10 pm |
|---|
| 409 | Stop renting storage space — this lifetime 2TB plan is yours for $59 | Jul 22, 12:10 pm |
|---|
| 410 | Why Modern SOCs Need Multi-Layered Detections | Jul 22, 12:10 pm |
|---|
| 411 | CISA orders urgent action on actively exploited Langflow RCE flaw | Jul 22, 12:10 pm |
|---|
| 412 | Microsoft to stop Exchange 2016 / 2019 security updates in October | Jul 22, 11:10 am |
|---|
| 413 | Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA | Jul 22, 8:10 am |
|---|
| 414 | Chick-fil-A discloses data breach after credential stuffing attacks | Jul 22, 7:10 am |
|---|
| 415 | OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark | Jul 22, 6:10 am |
|---|
| 416 | Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents | Jul 22, 6:10 am |
|---|
| 417 | OpenAI says its AI models hacked Hugging Face during testing | Jul 22, 6:10 am |
|---|
| 418 | Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library | Jul 22, 6:10 am |
|---|
| 419 | LG to Ban Residential Proxies from Smart TV Apps | Jul 22, 2:10 am |
|---|
| 420 | ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd) | Jul 22, 2:10 am |
|---|
| 421 | FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware | Jul 21, 11:10 pm |
|---|
| 422 | Police dismantle Kratos phishing platform, arrest developer | Jul 21, 11:10 pm |
|---|
| 423 | Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs | Jul 21, 8:10 pm |
|---|
| 424 | Critical SharePoint RCE flaw exploited to steal machine keys | Jul 21, 8:10 pm |
|---|
| 425 | Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak | Jul 21, 7:10 pm |
|---|
| 426 | Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities | Jul 21, 5:10 pm |
|---|
| 427 | AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code | Jul 21, 5:10 pm |
|---|
| 428 | Critical wp2shell WordPress flaws exploited to install webshells | Jul 21, 5:10 pm |
|---|
| 429 | Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC | Jul 21, 3:10 pm |
|---|
| 430 | Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities | Jul 21, 2:10 pm |
|---|
| 431 | Captive Portal Detection, (Tue, Jul 21st) | Jul 21, 2:10 pm |
|---|
| 432 | Closing the Identity Gaps in Critical Infrastructure Security | Jul 21, 2:10 pm |
|---|
| 433 | Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access | Jul 21, 2:10 pm |
|---|
| 434 | New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit | Jul 21, 1:10 pm |
|---|
| 435 | N-day is Becoming N-Hour. Patching Faster Won't Save You. | Jul 21, 1:10 pm |
|---|
| 436 | Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs | Jul 21, 1:10 pm |
|---|
| 437 | US seizes over 1,000 websites in FIFA World Cup piracy crackdown | Jul 21, 12:10 pm |
|---|
| 438 | Critical Palo Alto VPN bug now exploited by Qilin ransomware gang | Jul 21, 11:10 am |
|---|
| 439 | WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning | Jul 21, 9:10 am |
|---|
| 440 | Microsoft shares manual fix for WSUS sync delays and timeouts | Jul 21, 9:10 am |
|---|
| 441 | Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution | Jul 21, 8:10 am |
|---|
| 442 | New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack | Jul 21, 8:10 am |
|---|
| 443 | Windows LegacyHive zero-day flaw gets free, unofficial patches | Jul 21, 8:10 am |
|---|
| 444 | ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st) | Jul 21, 2:10 am |
|---|
| 445 | Hackers steal $23.7 million in crypto from Ostium in off-chain attack | Jul 20, 11:10 pm |
|---|
| 446 | SonicWall SMA1000 flaws exploited as zero-days to push custom malware | Jul 20, 11:10 pm |
|---|
| 447 | Estée Lauder discloses data breach via Oracle E-Business flaw | Jul 20, 11:10 pm |
|---|
| 448 | Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes | Jul 20, 10:10 pm |
|---|
| 449 | JadePuffer agentic attacks now target AI model data with ransomware | Jul 20, 9:10 pm |
|---|
| 450 | FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware | Jul 20, 8:10 pm |
|---|
| 451 | WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th) | Jul 20, 7:10 pm |
|---|
| 452 | Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign | Jul 20, 6:10 pm |
|---|
| 453 | New HollowGraph malware uses Microsoft Graph for stealthy C2 comms | Jul 20, 6:10 pm |
|---|
| 454 | HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 | Jul 20, 3:10 pm |
|---|
