| 1 | Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region | Apr 9, 12:10 pm |
|---|
| 2 | Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025 | Apr 9, 12:10 pm |
|---|
| 3 | The Hidden Security Risks of Shadow AI in Enterprises | Apr 9, 12:10 pm |
|---|
| 4 | Eurail says December data breach impacts 300,000 individuals | Apr 9, 11:10 am |
|---|
| 5 | Hackers exploiting Acrobat Reader zero-day flaw since December | Apr 9, 10:10 am |
|---|
| 6 | Hackers steal $3.6 million from crypto ATM giant Bitcoin Depot | Apr 9, 8:10 am |
|---|
| 7 | Microsoft suspends dev accounts for high-profile open source projects | Apr 9, 7:10 am |
|---|
| 8 | ISC Stormcast For Thursday, April 9th, 2026 https://isc.sans.edu/podcastdetail/9886, (Thu, Apr 9th) | Apr 9, 2:10 am |
|---|
| 9 | Number Usage in Passwords: Take Two, (Thu, Apr 9th) | Apr 9, 1:10 am |
|---|
| 10 | Hackers use pixel-large SVG trick to hide credit card stealer | Apr 8, 11:10 pm |
|---|
| 11 | Google: New UNC6783 hackers steal corporate Zendesk support tickets | Apr 8, 10:10 pm |
|---|
| 12 | New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxy | Apr 8, 7:10 pm |
|---|
| 13 | CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday | Apr 8, 7:10 pm |
|---|
| 14 | New macOS stealer campaign uses Script Editor in ClickFix attack | Apr 8, 7:10 pm |
|---|
| 15 | Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices | Apr 8, 6:10 pm |
|---|
| 16 | TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th) | Apr 8, 6:10 pm |
|---|
| 17 | 13-year-old bug in ActiveMQ lets hackers remotely execute commands | Apr 8, 6:10 pm |
|---|
| 18 | APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies | Apr 8, 4:10 pm |
|---|
| 19 | More Honeypot Fingerprinting Scans, (Wed, Apr 8th) | Apr 8, 3:10 pm |
|---|
| 20 | Is a $30,000 GPU Good at Password Cracking? | Apr 8, 2:10 pm |
|---|
| 21 | Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP) | Apr 8, 12:10 pm |
|---|
| 22 | Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems | Apr 8, 10:10 am |
|---|
| 23 | N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust | Apr 8, 9:10 am |
|---|
| 24 | Microsoft rolls out fix for broken Windows Start Menu search | Apr 8, 7:10 am |
|---|
| 25 | Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs | Apr 8, 6:10 am |
|---|
| 26 | ISC Stormcast For Wednesday, April 8th, 2026 https://isc.sans.edu/podcastdetail/9884, (Wed, Apr 8th) | Apr 8, 2:10 am |
|---|
| 27 | Hackers exploit critical flaw in Ninja Forms WordPress plugin | Apr 7, 10:10 pm |
|---|
| 28 | FBI: Americans lost a record $21 billion to cybercrime last year | Apr 7, 9:10 pm |
|---|
| 29 | Snowflake customers hit in data theft attacks after SaaS integrator breach | Apr 7, 8:10 pm |
|---|
| 30 | A Little Bit Pivoting: What Web Shells are Attackers Looking for?, (Tue, Apr 7th) | Apr 7, 7:10 pm |
|---|
| 31 | Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign | Apr 7, 6:10 pm |
|---|
| 32 | Russia Hacked Routers to Steal Microsoft Office Tokens | Apr 7, 6:10 pm |
|---|
| 33 | US warns of Iranian hackers targeting critical infrastructure | Apr 7, 6:10 pm |
|---|
| 34 | Max severity Flowise RCE vulnerability now exploited in attacks | Apr 7, 5:10 pm |
|---|
| 35 | Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access | Apr 7, 4:10 pm |
|---|
| 36 | Authorities disrupt router DNS hijacks used to steal Microsoft 365 logins | Apr 7, 4:10 pm |
|---|
| 37 | Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign | Apr 7, 2:10 pm |
|---|
| 38 | Why Your Automated Pentesting Tool Just Hit a Wall | Apr 7, 2:10 pm |
|---|
| 39 | The Hidden Cost of Recurring Credential Incidents | Apr 7, 1:10 pm |
|---|
| 40 | [Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk | Apr 7, 1:10 pm |
|---|
| 41 | New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips | Apr 7, 10:10 am |
|---|
| 42 | China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware | Apr 7, 8:10 am |
|---|
| 43 | Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed | Apr 7, 6:10 am |
|---|
| 44 | German authorities identify REvil and GandCrab ransomware bosses | Apr 7, 4:10 am |
|---|
| 45 | ISC Stormcast For Tuesday, April 7th, 2026 https://isc.sans.edu/podcastdetail/9882, (Tue, Apr 7th) | Apr 7, 2:10 am |
|---|
| 46 | German authorities identify REvil and GangCrab ransomware bosses | Apr 7, 12:10 am |
|---|
| 47 | New GPUBreach attack enables system takeover via GPU rowhammer | Apr 6, 10:10 pm |
|---|
| 48 | Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations | Apr 6, 8:10 pm |
|---|
| 49 | Microsoft fixes Classic Outlook bug causing email delivery issues | Apr 6, 8:10 pm |
|---|
| 50 | Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit | Apr 6, 8:10 pm |
|---|
| 51 | DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea | Apr 6, 6:10 pm |
|---|
| 52 | Microsoft removes Support and Recovery Assistant from Windows | Apr 6, 6:10 pm |
|---|
| 53 | CISA orders feds to patch exploited Fortinet EMS flaw by Friday | Apr 6, 5:10 pm |
|---|
| 54 | Drift $280M crypto theft linked to 6-month in-person operation | Apr 6, 5:10 pm |
|---|
| 55 | Microsoft links Medusa ransomware affiliate to zero-day attacks | Apr 6, 5:10 pm |
|---|
| 56 | CISA orders feds to patch Fortinet flaw exploited in attacks by Friday | Apr 6, 4:10 pm |
|---|
| 57 | ⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More | Apr 6, 3:10 pm |
|---|
| 58 | Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps | Apr 6, 3:10 pm |
|---|
| 59 | Why Simple Breach Monitoring is No Longer Enough | Apr 6, 2:10 pm |
|---|
| 60 | How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers | Apr 6, 1:10 pm |
|---|
| 61 | Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools | Apr 6, 11:10 am |
|---|
| 62 | How often are redirects used in phishing in 2026?, (Mon, Apr 6th) | Apr 6, 9:10 am |
|---|
| 63 | BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks | Apr 6, 7:10 am |
|---|
| 64 | Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab | Apr 6, 3:10 am |
|---|
| 65 | ISC Stormcast For Monday, April 6th, 2026 https://isc.sans.edu/podcastdetail/9880, (Mon, Apr 6th) | Apr 6, 2:10 am |
