| 1 | Coca-Cola says Fairlife ransomware attack halts US dairy production | Jul 16, 9:10 pm |
|---|
| 2 | Claude Chrome extension flaw lets malicious extensions trigger AI actions | Jul 16, 8:10 pm |
|---|
| 3 | Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack | Jul 16, 7:10 pm |
|---|
| 4 | New OkoBot framework deploys 20 payloads to steal data, crypto | Jul 16, 7:10 pm |
|---|
| 5 | ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories | Jul 16, 4:10 pm |
|---|
| 6 | n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer | Jul 16, 3:10 pm |
|---|
| 7 | New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password | Jul 16, 2:10 pm |
|---|
| 8 | New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands | Jul 16, 2:10 pm |
|---|
| 9 | 23andMe to pay $18 million in new genetics data breach settlement | Jul 16, 2:10 pm |
|---|
| 10 | AI Agents Broke the Security Playbook. Here's What Replaces It. | Jul 16, 2:10 pm |
|---|
| 11 | Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor | Jul 16, 1:10 pm |
|---|
| 12 | New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands | Jul 16, 1:10 pm |
|---|
| 13 | 20+ Hijacked Government Websites Became
an Attack Channel | Jul 16, 1:10 pm |
|---|
| 14 | Scattered Spider members behind TfL hack get five years in prison | Jul 16, 1:10 pm |
|---|
| 15 | Windows 11 24H2 Home and Pro reach end of support in 90 days | Jul 16, 12:10 pm |
|---|
| 16 | Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide | Jul 16, 11:10 am |
|---|
| 17 | AI Can Find Bugs, But Human Knowledge Still Proves Them | Jul 16, 11:10 am |
|---|
| 18 | Russian hackers trojanize WebEx, Zoom apps to push Starland malware | Jul 16, 11:10 am |
|---|
| 19 | CISA orders feds to patch actively exploited Oracle flaw by Saturday | Jul 16, 11:10 am |
|---|
| 20 | New Spirals ransomware encrypts victim network in under 24 hours | Jul 16, 10:10 am |
|---|
| 21 | Zoom Patches Critical Windows Flaw That Could Enable Account Takeover | Jul 16, 9:10 am |
|---|
| 22 | OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol | Jul 16, 9:10 am |
|---|
| 23 | ISC Stormcast For Thursday, July 16th, 2026 https://isc.sans.edu/podcastdetail/10010, (Thu, Jul 16th) | Jul 16, 3:10 am |
|---|
| 24 | Dutch police bust investment fraud ring stealing over €100 million | Jul 15, 10:10 pm |
|---|
| 25 | Zoom warns of critical account takeover vulnerability | Jul 15, 9:10 pm |
|---|
| 26 | Google Gemini CLI abused as a hacking agent, malware botnet operator | Jul 15, 7:10 pm |
|---|
| 27 | TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development | Jul 15, 7:10 pm |
|---|
| 28 | AsyncAPI npm packages infected with credential-stealing malware | Jul 15, 6:10 pm |
|---|
| 29 | OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps | Jul 15, 5:10 pm |
|---|
| 30 | AsyncAPI npm packages infected with credential-stealing malware | Jul 15, 4:10 pm |
|---|
| 31 | Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws | Jul 15, 2:10 pm |
|---|
| 32 | We built a vulnerability vending machine: AI tokens in, zero-days out | Jul 15, 2:10 pm |
|---|
| 33 | New Webinar: Closing the Approval Gap in AI-Era Ad Tech | Jul 15, 1:10 pm |
|---|
| 34 | Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday | Jul 15, 1:10 pm |
|---|
| 35 | SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough. | Jul 15, 1:10 pm |
|---|
| 36 | Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware | Jul 15, 11:11 am |
|---|
| 37 | CISA warns admins to patch actively exploited SharePoint flaws | Jul 15, 11:11 am |
|---|
| 38 | Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution | Jul 15, 11:10 am |
|---|
| 39 | Microsoft: Some Dell PCs shut down after recent Windows updates | Jul 15, 9:10 am |
|---|
| 40 | US charges alleged operators of Russian bulletproof hosting service | Jul 15, 8:10 am |
|---|
| 41 | Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands | Jul 15, 7:10 am |
|---|
| 42 | Recent DShield SIEM Update, (Tue, Jul 14th) | Jul 15, 2:10 am |
|---|
| 43 | ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th) | Jul 15, 2:10 am |
|---|
| 44 | SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now | Jul 14, 10:10 pm |
|---|
| 45 | Spanish Police take down €140 million cyber fraud ring, arrest four | Jul 14, 9:10 pm |
|---|
| 46 | Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack | Jul 14, 9:10 pm |
|---|
| 47 | Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads | Jul 14, 8:10 pm |
|---|
| 48 | SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data | Jul 14, 8:10 pm |
|---|
| 49 | Microsoft Patch Tuesday July 2026 - The AI Acopolypse is Here , (Tue, Jul 14th) | Jul 14, 8:10 pm |
|---|
| 50 | Nearly 300 GitHub repos pose as legit software to push malware | Jul 14, 8:10 pm |
|---|
| 51 | Microsoft Patches a Record 570 Security Flaws | Jul 14, 8:10 pm |
|---|
| 52 | Microsoft releases Windows 10 KB5099539 extended security update | Jul 14, 7:10 pm |
|---|
| 53 | LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts | Jul 14, 6:10 pm |
|---|
| 54 | Windows 11 KB5101650 & KB5099414 cumulative updates released | Jul 14, 6:10 pm |
|---|
| 55 | Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days | Jul 14, 6:10 pm |
|---|
| 56 | LastPass, Bitwarden users targeted with fake security alerts | Jul 14, 4:10 pm |
|---|
| 57 | Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown | Jul 14, 4:10 pm |
|---|
| 58 | RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata | Jul 14, 3:10 pm |
|---|
| 59 | OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials | Jul 14, 2:10 pm |
|---|
| 60 | How Pentera Turns AI Security Workflows into Validation Engines | Jul 14, 2:10 pm |
|---|
| 61 | Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks | Jul 14, 2:10 pm |
|---|
| 62 | 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot | Jul 14, 2:10 pm |
|---|
| 63 | You Don't Have to Run an Exploit to Know If You're Vulnerable | Jul 14, 2:10 pm |
|---|