| 455 | ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More | Jul 20, 2:10 pm |
|---|
| 456 | An AI SOC Evaluation Guide for Security Leaders | Jul 20, 2:10 pm |
|---|
| 457 | Mythos Didn't Break Your Security Program. Your Exposure Window Could. | Jul 20, 1:10 pm |
|---|
| 458 | Hugging Face warns an autonomous AI agent hacked its network | Jul 20, 1:10 pm |
|---|
| 459 | Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine | Jul 20, 1:10 pm |
|---|
| 460 | Hugging Face discloses breach linked to autonomous AI agent | Jul 20, 12:10 pm |
|---|
| 461 | Microsoft confirms Windows Server Update Services sync delays | Jul 20, 11:10 am |
|---|
| 462 | Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs | Jul 20, 10:10 am |
|---|
| 463 | New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction | Jul 20, 10:10 am |
|---|
| 464 | Critical ServiceNow code execution flaw now exploited in attacks | Jul 20, 10:10 am |
|---|
| 465 | Windows KB5121767 OOB update fixes shutdowns on some Dell PCs | Jul 20, 10:10 am |
|---|
| 466 | SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines | Jul 20, 6:10 am |
|---|
| 467 | World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent | Jul 20, 6:10 am |
|---|
| 468 | ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th) | Jul 20, 2:10 am |
|---|
| 469 | Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution | Jul 19, 10:10 pm |
|---|
| 470 | SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access | Jul 19, 3:10 pm |
|---|
| 471 | UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware | Jul 19, 3:10 pm |
|---|
| 472 | Hackers abuse ViPNet software to target Russian govt agencies | Jul 19, 3:10 pm |
|---|
| 473 | Scans for Hikvision Intelligent Security API, (Sun, Jul 19th) | Jul 19, 3:10 pm |
|---|
| 474 | Update now: 7-Zip fixes RCE flaw exploitable with malicious archives | Jul 18, 8:10 pm |
|---|
| 475 | WordPress Core "wp2shell" RCE flaws get public exploits, patch now | Jul 18, 6:10 pm |
|---|
| 476 | Microsoft warns of surge in ACR Stealer attacks on customers | Jul 18, 3:10 pm |
|---|
| 477 | The Future of Age Verification: Your Face Never Leaves Your Device | Jul 18, 2:10 pm |
|---|
| 478 | Abbott probes two cyber incidents amid extortion claims | Jul 18, 12:10 am |
|---|
| 479 | New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code | Jul 17, 10:10 pm |
|---|
| 480 | OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests | Jul 17, 9:10 pm |
|---|
| 481 | Abbott Laboratories probes two cyber incidents amid extortion claims | Jul 17, 9:10 pm |
|---|
| 482 | Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT | Jul 17, 8:10 pm |
|---|
| 483 | GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft | Jul 17, 6:10 pm |
|---|
| 484 | New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens | Jul 17, 6:10 pm |
|---|
| 485 | HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload | Jul 17, 6:10 pm |
|---|
| 486 | Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images | Jul 17, 4:10 pm |
|---|
| 487 | Ernst & Young discloses data breach after support system hack | Jul 17, 3:10 pm |
|---|
| 488 | Inside the Search for "Clean" Residential Proxies for Carding | Jul 17, 2:10 pm |
|---|
| 489 | Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man | Jul 17, 12:10 pm |
|---|
| 490 | The Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace? | Jul 17, 12:10 pm |
|---|
| 491 | E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants | Jul 17, 12:10 pm |
|---|
| 492 | New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage | Jul 17, 11:10 am |
|---|
| 493 | ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files | Jul 17, 11:10 am |
|---|
| 494 | New Windows LegacyHive zero-day gives hackers admin privileges | Jul 17, 11:10 am |
|---|
| 495 | Windows Server 2022 reach end of mainstream support in 90 days | Jul 17, 10:10 am |
|---|
| 496 | US charges two over laundering $43 million from investment fraud | Jul 17, 9:10 am |
|---|
| 497 | CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV | Jul 17, 8:10 am |
|---|
| 498 | CISA urges immediate action on actively exploited Fortinet flaws | Jul 17, 7:10 am |
|---|
| 499 | ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th) | Jul 17, 2:10 am |
|---|
| 500 | New ClickLock macOS malware traps users into revealing login password | Jul 16, 10:10 pm |
|---|