|---|
| 66 | $285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation | Apr 5, 8:10 pm |
|---|
| 67 | Traffic violation scams switch to QR codes in new phishing texts | Apr 5, 8:10 pm |
|---|
| 68 | New FortiClient EMS flaw exploited in attacks, emergency patch released | Apr 5, 7:10 pm |
|---|
| 69 | Hackers exploit React2Shell in automated credential theft campaign | Apr 5, 3:10 pm |
|---|
| 70 | Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS | Apr 5, 6:10 am |
|---|
| 71 | 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants | Apr 5, 6:10 am |
|---|
| 72 | Axios npm hack used fake Teams error fix to hijack maintainer account | Apr 4, 9:10 pm |
|---|
| 73 | LinkedIn secretly scans for 6,000+ Chrome extensions, collects data | Apr 4, 3:10 pm |
|---|
| 74 | Device code phishing attacks surge 37x as new kits spread online | Apr 4, 3:10 pm |
|---|
| 75 | LinkedIn secretely scans for 6,000+ Chrome extensions, collects data | Apr 3, 9:10 pm |
|---|
| 76 | Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers | Apr 3, 6:10 pm |
|---|
| 77 | China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing | Apr 3, 6:10 pm |
|---|
| 78 | Hims & Hers warns of data breach after Zendesk support ticket breach | Apr 3, 6:10 pm |
|---|
| 79 | Die Linke German political party confirms data stolen by Qilin ransomware | Apr 3, 5:10 pm |
|---|
| 80 | Evolution of Ransomware: Multi-Extortion Ransomware Attacks | Apr 3, 3:10 pm |
|---|
| 81 | TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd) | Apr 3, 2:10 pm |
|---|
| 82 | Why Third-Party Risk Is the Biggest Gap in Your Clients' Security Posture | Apr 3, 1:10 pm |
|---|
| 83 | UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack | Apr 3, 1:10 pm |
|---|
| 84 | Microsoft still working to fix Exchange Online mailbox access issues | Apr 3, 12:10 pm |
|---|
| 85 | Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK | Apr 3, 10:10 am |
|---|
| 86 | New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images | Apr 3, 10:10 am |
|---|
| 87 | Man admits to locking thousands of Windows devices in extortion plot | Apr 3, 9:10 am |
|---|
| 88 | Microsoft now force upgrades unmanaged Windows 11 24H2 PCs | Apr 3, 8:10 am |
|---|
| 89 | CERT-EU: European Commission hack exposes data of 30 EU entities | Apr 3, 7:10 am |
|---|
| 90 | Drift loses $280 million North Korean hackers seize Security Council powers | Apr 3, 6:10 am |
|---|
| 91 | ISC Stormcast For Friday, April 3rd, 2026 https://isc.sans.edu/podcastdetail/9878, (Fri, Apr 3rd) | Apr 3, 2:10 am |
|---|
| 92 | Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials | Apr 2, 9:10 pm |
|---|
| 93 | Claude Code leak used to push infostealer malware on GitHub | Apr 2, 9:10 pm |
|---|
| 94 | Drift loses $280 million as hackers seize Security Council powers | Apr 2, 7:10 pm |
|---|
| 95 | Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise | Apr 2, 5:10 pm |
|---|
| 96 | Residential proxies evaded IP reputation checks in 78% of 4B sessions | Apr 2, 4:10 pm |
|---|
| 97 | Attempts to Exploit Exposed "Vite" Installs (CVE-2025-30208), (Thu, Apr 2nd) | Apr 2, 3:10 pm |
|---|
| 98 | ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories | Apr 2, 2:10 pm |
|---|
| 99 | Medtech giant Stryker fully operational after data-wiping attack | Apr 2, 2:10 pm |
|---|
| 100 | New Progress ShareFile flaws can be chained in pre-auth RCE attacks | Apr 2, 2:10 pm |
|---|
| 101 | Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime | Apr 2, 2:10 pm |
|---|
| 102 | The State of Trusted Open Source Report | Apr 2, 12:10 pm |
|---|
| 103 | Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners | Apr 2, 12:10 pm |
|---|
| 104 | WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action | Apr 2, 11:10 am |
|---|
| 105 | Critical Cisco IMC auth bypass gives attackers Admin access | Apr 2, 11:10 am |
|---|
| 106 | Microsoft links Classic Outlook issue to email delivery problems | Apr 2, 10:10 am |
|---|
| 107 | Over 14,000 F5 BIG-IP APM instances still exposed to RCE attacks | Apr 2, 9:10 am |
|---|
| 108 | Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit | Apr 2, 8:10 am |
|---|
| 109 | ISC Stormcast For Thursday, April 2nd, 2026 https://isc.sans.edu/podcastdetail/9876, (Thu, Apr 2nd) | Apr 2, 2:10 am |
|---|
| 110 | New CrystalRAT malware adds RAT, stealer and prankware features | Apr 2, 12:10 am |
|---|
| 111 | Hackers exploit TrueConf zero-day to push malicious software updates | Apr 1, 10:10 pm |
|---|
| 112 | Apple expands iOS 18 updates to more iPhones to block DarkSword attacks | Apr 1, 10:10 pm |
|---|
| 113 | New EvilTokens service fuels Microsoft device code phishing attacks | Apr 1, 8:10 pm |
|---|
| 114 | CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails | Apr 1, 6:10 pm |
|---|
| 115 | 'NoVoice' Android malware on Google Play infected 2.3 million devices | Apr 1, 6:10 pm |
|---|
| 116 | Routine Access Is Powering Modern Intrusions, a New Threat Report Finds | Apr 1, 3:10 pm |
|---|
| 117 | New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released | Apr 1, 2:10 pm |
|---|
| 118 | Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass | Apr 1, 2:10 pm |
|---|
| 119 | Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures | Apr 1, 2:10 pm |
|---|
| 120 | Block the Prompt, Not the Work: The End of "Doctor No" | Apr 1, 2:10 pm |
|---|
| 121 | TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud Enumeration Documented, and Axios Attribution Narrows, (Wed, Apr 1st) | Apr 1, 2:10 pm |
|---|
| 122 | 3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming) | Apr 1, 12:10 pm |
|---|
| 123 | FBI warns against using Chinese mobile apps due to privacy risks | Apr 1, 12:10 pm |
|---|
| 124 | Google fixes fourth Chrome zero-day exploited in attacks in 2026 | Apr 1, 11:10 am |
|---|
| 125 | Malicious Script That Gets Rid of ADS, (Wed, Apr 1st) | Apr 1, 11:10 am |
|---|
| 126 | Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 | Apr 1, 8:10 am |
|---|
| 127 | Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms | Apr 1, 7:10 am |
|---|