| 64 | New phishing kits target Microsoft 365 accounts, evade MFA | Jul 14, 1:10 pm |
|---|
| 65 | Microsoft Entra ID gets passkeys default authentication starting September | Jul 14, 1:10 pm |
|---|
| 66 | SAP warns of critical flaws in NetWeaver and Commerce Cloud | Jul 14, 12:10 pm |
|---|
| 67 | Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read | Jul 14, 11:10 am |
|---|
| 68 | Microsoft starts testing cleaner Windows Search without ads | Jul 14, 11:10 am |
|---|
| 69 | Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads | Jul 14, 10:10 am |
|---|
| 70 | US sanctions VPN, malware providers for enabling ransomware attacks | Jul 14, 10:10 am |
|---|
| 71 | Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity | Jul 14, 9:10 am |
|---|
| 72 | 148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet | Jul 14, 9:10 am |
|---|
| 73 | U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support | Jul 14, 9:10 am |
|---|
| 74 | Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths | Jul 14, 7:10 am |
|---|
| 75 | ISC Stormcast For Tuesday, July 14th, 2026 https://isc.sans.edu/podcastdetail/10006, (Tue, Jul 14th) | Jul 14, 3:10 am |
|---|
| 76 | Japan's largest taxi operator shuts systems after cyberattack | Jul 13, 9:10 pm |
|---|
| 77 | Hackers backdoor Jscrambler npm package with infostealer malware | Jul 13, 8:10 pm |
|---|
| 78 | New CrashStealer malware poses as Apple crash reporting tool | Jul 13, 7:10 pm |
|---|
| 79 | Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found | Jul 13, 6:10 pm |
|---|
| 80 | CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks | Jul 13, 6:10 pm |
|---|
| 81 | New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email | Jul 13, 4:10 pm |
|---|
| 82 | Lessons Learned from CISA’s Recent GitHub Leak | Jul 13, 4:10 pm |
|---|
| 83 | ⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More | Jul 13, 4:10 pm |
|---|
| 84 | CISA warns of actively exploited RCE flaws in Joomla extensions | Jul 13, 4:10 pm |
|---|
| 85 | Lidl discloses online shop breach after service provider hack | Jul 13, 3:10 pm |
|---|
| 86 | Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft | Jul 13, 2:10 pm |
|---|
| 87 | UK charges suspects linked to Russian Coms call spoofing platform | Jul 13, 2:10 pm |
|---|
| 88 | Breach at the Beach: Play the Ultimate Entra ID CTF | Jul 13, 2:10 pm |
|---|
| 89 | Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory | Jul 13, 1:10 pm |
|---|
| 90 | Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots | Jul 13, 1:10 pm |
|---|
| 91 | Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling | Jul 13, 1:10 pm |
|---|
| 92 | EU sanctions Russian GRU military hackers over cyberattacks | Jul 13, 12:10 pm |
|---|
| 93 | US and allies warn of Russian critical infrastructure attacks | Jul 13, 10:10 am |
|---|
| 94 | Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365 | Jul 13, 9:10 am |
|---|
| 95 | iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days | Jul 13, 7:10 am |
|---|
| 96 | Someone Is Scanning for Your MCP Servers and AI Assistant Credentials, (Mon, Jul 13th) | Jul 13, 5:10 am |
|---|
| 97 | ISC Stormcast For Monday, July 13th, 2026 https://isc.sans.edu/podcastdetail/10004, (Mon, Jul 13th) | Jul 13, 2:10 am |
|---|
| 98 | OpenAI temporarily relaxes GPT-5.6 Sol usage limits | Jul 13, 1:10 am |
|---|
| 99 | Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time | Jul 12, 8:10 pm |
|---|
| 100 | RedHook Android malware now uses Wireless ADB for shell access | Jul 12, 3:10 pm |
|---|
| 101 | Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns | Jul 11, 7:10 pm |
|---|
| 102 | Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install | Jul 11, 7:10 pm |
|---|
| 103 | Australia warns of global campaign targeting vulnerable CMS platforms | Jul 11, 3:10 pm |
|---|
| 104 | Wireshark 4.6.7 Released, (Sat, Jul 11th) | Jul 11, 10:10 am |
|---|
| 105 | 'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets | Jul 11, 9:10 am |
|---|
| 106 | Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions | Jul 11, 8:10 am |
|---|
| 107 | New U-Boot flaws could enable stealthy firmware attacks | Jul 10, 10:10 pm |
|---|
| 108 | URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat | Jul 10, 7:10 pm |
|---|
| 109 | Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot | Jul 10, 6:10 pm |
|---|
| 110 | Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages | Jul 10, 6:10 pm |
|---|
| 111 | Ryuk ransomware member pleads guilty in the US, faces 15 years in prison | Jul 10, 6:10 pm |
|---|
| 112 | Progress urges ShareFile admins to shut down servers over “credible” threat | Jul 10, 5:10 pm |
|---|
| 113 | Police suspects Dutch hackers were involved in Odido breach | Jul 10, 5:10 pm |
|---|
| 114 | Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched | Jul 10, 4:10 pm |
|---|
| 115 | Money launderer accused of stealing seized crypto while in prison | Jul 10, 4:10 pm |
|---|
| 116 | Hackers exploit critical auth bypass in Gitea Docker image | Jul 10, 4:10 pm |
|---|
| 117 | Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws | Jul 10, 3:10 pm |
|---|
| 118 | Attackers Exploit 'Ill Bloom' Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets | Jul 10, 2:10 pm |
|---|
| 119 | New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic | Jul 10, 2:10 pm |
|---|
| 120 | The Replicant in Your Directory: AI Agents and the Identity Security Gap | Jul 10, 2:10 pm |
|---|
| 121 | Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access | Jul 10, 12:10 pm |
|---|
| 122 | Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking | Jul 10, 12:10 pm |
|---|
| 123 | Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites | Jul 10, 12:10 pm |
|---|
| 124 | From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale | Jul 10, 12:10 pm |
|---|
| 125 | Zimbra urges customers to patch critical web client XSS flaw | Jul 10, 12:10 pm |
|---|
| 126 | Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers | Jul 10, 12:10 pm |