| 128 | Google Drive ransomware detection now on by default for paying users | Apr 1, 7:10 am |
|---|
| 129 | New Windows 11 emergency update fixes preview update install issues | Apr 1, 6:10 am |
|---|
| 130 | ISC Stormcast For Wednesday, April 1st, 2026 https://isc.sans.edu/podcastdetail/9874, (Wed, Apr 1st) | Apr 1, 2:10 am |
|---|
| 131 | Claude Code source code accidentally leaked in NPM package | Apr 1, 1:10 am |
|---|
| 132 | Google now allows you to change your @gmail.com address | Apr 1, 12:10 am |
|---|
| 133 | GIGABYTE Control Center vulnerable to arbitrary file write flaw | Mar 31, 11:10 pm |
|---|
| 134 | Proton launches new "Meet" privacy-focused conferencing platform | Mar 31, 11:10 pm |
|---|
| 135 | Claude AI finds Vim, Emacs RCE bugs that trigger on file open | Mar 31, 10:10 pm |
|---|
| 136 | Android Developer Verification Rollout Begins Ahead of September Enforcement | Mar 31, 8:10 pm |
|---|
| 137 | Cisco source code stolen in Trivy-linked dev environment breach | Mar 31, 6:10 pm |
|---|
| 138 | TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks | Mar 31, 5:10 pm |
|---|
| 139 | Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts | Mar 31, 2:10 pm |
|---|
| 140 | Hackers compromise Axios npm package to drop cross-platform malware | Mar 31, 2:10 pm |
|---|
| 141 | How to Categorize AI Agents and Prioritize Risk | Mar 31, 2:10 pm |
|---|
| 142 | The AI Arms Race – Why Unified Exposure Management Is Becoming a Boardroom Priority | Mar 31, 1:10 pm |
|---|
| 143 | Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains | Mar 31, 1:10 pm |
|---|
| 144 | Microsoft fixes Outlook Classic crashes caused by Teams Meeting add-in | Mar 31, 12:10 pm |
|---|
| 145 | Hacker charged with stealing $53 million from Uranium crypto exchange | Mar 31, 10:10 am |
|---|
| 146 | Application Control Bypass for Data Exfiltration, (Tue, Mar 31st) | Mar 31, 8:10 am |
|---|
| 147 | Dutch Finance Ministry takes treasury banking portal offline after breach | Mar 31, 8:10 am |
|---|
| 148 | Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account | Mar 31, 7:10 am |
|---|
| 149 | CISA orders feds to patch actively exploited Citrix flaw by Thursday | Mar 31, 7:10 am |
|---|
| 150 | ISC Stormcast For Tuesday, March 31st, 2026 https://isc.sans.edu/podcastdetail/9872, (Tue, Mar 31st) | Mar 31, 2:10 am |
|---|
| 151 | Healthcare tech firm CareCloud says hackers stole patient data | Mar 30, 10:10 pm |
|---|
| 152 | New RoadK1ll WebSocket implant used to pivot on breached networks | Mar 30, 9:10 pm |
|---|
| 153 | OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability | Mar 30, 8:10 pm |
|---|
| 154 | Critical Citrix NetScaler memory flaw actively exploited in attacks | Mar 30, 7:10 pm |
|---|
| 155 | DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials | Mar 30, 5:10 pm |
|---|
| 156 | 3 SOC Process Fixes That Unlock Tier 1 Productivity | Mar 30, 3:10 pm |
|---|
| 157 | ⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More | Mar 30, 3:10 pm |
|---|
| 158 | How to Evaluate AI SOC Agents: 7 Questions Gartner Says You Should Be Asking | Mar 30, 3:10 pm |
|---|
| 159 | Apple adds macOS Terminal warning to block ClickFix attacks | Mar 30, 3:10 pm |
|---|
| 160 | TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th) | Mar 30, 3:10 pm |
|---|
| 161 | The State of Secrets Sprawl 2026: 9 Takeaways for CISOs | Mar 30, 12:10 pm |
|---|
| 162 | Hackers now exploit critical F5 BIG-IP flaw in attacks, patch now | Mar 30, 11:10 am |
|---|
| 163 | Microsoft pulls KB5079391 Windows update over install issues | Mar 30, 10:10 am |
|---|
| 164 | Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels | Mar 30, 10:10 am |
|---|
| 165 | Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign | Mar 30, 8:10 am |
|---|
| 166 | Critical Fortinet Forticlient EMS flaw now exploited in attacks | Mar 30, 8:10 am |
|---|
| 167 | European Commission confirms data breach after Europa.eu hack | Mar 30, 7:10 am |
|---|
| 168 | ISC Stormcast For Monday, March 30th, 2026 https://isc.sans.edu/podcastdetail/9870, (Mon, Mar 30th) | Mar 30, 2:10 am |
|---|
| 169 | DShield (Cowrie) Honeypot Stats and When Sessions Disconnect, (Mon, Mar 30th) | Mar 30, 12:10 am |
|---|
| 170 | FBI confirms hack of Director Patel's personal email inbox | Mar 29, 9:10 pm |
|---|
| 171 | File read flaw in Smart Slider plugin impacts 500K WordPress sites | Mar 29, 3:10 pm |
|---|
| 172 | Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack | Mar 28, 5:10 pm |
|---|
| 173 | TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th) | Mar 28, 4:10 pm |
|---|
| 174 | New Infinity Stealer malware grabs macOS data via ClickFix lures | Mar 28, 3:10 pm |
|---|
| 175 | Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug | Mar 28, 10:10 am |
|---|
| 176 | TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign | Mar 28, 9:10 am |
|---|
| 177 | CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation | Mar 28, 8:10 am |
|---|
| 178 | TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign | Mar 28, 8:10 am |
|---|
| 179 | Backdoored Telnyx PyPI package pushes malware hidden in WAV audio | Mar 27, 10:10 pm |
|---|
| 180 | Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits | Mar 27, 7:10 pm |
|---|
| 181 | TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files | Mar 27, 6:10 pm |
|---|
| 182 | European Commission investigating breach after Amazon cloud account hack | Mar 27, 5:10 pm |
|---|
| 183 | Fake VS Code alerts on GitHub spread malware to developers | Mar 27, 5:10 pm |
|---|
| 184 | Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks | Mar 27, 3:10 pm |
|---|
| 185 | TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th) | Mar 27, 3:10 pm |
|---|
| 186 | Agentic GRC: Teams Get the Tech. The Mindset Shift Is What's Missing. | Mar 27, 2:10 pm |
|---|
| 187 | Bearlyfy Hits Russian Firms with Custom GenieLocker Ransomware | Mar 27, 1:10 pm |
|---|
| 188 | AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion | Mar 27, 1:10 pm |
|---|
| 189 | European Commission investigating breach after Amazon cloud hack | Mar 27, 1:10 pm |
|---|
| 190 | We Are At War | Mar 27, 12:10 pm |
|---|
| 191 | Anti-piracy coalition takes down AnimePlay app with 5 million users | Mar 27, 11:10 am |
|---|
| 192 | Windows 11 KB5079391 update rolls out Smart App Control improvements | Mar 27, 10:10 am |
|---|
| 193 | Bearlyfy Hits 70+ Russian Firms with Custom GenieLocker Ransomware | Mar 27, 10:10 am |
|---|
| 194 | LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks | Mar 27, 9:10 am |
|---|
| 195 | Dutch Police discloses security breach after phishing attack | Mar 27, 9:10 am |
|---|
| 196 | ISC Stormcast For Friday, March 27th, 2026 https://isc.sans.edu/podcastdetail/9868, (Fri, Mar 27th) | Mar 27, 2:10 am |
|---|
| 197 | Ajax football club hack exposed fan data, enabled ticket hijack | Mar 26, 9:10 pm |
|---|
| 198 | CISA: New Langflow flaw actively exploited to hijack AI workflows | Mar 26, 8:10 pm |
|---|
| 199 | China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks | Mar 26, 6:10 pm |
|---|
| 200 | TeamPCP Supply Chain Campaign: Update 001 - Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th) | Mar 26, 6:10 pm |
|---|
| 201 | UK sanctions Xinbi marketplace linked to Asian scam centers | Mar 26, 4:10 pm |
|---|
| 202 | ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories | Mar 26, 2:10 pm |
|---|
| 203 | Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception | Mar 26, 2:10 pm |
|---|
| 204 | Coruna iOS exploit framework linked to Triangulation attacks | Mar 26, 2:10 pm |
|---|
| 205 | Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website | Mar 26, 2:10 pm |
|---|
| 206 | Inside a Modern Fraud Attack: From Bot Signups to Account Takeovers | Mar 26, 2:10 pm |
|---|
| 207 | WhatsApp rolls out more AI features, iOS multi-account support | Mar 26, 2:10 pm |
|---|
| 208 | TikTok for Business accounts targeted in new phishing campaign | Mar 26, 2:10 pm |
|---|
| 209 | Russia arrests suspected owner of LeakBase cybercrime forum | Mar 26, 1:10 pm |
|---|
| 210 | [Webinar] Stop Guessing. Learn to Validate Your Defenses Against Real Attacks | Mar 26, 12:10 pm |
|---|
| 211 | Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks | Mar 26, 12:10 pm |
|---|
| 212 | Suspected RedLine infostealer malware admin extradited to US | Mar 26, 12:10 pm |
|---|
| 213 | WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites | Mar 26, 9:10 am |
|---|
| 214 | ISC Stormcast For Thursday, March 26th, 2026 https://isc.sans.edu/podcastdetail/9866, (Thu, Mar 26th) | Mar 26, 2:10 am |
|---|
| 215 | GitHub adds AI-powered bug detection to expand security coverage | Mar 26, 12:10 am |
|---|
| 216 | Apple Patches (almost) everything again. March 2026 edition., (Wed, Mar 25th) | Mar 25, 10:10 pm |
|---|
| 217 | PolyShell attacks target 56% of all vulnerable Magento stores | Mar 25, 10:10 pm |
|---|
| 218 | Bubble AI app builder abused to steal Microsoft account credentials | Mar 25, 8:10 pm |
|---|
| 219 | New Torg Grabber infostealer malware targets 728 crypto wallets | Mar 25, 7:10 pm |
|---|
| 220 | LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace | Mar 25, 6:10 pm |
|---|
| 221 | Citrix urges admins to patch NetScaler flaws as soon as possible | Mar 25, 4:10 pm |
|---|
| 222 | GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data | Mar 25, 3:10 pm |
|---|
| 223 | Paid AI Accounts Are Now a Hot Underground Commodity | Mar 25, 2:10 pm |
|---|
| 224 | Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse | Mar 25, 1:10 pm |
|---|
| 225 | Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks | Mar 25, 1:10 pm |
|---|
| 226 | The Kill Chain Is Obsolete When Your AI Agent Is the Threat | Mar 25, 1:10 pm |
|---|
| 227 | Kali Linux 2026.1 released with 8 new tools, new BackTrack mode | Mar 25, 1:10 pm |
|---|
| 228 | TP-Link warns users to patch critical router auth bypass flaw | Mar 25, 12:10 pm |
|---|
| 229 | Manager of botnet used in ransomware attacks gets 2 years in prison | Mar 25, 9:10 am |
|---|
| 230 | FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns | Mar 25, 8:10 am |
|---|
| 231 | TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise | Mar 25, 7:10 am |
|---|
| 232 | ISC Stormcast For Wednesday, March 25th, 2026 https://isc.sans.edu/podcastdetail/9864, (Wed, Mar 25th) | Mar 25, 2:10 am |
|---|
| 233 | SmartApeSG campaign pushes Remcos RAT, NetSupport RAT, StealC, and Sectop RAT (ArechClient2), (Wed, Mar 25th) | Mar 25, 1:10 am |
|---|
| 234 | Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens | Mar 25, 12:10 am |
|---|
| 235 | Popular LiteLLM PyPI package compromised in TeamPCP supply chain attack | Mar 24, 11:10 pm |
|---|
| 236 | PTC warns of imminent threat from critical Windchill, FlexPLM RCE bug | Mar 24, 11:10 pm |
|---|
| 237 | FCC bans new routers made outside the USA over security risks | Mar 24, 9:10 pm |
|---|
| 238 | TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 Likely via Trivy CI/CD Compromise | Mar 24, 8:10 pm |
|---|
| 239 | Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR | Mar 24, 6:10 pm |
|---|
| 240 | Firefox now has a free built-in VPN with 50GB monthly data limit | Mar 24, 6:10 pm |
|---|
| 241 | Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner | Mar 24, 5:10 pm |
|---|
| 242 | Microsoft fixes bug causing Classic Outlook sync issues with Gmail | Mar 24, 4:10 pm |
|---|
| 243 | Yanluowang ransomware access broker gets 81 months in prison | Mar 24, 2:10 pm |
|---|
| 244 | Infinite Campus warns of breach after ShinyHunters claims data theft | Mar 24, 2:10 pm |
|---|
| 245 | Detecting IP KVMs, (Tue, Mar 24th) | Mar 24, 2:10 pm |
|---|
| 246 | HackerOne discloses employee data breach after Navia hack | Mar 24, 2:10 pm |
|---|
| 247 | Zero Trust: Bridging the Gap Between Authentication and Trust | Mar 24, 2:10 pm |
|---|
| 248 | 5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents | Mar 24, 12:10 pm |
|---|
| 249 | Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials | Mar 24, 12:10 pm |
|---|
| 250 | Dutch Ministry of Finance discloses breach affecting employees | Mar 24, 12:10 pm |
|---|