|---|
| 127 | Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks | Jul 10, 10:10 am |
|---|
| 128 | Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets | Jul 10, 10:10 am |
|---|
| 129 | "Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th) | Jul 10, 10:10 am |
|---|
| 130 | Former ransomware negotiator gets 4 years for BlackCat attacks | Jul 10, 9:10 am |
|---|
| 131 | ISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002, (Fri, Jul 10th) | Jul 10, 2:10 am |
|---|
| 132 | OpenMandriva Linux says contributor tried to sabotage the project | Jul 9, 11:10 pm |
|---|
| 133 | Injective SDK on npm infected with cryptocurrency wallet stealer | Jul 9, 8:10 pm |
|---|
| 134 | New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware | Jul 9, 7:10 pm |
|---|
| 135 | Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs | Jul 9, 7:10 pm |
|---|
| 136 | ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories | Jul 9, 5:10 pm |
|---|
| 137 | npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk | Jul 9, 5:10 pm |
|---|
| 138 | Microsoft expects more Windows security updates from AI-discovered flaws | Jul 9, 5:10 pm |
|---|
| 139 | New Helix vishing group emerges in SharePoint data theft attacks | Jul 9, 5:10 pm |
|---|
| 140 | The Hidden Security Risks of Reduced Summer IT Coverage | Jul 9, 3:10 pm |
|---|
| 141 | New Forg365 phishing platform uses AI to target Microsoft 365 accounts | Jul 9, 3:10 pm |
|---|
| 142 | AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up | Jul 9, 1:10 pm |
|---|
| 143 | GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses | Jul 9, 12:10 pm |
|---|
| 144 | Summer of Clearinghouses | Jul 9, 12:10 pm |
|---|
| 145 | Microsoft to retire the OWA Light client in Exchange Server | Jul 9, 11:10 am |
|---|
| 146 | Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges | Jul 9, 10:10 am |
|---|
| 147 | Police arrests 5,800 suspects in global anti-fraud crackdown | Jul 9, 10:10 am |
|---|
| 148 | Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images | Jul 9, 8:10 am |
|---|
| 149 | AssuranceAmerica data breach exposes records of 6.9 million drivers | Jul 9, 8:10 am |
|---|
| 150 | Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It | Jul 9, 6:10 am |
|---|
| 151 | Microsoft patches RoguePlanet Defender zero-day vulnerability | Jul 9, 6:10 am |
|---|
| 152 | Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes | Jul 9, 5:10 am |
|---|
| 153 | GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents | Jul 9, 5:10 am |
|---|
| 154 | _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th) | Jul 9, 2:10 am |
|---|
| 155 | ISC Stormcast For Thursday, July 9th, 2026 https://isc.sans.edu/podcastdetail/10000, (Thu, Jul 9th) | Jul 9, 2:10 am |
|---|
| 156 | Mount Royal University confirms breach as hackers claim attack | Jul 8, 10:10 pm |
|---|
| 157 | Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials | Jul 8, 8:10 pm |
|---|
| 158 | Hackers exploit Roundcube flaw to spy on academic researchers | Jul 8, 7:10 pm |
|---|
| 159 | AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers | Jul 8, 6:10 pm |
|---|
| 160 | New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware | Jul 8, 5:10 pm |
|---|
| 161 | Entra passkey enrollment vishing targets Microsoft 365 users | Jul 8, 5:10 pm |
|---|
| 162 | Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS | Jul 8, 3:10 pm |
|---|
| 163 | SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users | Jul 8, 2:10 pm |
|---|
| 164 | New Ghost Phishing Wave Is Breaking Traditional Email Security | Jul 8, 2:10 pm |
|---|
| 165 | 3 Ways AI Powers Service Desk Attacks and How to Prevent Them | Jul 8, 2:10 pm |
|---|
| 166 | Felons, Fraudsters Flog Offensive Cybersecurity Startup | Jul 8, 1:10 pm |
|---|
| 167 | GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code | Jul 8, 12:10 pm |
|---|
| 168 | Telco giant KDDI says data breach affects over 12 million people | Jul 8, 12:10 pm |
|---|
| 169 | The Verification Step Is the New ATO Battleground in 2026 | Jul 8, 12:10 pm |
|---|
| 170 | GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures | Jul 8, 12:10 pm |
|---|
| 171 | DuckDuckGo browser now blocks YouTube video ads | Jul 8, 12:10 pm |
|---|
| 172 | China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware | Jul 8, 10:10 am |
|---|
| 173 | CISA orders feds to prioritize patching Langflow auth bypass flaw | Jul 8, 10:10 am |
|---|
| 174 | My Stack Simulator, (Wed, Jul 8th) | Jul 8, 9:10 am |
|---|
| 175 | Ubiquiti warns of new max severity UniFi OS vulnerability | Jul 8, 9:10 am |
|---|
| 176 | CISA orders feds to patch max severity ColdFusion flaw by Friday | Jul 8, 8:10 am |
|---|
| 177 | CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV | Jul 8, 7:10 am |
|---|
| 178 | 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros | Jul 8, 7:10 am |
|---|
| 179 | ISC Stormcast For Wednesday, July 8th, 2026 https://isc.sans.edu/podcastdetail/9998, (Wed, Jul 8th) | Jul 8, 2:10 am |
|---|
| 180 | Accenture confirms breach after hacker offers stolen data for sale | Jul 7, 10:10 pm |
|---|
| 181 | More Odd DNS Records: NIMLOC, (Tue, Jul 7th) | Jul 7, 7:10 pm |
|---|
| 182 | Chinese hackers develop LONGLEASH malware to expand ORB network | Jul 7, 7:10 pm |
|---|
| 183 | Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots | Jul 7, 6:10 pm |
|---|
| 184 | RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service | Jul 7, 6:10 pm |
|---|
| 185 | Hidden backdoor in Tenda router firmware grants admin access | Jul 7, 6:10 pm |
|---|
| 186 | DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts | Jul 7, 5:10 pm |
|---|
| 187 | Spain arrests suspected member of pro-Russian hacktivist groups | Jul 7, 4:10 pm |
|---|
| 188 | Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data | Jul 7, 3:10 pm |
|---|
| 189 | Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants | Jul 7, 2:10 pm |
|---|