| 251 | TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials | Mar 24, 11:10 am |
|---|
| 252 | The Hidden Cost of Cybersecurity Specialization: Losing Foundational Skills | Mar 24, 11:10 am |
|---|
| 253 | Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks | Mar 24, 8:10 am |
|---|
| 254 | U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage | Mar 24, 8:10 am |
|---|
| 255 | ISC Stormcast For Tuesday, March 24th, 2026 https://isc.sans.edu/podcastdetail/9862, (Tue, Mar 24th) | Mar 24, 2:10 am |
|---|
| 256 | OpenAI rolls out ChatGPT Library to store your personal files | Mar 24, 12:10 am |
|---|
| 257 | Mazda discloses security breach exposing employee and partner data | Mar 23, 11:10 pm |
|---|
| 258 | Tycoon2FA phishing platform returns after recent police disruption | Mar 23, 10:10 pm |
|---|
| 259 | Tool updates: lots of security and logic fixes, (Mon, Mar 23rd) | Mar 23, 9:10 pm |
|---|
| 260 | North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware | Mar 23, 8:10 pm |
|---|
| 261 | Crunchyroll probes breach after hacker claims to steal 6.8M users' data | Mar 23, 8:10 pm |
|---|
| 262 | TeamPCP deploys Iran-targeted wiper in Kubernetes attacks | Mar 23, 8:10 pm |
|---|
| 263 | Trivy supply-chain attack spreads to Docker, GitHub repos | Mar 23, 6:10 pm |
|---|
| 264 | ‘CanisterWorm’ Springs Wiper Attack Targeting Iran | Mar 23, 4:10 pm |
|---|
| 265 | Varonis Atlas: Securing AI and the Data That Powers It | Mar 23, 3:10 pm |
|---|
| 266 | We Found Eight Attack Vectors Inside AWS Bedrock. Here's What Attackers Can Do with Them | Mar 23, 2:10 pm |
|---|
| 267 | ⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More | Mar 23, 2:10 pm |
|---|
| 268 | Microsoft Exchange Online service change causes email access issues | Mar 23, 1:10 pm |
|---|
| 269 | Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware | Mar 23, 12:10 pm |
|---|
| 270 | FBI warns of Handala hackers using Telegram in malware attacks | Mar 23, 10:10 am |
|---|
| 271 | Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper | Mar 23, 9:10 am |
|---|
| 272 | CISA orders feds to patch DarkSword iOS flaws exploited attacks | Mar 23, 9:10 am |
|---|
| 273 | New KB5085516 emergency update fixes Microsoft account sign-in | Mar 23, 8:10 am |
|---|
| 274 | Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems | Mar 23, 7:10 am |
|---|
| 275 | ISC Stormcast For Monday, March 23rd, 2026 https://isc.sans.edu/podcastdetail/9860, (Mon, Mar 23rd) | Mar 23, 2:10 am |
|---|
| 276 | VoidStealer malware steals Chrome master key via debugger trick | Mar 22, 3:10 pm |
|---|
| 277 | Trivy vulnerability scanner breach pushed infostealer via GitHub Actions | Mar 21, 6:10 pm |
|---|
| 278 | Microsoft Azure Monitor alerts abused for callback phishing attacks | Mar 21, 5:10 pm |
|---|
| 279 | Microsoft Azure Monitor alerts abused in callback phishing campaigns | Mar 21, 3:10 pm |
|---|
| 280 | Google adds ‘Advanced Flow’ for safe APK sideloading on Android | Mar 21, 3:10 pm |
|---|
| 281 | FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks | Mar 21, 2:10 pm |
|---|
| 282 | Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager | Mar 21, 11:10 am |
|---|
| 283 | CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026 | Mar 21, 9:10 am |
|---|
| 284 | Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages | Mar 21, 8:10 am |
|---|
| 285 | FBI links Signal phishing attacks to Russian intelligence services | Mar 20, 9:10 pm |
|---|
| 286 | Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets | Mar 20, 7:10 pm |
|---|
| 287 | Oracle pushes emergency fix for critical Identity Manager RCE flaw | Mar 20, 7:10 pm |
|---|
| 288 | Police take down 373,000 fake CSAM sites in Operation Alice | Mar 20, 6:10 pm |
|---|
| 289 | Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure | Mar 20, 5:10 pm |
|---|
| 290 | CISA orders feds to patch max-severity Cisco flaw by Sunday | Mar 20, 3:10 pm |
|---|
| 291 | How CISOs Can Survive the Era of Geopolitical Cyberattacks | Mar 20, 2:10 pm |
|---|
| 292 | Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover | Mar 20, 1:10 pm |
|---|
| 293 | Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams | Mar 20, 12:10 pm |
|---|
| 294 | The Importance of Behavioral Analytics in AI-Enabled Cyber Attacks | Mar 20, 11:10 am |
|---|
| 295 | Musician admits to $10M streaming royalty fraud using AI bots | Mar 20, 10:10 am |
|---|
| 296 | GSocket Backdoor Delivered Through Bash Script, (Fri, Mar 20th) | Mar 20, 9:10 am |
|---|
| 297 | Microsoft: March Windows updates break Teams, OneDrive sign-ins | Mar 20, 8:10 am |
|---|
| 298 | International joint action disrupts world’s largest DDoS botnets | Mar 20, 8:10 am |
|---|
| 299 | DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks | Mar 20, 7:10 am |
|---|
| 300 | Ex-data analyst stole company data in $2.5M extortion scheme | Mar 20, 7:10 am |
|---|
| 301 | 54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security | Mar 20, 6:10 am |
|---|
| 302 | Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks | Mar 20, 6:10 am |
|---|
| 303 | ISC Stormcast For Friday, March 20th, 2026 https://isc.sans.edu/podcastdetail/9858, (Fri, Mar 20th) | Mar 20, 2:10 am |
|---|
| 304 | Feds Disrupt IoT Botnets Behind Huge DDoS Attacks | Mar 20, 1:10 am |
|---|
| 305 | Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers | Mar 19, 9:10 pm |
|---|
| 306 | Navia discloses data breach impacting 2.7 million people | Mar 19, 9:10 pm |
|---|
| 307 | 54 EDR Killers Use BYOVD to Exploit 34 Signed Vulnerable Drivers and Disable Security | Mar 19, 8:10 pm |
|---|
| 308 | New ‘PolyShell’ flaw allows unauthenticated RCE on Magento e-stores | Mar 19, 8:10 pm |
|---|
| 309 | FBI seizes Handala data leak site after Stryker cyberattack | Mar 19, 5:10 pm |
|---|
| 310 | Bitrefill blames North Korean Lazarus group for cyberattack | Mar 19, 5:10 pm |
|---|
| 311 | ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More | Mar 19, 3:10 pm |
|---|
| 312 | Russian hackers exploit Zimbra flaw in Ukrainian govt attacks | Mar 19, 3:10 pm |
|---|
| 313 | New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data | Mar 19, 2:10 pm |
|---|
| 314 | 7 Ways to Prevent Privilege Escalation via Password Resets | Mar 19, 2:10 pm |
|---|
| 315 | Max severity Ubiquiti UniFi flaw may allow account takeover | Mar 19, 1:10 pm |
|---|
| 316 | New ‘Perseus’ Android malware checks user notes for secrets | Mar 19, 11:10 am |
|---|
| 317 | How Ceros Gives Security Teams Visibility and Control in Claude Code | Mar 19, 11:10 am |
|---|
| 318 | CISA urges US orgs to secure Microsoft Intune systems after Stryker breach | Mar 19, 11:10 am |
|---|
| 319 | DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover | Mar 19, 10:10 am |
|---|
| 320 | Critical Microsoft SharePoint flaw now exploited in attacks | Mar 19, 10:10 am |
|---|
| 321 | CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks | Mar 19, 7:10 am |
|---|
| 322 | ISC Stormcast For Thursday, March 19th, 2026 https://isc.sans.edu/podcastdetail/9856, (Thu, Mar 19th) | Mar 19, 2:10 am |
|---|
| 323 | Interesting Message Stored in Cowrie Logs, (Wed, Mar 18th) | Mar 19, 1:10 am |
|---|
| 324 | Aura confirms data breach exposing 900,000 marketing contacts | Mar 18, 11:10 pm |
|---|
| 325 | CISA orders feds to patch Zimbra XSS flaw exploited in attacks | Mar 18, 8:10 pm |
|---|
| 326 | ConnectWise patches new flaw allowing ScreenConnect hijacking | Mar 18, 7:10 pm |
|---|
| 327 | OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs | Mar 18, 6:10 pm |
|---|
| 328 | Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access | Mar 18, 5:10 pm |
|---|
| 329 | Ransomware gang exploits Cisco flaw in zero-day attacks since January | Mar 18, 5:10 pm |
|---|
| 330 | Marquis: Ransomware gang stole data of 672K people in cyberattack | Mar 18, 4:10 pm |
|---|
| 331 | Scans for "adminer", (Wed, Mar 18th) | Mar 18, 2:10 pm |
|---|
| 332 | Nordstrom's email system abused to send crypto scams to customers | Mar 18, 2:10 pm |
|---|
| 333 | New “Darksword” iOS exploit used in infostealer attack on iPhones | Mar 18, 2:10 pm |
|---|
| 334 | The Refund Fraud Economy: Exploiting Major Retailers and Payment Platforms | Mar 18, 2:10 pm |
|---|
| 335 | 9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors | Mar 18, 1:10 pm |
|---|
| 336 | Claude Code Security and Magecart: Getting the Threat Model Right | Mar 18, 1:10 pm |
|---|
| 337 | Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE | Mar 18, 1:10 pm |
|---|
| 338 | Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels | Mar 18, 12:10 pm |
|---|
| 339 | ISC Stormcast For Wednesday, March 18th, 2026 https://isc.sans.edu/podcastdetail/9854, (Wed, Mar 18th) | Mar 18, 11:10 am |
|---|
| 340 | Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit | Mar 18, 9:10 am |
|---|
| 341 | Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS | Mar 18, 7:10 am |
|---|
| 342 | Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23 | Mar 18, 6:10 am |
|---|
| 343 | Apple pushes first Background Security Improvements update to fix WebKit flaw | Mar 18, 1:10 am |
|---|
| 344 | GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX | Mar 17, 10:10 pm |
|---|
| 345 | Europe sanctions Chinese and Iranian firms for cyberattacks | Mar 17, 7:10 pm |
|---|
| 346 | AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE | Mar 17, 6:10 pm |
|---|
| 347 | LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader | Mar 17, 3:10 pm |
|---|
| 348 | Microsoft stops force-installing the Microsoft 365 Copilot app | Mar 17, 2:10 pm |
|---|
| 349 | New font-rendering trick hides malicious commands from AI tools | Mar 17, 2:10 pm |
|---|
| 350 | Top 5 Things CISOs Need to Do Today to Secure AI Agents | Mar 17, 2:10 pm |
|---|
| 351 | LeakNet ransomware uses ClickFix, Deno runtime in stealthy attacks | Mar 17, 1:10 pm |
|---|
| 352 | AI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds | Mar 17, 12:10 pm |
|---|
| 353 | IPv4 Mapped IPv6 Addresses, (Tue, Mar 17th) | Mar 17, 12:10 pm |
|---|
| 354 | Microsoft shares fix for Windows C: drive access issues on Samsung PCs | Mar 17, 12:10 pm |
|---|
| 355 | LeakNet ransomware uses ClickFix and Deno runtime for stealthy attacks | Mar 17, 12:10 pm |
|---|
| 356 | Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware | Mar 17, 11:10 am |
|---|
| 357 | Microsoft: Enabling Teams Meeting add-in breaks Outlook Classic | Mar 17, 11:10 am |
|---|
| 358 | New Windows 11 hotpatch fixes Bluetooth device visibility issue | Mar 17, 11:10 am |
|---|
| 359 | CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths | Mar 17, 6:10 am |
|---|
| 360 | ISC Stormcast For Tuesday, March 17th, 2026 https://isc.sans.edu/podcastdetail/9852, (Tue, Mar 17th) | Mar 17, 2:10 am |
|---|
| 361 | Stryker attack wiped tens of thousands of devices, no malware needed | Mar 16, 8:10 pm |
|---|
| 362 | GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos | Mar 16, 8:10 pm |
|---|
| 363 | CISA flags Wing FTP Server flaw as actively exploited in attacks | Mar 16, 6:10 pm |
|---|
| 364 | UK’s Companies House confirms security flaw exposed business data | Mar 16, 5:10 pm |
|---|
| 365 | ⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More | Mar 16, 4:10 pm |
|---|
| 366 | Microsoft Exchange Online outage blocks access to mailboxes | Mar 16, 4:10 pm |
|---|
| 367 | Microsoft pulls Samsung app blocking Windows C: drive from Store | Mar 16, 2:10 pm |
|---|
| 368 | /proxy/ URL scans with IP addresses, (Mon, Mar 16th) | Mar 16, 2:10 pm |
|---|
| 369 | Shadow AI is everywhere. Here’s how to find and secure it. | Mar 16, 2:10 pm |
|---|
| 370 | ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers | Mar 16, 1:10 pm |
|---|
| 371 | Why Security Validation Is Becoming Agentic | Mar 16, 1:10 pm |
|---|
| 372 | DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage | Mar 16, 10:10 am |
|---|
| 373 | Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse | Mar 16, 6:10 am |
|---|
| 374 | ISC Stormcast For Monday, March 16th, 2026 https://isc.sans.edu/podcastdetail/9850, (Mon, Mar 16th) | Mar 16, 2:10 am |
|---|
| 375 | OpenAI says ChatGPT ads are not rolling out globally for now | Mar 16, 12:10 am |
|---|