| 190 | Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker | Jul 7, 2:10 pm |
|---|
| 191 | The GitHub Actions Attack Pattern Your CI Security Scanners Miss | Jul 7, 2:10 pm |
|---|
| 192 | Webinar tomorrow: Why modern email attacks require a new approach to defense | Jul 7, 1:10 pm |
|---|
| 193 | What Changes When Your Software Supply Chain Includes AI Writing Your Code? | Jul 7, 12:10 pm |
|---|
| 194 | New Januscape Linux flaw allows VM escape on Intel, AMD devices | Jul 7, 12:10 pm |
|---|
| 195 | Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities | Jul 7, 10:10 am |
|---|
| 196 | Microsoft to enable Windows settings backup by default for orgs | Jul 7, 10:10 am |
|---|
| 197 | BeyondTrust warns of critical flaws in remote access software | Jul 7, 9:10 am |
|---|
| 198 | CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware | Jul 7, 8:10 am |
|---|
| 199 | Microsoft testing new Cloud Rebuild Windows 11 recovery feature | Jul 7, 8:10 am |
|---|
| 200 | BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA | Jul 7, 7:10 am |
|---|
| 201 | ISC Stormcast For Tuesday, July 7th, 2026 https://isc.sans.edu/podcastdetail/9996, (Tue, Jul 7th) | Jul 7, 2:10 am |
|---|
| 202 | Fake IT support calls on Microsoft Teams push EtherRAT malware | Jul 6, 9:10 pm |
|---|
| 203 | Phishing poses as big-brand job interview to steal Google accounts | Jul 6, 9:10 pm |
|---|
| 204 | Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations | Jul 6, 8:10 pm |
|---|
| 205 | 16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems | Jul 6, 7:10 pm |
|---|
| 206 | Vietnam arrests suspects behind HiAnime anime piracy service | Jul 6, 7:10 pm |
|---|
| 207 | Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure | Jul 6, 6:10 pm |
|---|
| 208 | ⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More | Jul 6, 2:10 pm |
|---|
| 209 | Max severity Adobe ColdFusion flaw now exploited in attacks | Jul 6, 2:10 pm |
|---|
| 210 | RCS and DNS: The NAPTR Record, (Mon, Jul 6th) | Jul 6, 2:10 pm |
|---|
| 211 | Software Is Now Written at the Speed of Thought. Security Isn't. | Jul 6, 2:10 pm |
|---|
| 212 | Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT | Jul 6, 1:10 pm |
|---|
| 213 | How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions | Jul 6, 1:10 pm |
|---|
| 214 | ISC Stormcast For Monday, July 6th, 2026 https://isc.sans.edu/podcastdetail/9994, (Mon, Jul 6th) | Jul 6, 12:10 pm |
|---|
| 215 | New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS | Jul 6, 9:10 am |
|---|
| 216 | New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions | Jul 6, 9:10 am |
|---|
| 217 | Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages | Jul 6, 8:10 am |
|---|
| 218 | SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing | Jul 6, 7:10 am |
|---|
| 219 | Flipper Zero firmware development continues with community help | Jul 5, 3:10 pm |
|---|
| 220 | JadePuffer ransomware used AI agent to automate entire attack | Jul 4, 3:10 pm |
|---|
| 221 | U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case | Jul 4, 2:10 pm |
|---|
| 222 | North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign | Jul 4, 12:10 pm |
|---|
| 223 | Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices | Jul 3, 10:10 pm |
|---|
| 224 | New Avalon Malware Framework Packs CrownX Ransomware Capabilities | Jul 3, 8:11 pm |
|---|
| 225 | New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android | Jul 3, 8:10 pm |
|---|
| 226 | NetNut proxy network disrupted, 2 million infected devices cut off | Jul 3, 6:10 pm |
|---|
| 227 | North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets | Jul 3, 5:10 pm |
|---|
| 228 | ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit | Jul 3, 3:10 pm |
|---|
| 229 | Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer | Jul 3, 2:10 pm |
|---|
| 230 | European Parliament Member Investigating Spyware Was Hacked With Pegasus | Jul 3, 11:10 am |
|---|
| 231 | PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords | Jul 3, 9:10 am |
|---|
| 232 | Claude Fable 5 isn’t permanently leaving subscriptions, Anthropic says | Jul 3, 2:10 am |
|---|
| 233 | Claude Fable relaunch disappoints users with nerfed performance | Jul 3, 1:10 am |
|---|
| 234 | Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials | Jul 2, 8:10 pm |
|---|
| 235 | Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices | Jul 2, 8:10 pm |
|---|
| 236 | FBI Seizes NetNut Proxy Platform, Popa Botnet | Jul 2, 8:10 pm |
|---|
| 237 | Google loses final appeal to overturn €4.1 billion EU fine | Jul 2, 4:10 pm |
|---|
| 238 | ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories | Jul 2, 4:10 pm |
|---|
| 239 | ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API | Jul 2, 2:10 pm |
|---|
| 240 | ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds | Jul 2, 2:10 pm |
|---|
| 241 | Identity Lifecycle Management Wasn't Built for AI Agents | Jul 2, 1:10 pm |
|---|
| 242 | Microsoft fixes bug that removed Copilot buttons in Outlook | Jul 2, 1:10 pm |
|---|
| 243 | Cisco finally confirms attackers exploiting Unified CM flaw | Jul 2, 12:10 pm |
|---|
| 244 | Opera rolls out Paste Protect feature to fight ClickFix attacks | Jul 2, 11:10 am |
|---|
| 245 | CISA: Microsoft SharePoint RCE flaw now actively exploited | Jul 2, 11:10 am |
|---|
| 246 | FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations | Jul 2, 10:10 am |
|---|
| 247 | AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack | Jul 2, 10:10 am |
|---|
| 248 | Alleged Scattered Spider hacker extradited to the United States | Jul 2, 9:10 am |
|---|
| 249 | New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos | Jul 2, 8:10 am |
|---|
| 250 | SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation | Jul 2, 7:10 am |
|---|
| 251 | Medtronic notifies customers impacted by ShinyHunters data breach | Jul 2, 5:10 am |
|---|
| 252 | ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd) | Jul 2, 2:10 am |
|---|
| 253 | FortiBleed credential-theft campaign linked to Lynx ransomware | Jul 1, 10:10 pm |
|---|
| 254 | New ChocoPoC malware targets researchers via trojanized PoC exploits | Jul 1, 9:10 pm |
|---|
| 255 | Kubota says hackers had month-long access to network systems | Jul 1, 9:10 pm |
|---|
| 256 | 19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges | Jul 1, 8:10 pm |
|---|
| 257 | Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters | Jul 1, 8:10 pm |
|---|
| 258 | ChocoPoc malware delivered via trojanized exploits on GitHub | Jul 1, 8:10 pm |
|---|
| 259 | VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer | Jul 1, 7:10 pm |
|---|
| 260 | SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT | Jul 1, 7:10 pm |
|---|
| 261 | DHS confirms hackers breached HSIN info-sharing platform | Jul 1, 6:10 pm |
|---|
| 262 | Hackers target Microsoft 365 accounts with 81 million login attempts | Jul 1, 5:10 pm |
|---|
| 263 | Webinar: Why traditional email security is no longer enough | Jul 1, 5:10 pm |
|---|
| 264 | Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands | Jul 1, 4:10 pm |
|---|
| 265 | Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic | Jul 1, 4:10 pm |
|---|
| 266 | Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures | Jul 1, 4:10 pm |
|---|
| 267 | AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android | Jul 1, 3:10 pm |
|---|
| 268 | Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts | Jul 1, 3:10 pm |
|---|
| 269 | Turning Indicators into Intelligence in OpenCTI with Criminal IP | Jul 1, 3:10 pm |
|---|
| 270 | 2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience | Jul 1, 1:10 pm |
|---|
| 271 | Over 900 Oracle E-Business instances exposed to ongoing attacks | Jul 1, 1:10 pm |
|---|
| 272 | Microsoft Accelerates Post-Quantum Cryptography Shift to 2029 | Jul 1, 12:10 pm |
|---|
| 273 | Microsoft fixes GIF functionality in the Windows Emoji Panel | Jul 1, 11:10 am |
|---|
| 274 | Amazon fined $2.25M for withholding evidence from fraud victims | Jul 1, 10:10 am |
|---|
| 275 | Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls | Jul 1, 8:10 am |
|---|
| 276 | Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware | Jul 1, 8:10 am |
|---|
| 277 | Adobe patches seven max severity ColdFusion, Campaign flaws | Jul 1, 8:10 am |
|---|
| 278 | Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st) | Jul 1, 6:10 am |
|---|
| 279 | Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery | Jul 1, 6:10 am |
|---|
| 280 | Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts | Jul 1, 6:10 am |
|---|
| 281 | Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service | Jul 1, 5:10 am |
|---|
| 282 | ISC Stormcast For Wednesday, July 1st, 2026 https://isc.sans.edu/podcastdetail/9990, (Wed, Jul 1st) | Jul 1, 2:10 am |
|---|
| 283 | Anthropic to restore Claude Fable access on Wednesday | Jul 1, 1:10 am |
|---|
| 284 | Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price | Jul 1, 12:10 am |
|---|
| 285 | Microsoft accelerates quantum-safe roadmap as risks grow | Jun 30, 10:10 pm |
|---|
| 286 | New BioShocking attack manipulates AI browser into data theft | Jun 30, 10:10 pm |
|---|
| 287 | Malicious PyPI packages give hackers control of Telegram bot servers | Jun 30, 9:10 pm |
|---|
| 288 | RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS | Jun 30, 7:10 pm |
|---|
| 289 | Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data | Jun 30, 7:10 pm |
|---|
| 290 | Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints | Jun 30, 6:10 pm |
|---|
| 291 | Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses | Jun 30, 4:10 pm |
|---|
| 292 | Fake Perplexity extension on Chrome Web Store tracked searches | Jun 30, 4:10 pm |
|---|
| 293 | 282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study | Jun 30, 3:10 pm |
|---|
| 294 | GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks | Jun 30, 3:10 pm |
|---|
| 295 | Lessons from the Underground: How to Combat Business Email Compromise | Jun 30, 2:10 pm |
|---|
| 296 | What the Numbers Say About FIFA 2026 Cyber Risk | Jun 30, 1:10 pm |
|---|
| 297 | Microsoft adds smarter bot protection to Teams meetings | Jun 30, 12:10 pm |
|---|
| 298 | Insurance giant Aflac discloses data breach after subsidiary hack | Jun 30, 12:10 pm |
|---|
| 299 | Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer | Jun 30, 12:10 pm |
|---|
| 300 | AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks | Jun 30, 11:10 am |
|---|
| 301 | Mircosoft adds smarter bot protection to Teams meetings | Jun 30, 11:10 am |
|---|
| 302 | June 2026 Apple Updates, (Tue, Jun 30th) | Jun 30, 10:10 am |
|---|
| 303 | Blackfield ransomware asks Nidec Corporation for $2 million ransom | Jun 30, 10:10 am |
|---|
| 304 | Kali Linux 2026.2 released with 9 new tools, NetHunter updates | Jun 30, 10:10 am |
|---|
| 305 | Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth | Jun 30, 9:10 am |
|---|
| 306 | New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials | Jun 30, 9:10 am |
|---|
| 307 | CISA: Windows BlueHammer flaw now exploited by ransomware gangs | Jun 30, 9:10 am |
|---|
| 308 | Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs | Jun 30, 8:10 am |
|---|
| 309 | Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild | Jun 30, 6:10 am |
|---|
| 310 | ISC Stormcast For Tuesday, June 30th, 2026 https://isc.sans.edu/podcastdetail/9988, (Tue, Jun 30th) | Jun 30, 3:10 am |
|---|
| 311 | NAIC says public data stolen in ShinyHunters' PeopleSoft breach | Jun 29, 9:10 pm |
|---|
| 312 | Nissan discloses employee data breach linked to Oracle zero-day attacks | Jun 29, 9:10 pm |
|---|
| 313 | Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input | Jun 29, 8:10 pm |
|---|
| 314 | Microsoft extends Windows Server 2022 hotpatching until October 2027 | Jun 29, 6:10 pm |
|---|
| 315 | WhatsApp rolls out usernames to help users hide their phone number | Jun 29, 6:10 pm |
|---|