| 376 | Betterleaks, a new open-source secrets scanner to replace Gitleaks | Mar 15, 3:10 pm |
|---|
| 377 | Microsoft releases Windows 11 OOB hotpatch to fix RRAS RCE flaw | Mar 14, 10:10 pm |
|---|
| 378 | OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration | Mar 14, 6:10 pm |
|---|
| 379 | AppsFlyer Web SDK hijacked to spread crypto-stealing JavaScript code | Mar 14, 3:10 pm |
|---|
| 380 | GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers | Mar 14, 2:10 pm |
|---|
| 381 | SmartApeSG campaign uses ClickFix page to push Remcos RAT, (Sat, Mar 14th) | Mar 14, 2:10 am |
|---|
| 382 | Microsoft: Windows 11 users can't access C: drive on some Samsung PCs | Mar 13, 11:10 pm |
|---|
| 383 | FBI seeks victims of Steam games used to spread malware | Mar 13, 9:10 pm |
|---|
| 384 | Fake enterprise VPN sites used to steal company credentials | Mar 13, 6:10 pm |
|---|
| 385 | Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026 | Mar 13, 6:10 pm |
|---|
| 386 | Poland's nuclear research centre targeted by cyberattack | Mar 13, 6:10 pm |
|---|
| 387 | Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware | Mar 13, 6:10 pm |
|---|
| 388 | Microsoft investigates classic Outlook sync and connection issues | Mar 13, 5:10 pm |
|---|
| 389 | INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime | Mar 13, 4:10 pm |
|---|
| 390 | Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials | Mar 13, 3:10 pm |
|---|
| 391 | From VMware to what’s next: Protecting data during hypervisor migration | Mar 13, 3:10 pm |
|---|
| 392 | Fake enterprise VPN downloads used to steal company credentials | Mar 13, 2:10 pm |
|---|
| 393 | Investigating a New Click-Fix Variant | Mar 13, 2:10 pm |
|---|
| 394 | Police sinkholes 45,000 IP addresses in cybercrime crackdown | Mar 13, 2:10 pm |
|---|
| 395 | Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation | Mar 13, 10:10 am |
|---|
| 396 | Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8 | Mar 13, 10:10 am |
|---|
| 397 | Starbucks discloses data breach affecting hundreds of employees | Mar 13, 9:10 am |
|---|
| 398 | A React-based phishing page with credential exfiltration via EmailJS, (Fri, Mar 13th) | Mar 13, 8:10 am |
|---|
| 399 | Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries | Mar 13, 7:10 am |
|---|
| 400 | Google fixes two new Chrome zero-days exploited in attacks | Mar 13, 7:10 am |
|---|
| 401 | Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution | Mar 13, 6:10 am |
|---|
| 402 | ISC Stormcast For Friday, March 13th, 2026 https://isc.sans.edu/podcastdetail/9848, (Fri, Mar 13th) | Mar 13, 2:10 am |
|---|
| 403 | Canadian retail giant Loblaw notifies customers of data breach | Mar 12, 10:10 pm |
|---|
| 404 | England Hockey investigating ransomware data breach | Mar 12, 9:10 pm |
|---|
| 405 | AI-generated Slopoly malware used in Interlock ransomware attack | Mar 12, 8:10 pm |
|---|
| 406 | Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks | Mar 12, 6:10 pm |
|---|
| 407 | Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays | Mar 12, 6:10 pm |
|---|
| 408 | US disrupts SocksEscort proxy network powered by Linux malware | Mar 12, 5:10 pm |
|---|
| 409 | Veeam warns of critical flaws exposing backup servers to RCE attacks | Mar 12, 5:10 pm |
|---|
| 410 | Google paid $17.1 million for vulnerability reports in 2025 | Mar 12, 4:10 pm |
|---|
| 411 | ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More | Mar 12, 3:10 pm |
|---|
| 412 | How to Scale Phishing Detection in Your SOC: 3 Steps for CISOs | Mar 12, 3:10 pm |
|---|
| 413 | Going the Extra Mile: Travel Rewards Turn into Underground Currency. | Mar 12, 3:10 pm |
|---|
| 414 | Telus Digital confirms breach after hacker claims 1 petabyte data theft | Mar 12, 3:10 pm |
|---|
| 415 | Apple patches older iPhones and iPads against Coruna exploits | Mar 12, 2:10 pm |
|---|
| 416 | Attackers Don't Just Send Phishing Emails. They Weaponize Your SOC's Workload | Mar 12, 12:10 pm |
|---|
| 417 | US charges another ransomware negotiator linked to BlackCat attacks | Mar 12, 12:10 pm |
|---|
| 418 | Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit | Mar 12, 11:10 am |
|---|
| 419 | Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets | Mar 12, 9:10 am |
|---|
| 420 | CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed | Mar 12, 6:10 am |
|---|
| 421 | When your IoT Device Logs in as Admin, It?s too Late! [Guest Diary], (Wed, Mar 11th) | Mar 12, 2:10 am |
|---|
| 422 | ISC Stormcast For Thursday, March 12th, 2026 https://isc.sans.edu/podcastdetail/9846, (Thu, Mar 12th) | Mar 12, 2:10 am |
|---|
| 423 | SQLi flaw in Elementor Ally plugin impacts 250k+ WordPress sites | Mar 11, 8:10 pm |
|---|
| 424 | WhatsApp introduces parent-managed accounts for pre-teens | Mar 11, 8:10 pm |
|---|
| 425 | CISA orders feds to patch n8n RCE flaw exploited in attacks | Mar 11, 7:10 pm |
|---|
| 426 | Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes | Mar 11, 6:10 pm |
|---|
| 427 | Medtech giant Stryker offline after Iran-linked wiper malware attack | Mar 11, 6:10 pm |
|---|
| 428 | Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker | Mar 11, 5:10 pm |
|---|
| 429 | New PhantomRaven NPM attack wave steals dev data via 88 packages | Mar 11, 5:10 pm |
|---|
| 430 | Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials | Mar 11, 4:10 pm |
|---|
| 431 | Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown | Mar 11, 2:10 pm |
|---|
| 432 | Meta adds new WhatsApp, Facebook, and Messenger anti-scam tools | Mar 11, 2:10 pm |
|---|
| 433 | What Boards Must Demand in the Age of AI-Automated Exploitation | Mar 11, 1:10 pm |
|---|
| 434 | Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices | Mar 11, 1:10 pm |
|---|
| 435 | Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days | Mar 11, 10:10 am |
|---|
| 436 | Analyzing "Zombie Zip" Files (CVE-2026-0866), (Wed, Mar 11th) | Mar 11, 10:10 am |
|---|
| 437 | UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours | Mar 11, 9:10 am |
|---|
| 438 | Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets | Mar 11, 6:10 am |
|---|