| 316 | Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks | Jun 29, 5:10 pm |
|---|
| 317 | WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private | Jun 29, 5:10 pm |
|---|
| 318 | ⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More | Jun 29, 3:10 pm |
|---|
| 319 | U.S. offers $10 million for hackers targeting WhatsApp, Signal users | Jun 29, 3:10 pm |
|---|
| 320 | 236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers | Jun 29, 2:10 pm |
|---|
| 321 | Hackers now exploit critical Oracle E-Business flaw in attacks | Jun 29, 2:10 pm |
|---|
| 322 | Critical SimpleHelp flaw exploited to deploy new stealer malware | Jun 29, 2:10 pm |
|---|
| 323 | Agentic AI Has an Identity Problem and Attackers Know It | Jun 29, 2:10 pm |
|---|
| 324 | Webinar: Why business email compromise attacks keep succeeding | Jun 29, 1:10 pm |
|---|
| 325 | US seizes hundreds of FIFA World Cup illegal streaming domains | Jun 29, 12:10 pm |
|---|
| 326 | Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse | Jun 29, 12:10 pm |
|---|
| 327 | Why Post-Quantum Cryptography Starts With Credentials | Jun 29, 12:10 pm |
|---|
| 328 | Adding some Automation to the favicon.ico method of Host Recon, (Mon, Jun 29th) | Jun 29, 12:10 pm |
|---|
| 329 | Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts | Jun 29, 10:10 am |
|---|
| 330 | Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw | Jun 29, 8:10 am |
|---|
| 331 | Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer | Jun 29, 7:10 am |
|---|
| 332 | ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th) | Jun 29, 2:10 am |
|---|
| 333 | Data breach exposes up to 14.2 million email logins at six ISPs | Jun 28, 3:10 pm |
|---|
| 334 | YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th) | Jun 28, 8:10 am |
|---|
| 335 | Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials | Jun 27, 6:10 pm |
|---|
| 336 | Clean GitHub repo tricks AI coding agents into running malware | Jun 27, 3:10 pm |
|---|
| 337 | OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards | Jun 27, 1:10 pm |
|---|
| 338 | FBI: Russian hackers now target Signal backup recovery keys | Jun 26, 10:10 pm |
|---|
| 339 | FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys | Jun 26, 8:10 pm |
|---|
| 340 | CISA sets urgent deadline to fix Cisco flaw exploited in attacks | Jun 26, 8:10 pm |
|---|
| 341 | New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks | Jun 26, 7:10 pm |
|---|
| 342 | Cybersecurity firms targeted by fraudulent OpenAI organization invites | Jun 26, 6:10 pm |
|---|
| 343 | Polymarket customers lose $3 million in supply-chain attack | Jun 26, 6:10 pm |
|---|
| 344 | Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign | Jun 26, 5:10 pm |
|---|
| 345 | Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs | Jun 26, 3:10 pm |
|---|
| 346 | Your First GRC Agent: A Red Teamer's Walkthrough | Jun 26, 2:10 pm |
|---|
| 347 | Guardian Agents: The Next Layer of Identity Governance | Jun 26, 1:10 pm |
|---|
| 348 | New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets | Jun 26, 1:10 pm |
|---|
| 349 | CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue | Jun 26, 1:10 pm |
|---|
| 350 | New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries | Jun 26, 1:10 pm |
|---|
| 351 | Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant | Jun 26, 11:10 am |
|---|
| 352 | Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack | Jun 26, 11:10 am |
|---|
| 353 | Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff | Jun 26, 9:10 am |
|---|
| 354 | Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks | Jun 26, 8:10 am |
|---|
| 355 | Poland busts SIM-swapping gang tied to millions in crypto theft | Jun 25, 11:10 pm |
|---|
| 356 | Anthropic is testing desktop-like Claude Cowork for mobile | Jun 25, 11:10 pm |
|---|
| 357 | Order-tracking app Shop abused to push callback phishing attacks | Jun 25, 8:10 pm |
|---|
| 358 | Microsoft quietly extends free Windows 10 ESU support to October 2027 | Jun 25, 7:10 pm |
|---|
| 359 | New macOS malware embeds fake errors to confuse AI analysis tools | Jun 25, 5:10 pm |
|---|
| 360 | PirloTV sports piracy network disrupted as 44 domains seized | Jun 25, 4:10 pm |
|---|
| 361 | Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability | Jun 25, 3:10 pm |
|---|
| 362 | Bluekit phishing kit adopts browser-in-the-middle for login theft | Jun 25, 3:10 pm |
|---|
| 363 | The Four Elevations of Effective Fraud Prevention | Jun 25, 2:10 pm |
|---|
| 364 | Webinar: Why account takeovers remain one of the hardest threats to stop | Jun 25, 1:10 pm |
|---|
| 365 | ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories | Jun 25, 1:10 pm |
|---|
| 366 | Surviving the Mythos Era: Richard Bejtlich on the Case for NDR | Jun 25, 12:10 pm |
|---|
| 367 | New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis | Jun 25, 11:10 am |
|---|
| 368 | New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns | Jun 25, 10:10 am |
|---|
| 369 | Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access | Jun 25, 6:10 am |
|---|
| 370 | What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary], (Wed, Jun 24th) | Jun 25, 1:10 am |
|---|
| 371 | Google releases new privacy controls for activity history, personalization | Jun 25, 12:10 am |
|---|
| 372 | Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access | Jun 24, 10:10 pm |
|---|
| 373 | DraftKings hacker 'Snoopy' sentenced to 18 months in prison | Jun 24, 10:10 pm |
|---|
| 374 | Malicious Edge extension abuses Native Messaging as bridge to malware | Jun 24, 9:10 pm |
|---|
| 375 | Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered | Jun 24, 6:10 pm |
|---|
| 376 | CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited | Jun 24, 6:10 pm |
|---|
| 377 | Amadey, StealC malware operations disrupted in Operation Endgame action | Jun 24, 3:10 pm |
|---|
| 378 | CISA warns of max severity Ubiquiti flaws exploited in attacks | Jun 24, 3:10 pm |
|---|
| 379 | Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks | Jun 24, 2:10 pm |
|---|
| 380 | Securing the service desk: Why social engineering attacks keep succeeding | Jun 24, 2:10 pm |
|---|
| 381 | Dawn of the Apex Agentic Adversary | Jun 24, 1:10 pm |
|---|
| 382 | Stealthy Mistic backdoor linked to ransomware access broker KongTuke | Jun 24, 11:10 am |
|---|
| 383 | DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering | Jun 24, 10:10 am |
|---|
| 384 | Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root | Jun 24, 8:10 am |
|---|
| 385 | Linux Process Name Masquerading, (Wed, Jun 24th) | Jun 24, 7:10 am |
|---|
| 386 | ISC Stormcast For Wednesday, June 24th, 2026 https://isc.sans.edu/podcastdetail/9984, (Wed, Jun 24th) | Jun 24, 2:10 am |
|---|
| 387 | Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks | Jun 23, 10:10 pm |
|---|
| 388 | Windows 11 KB5095093 update rolls out new Point-in-Time restore feature | Jun 23, 9:10 pm |
|---|
| 389 | Tata Electronics confirms cyberattack as hackers leak data | Jun 23, 9:10 pm |
|---|
| 390 | FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation | Jun 23, 8:10 pm |
|---|
| 391 | Healthtech firm Xolis suffers data breach impacting 1.4 million people | Jun 23, 8:10 pm |
|---|
| 392 | New macOS ClickFix attack silently mounts DMGs to push infostealer | Jun 23, 7:10 pm |
|---|
| 393 | Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration | Jun 23, 5:10 pm |
|---|
| 394 | Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents | Jun 23, 5:10 pm |
|---|
| 395 | Scattered Spider Hackers Plead Guilty on Day 1 of Trial | Jun 23, 5:10 pm |
|---|
| 396 | Scattered Spider members plead guilty to hacking Transport for London | Jun 23, 4:10 pm |
|---|
| 397 | GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns | Jun 23, 3:10 pm |
|---|
| 398 | LastPass confirms data breach in Klue supply chain attack | Jun 23, 2:10 pm |
|---|
| 399 | The Exploit Doesn't Exist. You Can Still Prove It Works Against You | Jun 23, 2:10 pm |
|---|
| 400 | Agentic AI: The Weapon That No Longer Needs a Warrior | Jun 23, 1:10 pm |
|---|
| 401 | Webinar: Why email security teams are drowning in alerts | Jun 23, 1:10 pm |
|---|
| 402 | Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT | Jun 23, 10:10 am |
|---|
| 403 | WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool | Jun 23, 7:10 am |
|---|
| 404 | OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws | Jun 23, 5:10 am |
|---|
| 405 | CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd) | Jun 23, 3:10 am |
|---|
| 406 | ISC Stormcast For Tuesday, June 23rd, 2026 https://isc.sans.edu/podcastdetail/9982, (Tue, Jun 23rd) | Jun 23, 2:10 am |
|---|
| 407 | WhatsApp phishing attack uses fake business docs to hack PCs | Jun 22, 11:10 pm |
|---|
| 408 | JaredFromSubway MEV bot hacked in $15 million crypto theft | Jun 22, 10:10 pm |
|---|
| 409 | FFmpeg fixes PixelSmash flaw in widely used video decoder | Jun 22, 9:10 pm |
|---|
| 410 | FortiBleed campaign used custom FortiGate sniffer to steal credentials | Jun 22, 8:10 pm |
|---|
| 411 | ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack | Jun 22, 7:10 pm |
|---|
| 412 | Microsoft fixes AutoGen Studio flaw that enabled code execution | Jun 22, 6:10 pm |
|---|
| 413 | Microsoft says Windows 11 26H2 is coming soon, details upgrade process | Jun 22, 6:10 pm |
|---|
| 414 | Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants | Jun 22, 5:10 pm |
|---|
| 415 | A Glimpse into the “Search Your Target” Market for Stolen Credentials | Jun 22, 3:10 pm |
|---|
| 416 | Webshells Remain Popular, (Mon, Jun 22nd) | Jun 22, 3:10 pm |
|---|
| 417 | 29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests | Jun 22, 3:10 pm |
|---|
| 418 | Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries | Jun 22, 2:10 pm |
|---|
| 419 | New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer | Jun 22, 2:10 pm |
|---|
| 420 | ⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More | Jun 22, 1:10 pm |
|---|
| 421 | Stop Your Legacy Infrastructure from Hijacking Your AI Agents | Jun 22, 1:10 pm |
|---|
| 422 | Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices | Jun 22, 10:10 am |
|---|
| 423 | AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network | Jun 22, 8:10 am |
|---|
| 424 | INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific | Jun 22, 7:10 am |
|---|
| 425 | ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd) | Jun 22, 2:10 am |
|---|
| 426 | AryStinger botnet infected thousands of D-Link routers worldwide | Jun 21, 3:10 pm |
|---|
| 427 | New Prinz Eugen ransomware prioritizes recent files for encryption | Jun 20, 4:10 pm |
|---|
| 428 | Microsoft links Mastra AI supply chain attack to North Korean hackers | Jun 20, 3:10 pm |
|---|
| 429 | Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys | Jun 20, 11:10 am |
|---|
| 430 | Klue OAuth breach victim list grows as Icarus hackers claim attack | Jun 19, 11:10 pm |
|---|
| 431 | Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin | Jun 19, 9:10 pm |
|---|
| 432 | The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes | Jun 19, 7:10 pm |
|---|
| 433 | Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain | Jun 19, 7:10 pm |
|---|
| 434 | AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution | Jun 19, 5:10 pm |
|---|
| 435 | Texas govt data breach exposes over 3 million driver’s licenses | Jun 19, 5:10 pm |
|---|
| 436 | Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites | Jun 19, 4:10 pm |
|---|
| 437 | CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices | Jun 19, 3:10 pm |
|---|
| 438 | Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way | Jun 19, 2:10 pm |
|---|
| 439 | From Assistive to Agentic: The AI Shift That's Redefining Threat Management | Jun 19, 1:10 pm |
|---|
| 440 | Webinar: How attackers bypass MFA and how defenders can respond | Jun 19, 1:10 pm |
|---|