| 439 | Microsoft Patch Tuesday, March 2026 Edition | Mar 11, 2:10 am |
|---|
| 440 | ISC Stormcast For Wednesday, March 11th, 2026 https://isc.sans.edu/podcastdetail/9844, (Wed, Mar 11th) | Mar 11, 2:10 am |
|---|
| 441 | New ‘BlackSanta’ EDR killer spotted targeting HR departments | Mar 10, 11:10 pm |
|---|
| 442 | New BeatBanker Android malware poses as Starlink app to hijack devices | Mar 10, 10:10 pm |
|---|
| 443 | New 'Zombie ZIP' technique lets malware slip past security tools | Mar 10, 8:10 pm |
|---|
| 444 | Microsoft releases Windows 10 KB5078885 extended security update | Mar 10, 7:10 pm |
|---|
| 445 | FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials | Mar 10, 6:10 pm |
|---|
| 446 | HPE warns of critical AOS-CX flaw allowing admin password resets | Mar 10, 6:10 pm |
|---|
| 447 | Microsoft Patch Tuesday March 2026, (Tue, Mar 10th) | Mar 10, 6:10 pm |
|---|
| 448 | Windows 11 KB5079473 & KB5078883 cumulative updates released | Mar 10, 6:10 pm |
|---|
| 449 | Microsoft March 2026 Patch Tuesday fixes 2 zero-days, 79 flaws | Mar 10, 6:10 pm |
|---|
| 450 | KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet | Mar 10, 5:10 pm |
|---|
| 451 | Microsoft brings phishing-resistant Windows sign-ins via Entra passkeys | Mar 10, 4:10 pm |
|---|
| 452 | The New Turing Test: How Threats Use Geometry to Prove 'Humanness' | Mar 10, 3:10 pm |
|---|
| 453 | New KadNap botnet hijacks ASUS routers to fuel cybercrime proxy network | Mar 10, 3:10 pm |
|---|
| 454 | New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries | Mar 10, 2:10 pm |
|---|
| 455 | APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military | Mar 10, 12:10 pm |
|---|
| 456 | The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction | Mar 10, 12:10 pm |
|---|
| 457 | CISA: Recently patched Ivanti EPM flaw now actively exploited | Mar 10, 12:10 pm |
|---|
| 458 | How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows | Mar 10, 12:10 pm |
|---|
| 459 | Microsoft to enable Windows hotpatch security updates by default | Mar 10, 11:10 am |
|---|
| 460 | APT28 hackers deploy customized variant of Covenant open-source tool | Mar 10, 10:10 am |
|---|
| 461 | Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool | Mar 10, 9:10 am |
|---|
| 462 | CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited | Mar 10, 8:10 am |
|---|
| 463 | ISC Stormcast For Tuesday, March 10th, 2026 https://isc.sans.edu/podcastdetail/9842, (Tue, Mar 10th) | Mar 10, 2:10 am |
|---|
| 464 | Microsoft Teams phishing targets employees with A0Backdoor malware | Mar 10, 12:10 am |
|---|
| 465 | Microsoft Teams phishing targets employees with backdoors | Mar 9, 11:10 pm |
|---|
| 466 | Dutch govt warns of Signal, WhatsApp account hijacking attacks | Mar 9, 10:10 pm |
|---|
| 467 | Google: Cloud attacks exploit flaws more than weak credentials | Mar 9, 10:10 pm |
|---|
| 468 | Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials | Mar 9, 7:10 pm |
|---|
| 469 | Ericsson US discloses data breach after service provider hack | Mar 9, 7:10 pm |
|---|
| 470 | ShinyHunters claims ongoing Salesforce Aura data theft attacks | Mar 9, 6:10 pm |
|---|
| 471 | Microsoft Teams will tag third-party bots trying to join meetings | Mar 9, 6:10 pm |
|---|
| 472 | UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device | Mar 9, 4:10 pm |
|---|
| 473 | FBI warns of phishing attacks impersonating US city, county officials | Mar 9, 4:10 pm |
|---|
| 474 | ⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware | Mar 9, 3:10 pm |
|---|
| 475 | Microsoft still working to fix Windows Explorer white flashes | Mar 9, 3:10 pm |
|---|
| 476 | Why Password Audits Miss the Accounts Attackers Actually Want | Mar 9, 3:10 pm |
|---|
| 477 | Encrypted Client Hello: Ready for Prime Time?, (Mon, Mar 9th) | Mar 9, 3:10 pm |
|---|
| 478 | Can the Security Platform Finally Deliver for the Mid-Market? | Mar 9, 12:10 pm |
|---|
| 479 | Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft | Mar 9, 11:10 am |
|---|
| 480 | Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure | Mar 9, 8:10 am |
|---|
| 481 | ISC Stormcast For Monday, March 9th, 2026 https://isc.sans.edu/podcastdetail/9840, (Mon, Mar 9th) | Mar 9, 2:10 am |
|---|
| 482 | How AI Assistants are Moving the Security Goalposts | Mar 9, 12:10 am |
|---|
| 483 | EU court adviser says banks must immediately refund phishing victims | Mar 8, 4:10 pm |
|---|
| 484 | Hackers abuse .arpa DNS and ipv6 to evade phishing defenses | Mar 8, 3:10 pm |
|---|
| 485 | OpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues | Mar 7, 6:10 pm |
|---|
| 486 | Termite ransomware breaches linked to ClickFix CastleRAT attacks | Mar 7, 5:10 pm |
|---|
| 487 | Microsoft: Hackers abusing AI at every stage of cyberattacks | Mar 7, 4:10 pm |
|---|
| 488 | Anthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI Model | Mar 7, 1:10 pm |
|---|
| 489 | YARA-X 1.14.0 Release, (Sat, Mar 7th) | Mar 7, 10:10 am |
|---|
| 490 | Cognizant TriZetto breach exposes health data of 3.4 million patients | Mar 6, 8:10 pm |
|---|
| 491 | CISA warns feds to patch iOS flaws exploited in crypto-theft attacks | Mar 6, 5:10 pm |
|---|
| 492 | Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT | Mar 6, 4:10 pm |
|---|
| 493 | Transparent Tribe Uses AI to Mass-Produce Malware Implants in Campaign Targeting India | Mar 6, 4:10 pm |
|---|
| 494 | CISA warns of Apple flaws exploited in spyware, crypto-theft attacks | Mar 6, 4:10 pm |
|---|
| 495 | Microsoft 365 Backup to add file-level restore for faster recovery | Mar 6, 3:10 pm |
|---|
| 496 | Fake Claude Code install guides push infostealers in InstallFix attacks | Mar 6, 3:10 pm |
|---|
| 497 | EC-Council Expands AI Certification Portfolio to Strengthen U.S. AI Workforce Readiness and Security | Mar 6, 3:10 pm |
|---|
| 498 | Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor | Mar 6, 11:10 am |
|---|
| 499 | The MSP Guide to Using AI-Powered Risk Management to Scale Cybersecurity | Mar 6, 11:10 am |
|---|
| 500 | China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks | Mar 6, 10:10 am |
|---|