| 441 | Forget Data Leakage: Shadow AI's Real Threat Is Access Control | Jun 19, 12:10 pm |
|---|
| 442 | Microsoft: June 2026 Windows updates break Recycle Bin prompts | Jun 19, 12:10 pm |
|---|
| 443 | CISA: Splunk Enterprise flaw actively exploited, patch by Sunday | Jun 19, 11:10 am |
|---|
| 444 | Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data | Jun 19, 10:10 am |
|---|
| 445 | NY man charged after harassing college student with AI-generated nudes | Jun 19, 9:10 am |
|---|
| 446 | eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th) | Jun 19, 8:10 am |
|---|
| 447 | Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone | Jun 19, 7:10 am |
|---|
| 448 | CISA warns Fortinet users to secure devices after FortiBleed leak | Jun 19, 7:10 am |
|---|
| 449 | Gentlemen ransomware uses multiple EDR killers to disable defenses | Jun 18, 11:10 pm |
|---|
| 450 | Nintendo confirms data stolen in WebMD subsidiary cyberattack | Jun 18, 8:10 pm |
|---|
| 451 | F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution | Jun 18, 7:10 pm |
|---|
| 452 | ‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm | Jun 18, 6:10 pm |
|---|
| 453 | USB worm spreads crypto-stealing malware via Windows shortcut files | Jun 18, 5:10 pm |
|---|
| 454 | ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories | Jun 18, 4:10 pm |
|---|
| 455 | INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 | Jun 18, 3:10 pm |
|---|
| 456 | Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks | Jun 18, 3:10 pm |
|---|
| 457 | Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2 | Jun 18, 3:10 pm |
|---|
| 458 | Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp | Jun 18, 2:10 pm |
|---|
| 459 | DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic | Jun 18, 2:10 pm |
|---|
| 460 | 5 reasons Microsoft 365 backup isn’t enough for business data protection | Jun 18, 2:10 pm |
|---|
| 461 | Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network | Jun 18, 1:10 pm |
|---|
| 462 | Telegram admits it couldn't police exam-leak channels, India tells court | Jun 18, 1:10 pm |
|---|
| 463 | Apple fixes Beats Studio Buds flaw that let hackers spy on conversations | Jun 18, 1:10 pm |
|---|
| 464 | ShapedPlugin update flow hacked to infect WordPress sites | Jun 18, 1:10 pm |
|---|
| 465 | The Scripts on Your Checkout Page Are Now a PCI DSS Problem | Jun 18, 12:10 pm |
|---|
| 466 | F5 issues out-of-band patches for critical NGINX vulnerabilities | Jun 18, 12:10 pm |
|---|
| 467 | Microsoft fixes Windows Server 2016 security update failures | Jun 18, 11:10 am |
|---|
| 468 | Leak confirms OpenAI is testing a ChatGPT for Science subscription | Jun 18, 2:10 am |
|---|
| 469 | The Behavior of Coordinated SSH Brute Force Attacks over the last three months [Guest Diary], (Wed, Jun 17th) | Jun 18, 2:10 am |
|---|
| 470 | ISC Stormcast For Thursday, June 18th, 2026 https://isc.sans.edu/podcastdetail/9978, (Thu, Jun 18th) | Jun 18, 2:10 am |
|---|
| 471 | Google to use UK and EU user IP addresses for ad personalization | Jun 17, 9:10 pm |
|---|
| 472 | Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development | Jun 17, 7:10 pm |
|---|
| 473 | Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments | Jun 17, 7:10 pm |
|---|
| 474 | Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline | Jun 17, 5:10 pm |
|---|
| 475 | FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices. | Jun 17, 4:10 pm |
|---|
| 476 | The browser blind spot: Why your security tool may not be blocking what you think it is [Guest Diary], (Wed, Jun 17th) | Jun 17, 4:10 pm |
|---|
| 477 | India's Telegram ban hit the UAE too. Here's how to get around it | Jun 17, 2:10 pm |
|---|
| 478 | Why Account Takeovers Are Rising and How to Stop Them | Jun 17, 2:10 pm |
|---|
| 479 | Microsoft confirms Office apps launch issues after June updates | Jun 17, 12:10 pm |
|---|
| 480 | Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization | Jun 17, 12:10 pm |
|---|
| 481 | The Top 10 Attack Surface Exposures in 2026 | Jun 17, 11:10 am |
|---|
| 482 | Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats | Jun 17, 10:10 am |
|---|
| 483 | CISA orders feds to patch max severity Joomla plugin flaw by Friday | Jun 17, 10:10 am |
|---|
| 484 | Microsoft working on Defender patch for RoguePlanet zero-day | Jun 17, 9:10 am |
|---|
| 485 | 144 Mastra npm Packages Compromised via Hijacked Contributor Account | Jun 17, 8:10 am |
|---|
| 486 | CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution | Jun 17, 7:10 am |
|---|
| 487 | Kodak confirms data breach claimed by ShinyHunters extortion gang | Jun 17, 7:10 am |
|---|
| 488 | ISC Stormcast For Wednesday, June 17th, 2026 https://isc.sans.edu/podcastdetail/9976, (Wed, Jun 17th) | Jun 17, 2:10 am |
|---|
| 489 | Malicious JetBrains Marketplace plugins steal AI API keys from developers | Jun 16, 10:10 pm |
|---|
| 490 | Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting | Jun 16, 8:10 pm |
|---|
| 491 | New Rokarolla Android malware targets 217 banking, crypto apps | Jun 16, 8:10 pm |
|---|
| 492 | ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures | Jun 16, 7:10 pm |
|---|
| 493 | Steam Workshop abused to spread malware via Wallpaper Engine app | Jun 16, 7:10 pm |
|---|
| 494 | GhostTree Attack Abused Recursive Windows Junctions to Hide Malware | Jun 16, 3:10 pm |
|---|
| 495 | UK to require ID or face scan before you can make social media accounts | Jun 16, 3:10 pm |
|---|
| 496 | New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds | Jun 16, 2:10 pm |
|---|
| 497 | FTC warns of record $3.5 billion losses to imposter scams in 2025 | Jun 16, 2:10 pm |
|---|
| 498 | Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive | Jun 16, 12:10 pm |
|---|
| 499 | China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth | Jun 16, 11:10 am |
|---|
| 500 | Ransomware gang abuses Microsoft Teams relays to hide malicious traffic | Jun 16, 11:10 am |
|---|
