Latest news
-
Threat Intel via The Hacker News
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting…
-
Vulnerabilities via CISA
Critical Vulnerabilities in PHP Require Immediate Patching
CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These…
-
Ransomware via Infosecurity Magazine
Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
Cybercriminal groups The Gentlemen and Qilin dominate ransomware attacks - and both are evolving their tactics in an attempt to outdo one another
-
AI Security via The Hacker News
Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports
Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now…
-
Breaches via ransomware.live
🏴☠️ Hyflock has just published a new victim : gabonmeca.com leak incident
gabonmeca.com is a large, comprehensive office supplies and IT equipment retail and service company in the African country of Gabon, with the corporate slogan 'La…
-
Breaches via ransomware.live
🏴☠️ Hyflock has just published a new victim : dangvuongcac
We got their hotel room info and all kinds of chat records.,,dangvuongcac.com (commonly called Teng Wang Ge or Tengwang Pavilion in Chinese) is a very well-known…
-
Threat Intel via GuidePoint Security
Protecting Against AiTM Attacks: Is Your Microsoft Environment at Risk?
Protecting Against AiTM Attacks: Is Your Microsoft Environment at Risk? October 21, 2026 Nick Schmitz BLOG 5 min. The identity threat landscape has shifted considerably…
-
Vulnerabilities via Malwarebytes Labs
Signal bug could let someone keep listening after you hang up
A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as…
- Advertisement
-
AI Security via GuidePoint Security
AI Agents Are Redefining Credential Management
AI Agents Are Redefining Credential Management October 21, 2026 GuidePoint Security By Dave Lewis, Global Advisory CISO, 1Password BLOG 5 min. It should come as no…
-
Breaches via SecurityWeek
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.
-
Ransomware via Help Net Security
Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June
Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations…
-
Threat Intel via Schneier on Security
Workshop on Economics and Information Security (WEIS) Archive
There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my…
-
Breaches via Infosecurity Magazine
SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns
A new CISA advisory warns of the threat posed by SafePay to businesses and critical infrastructure, and urges defenders to take action to mitigate the group’s tactics
-
AI Security via SecurityWeek
China Defends DeepSeek After US Ban of Its AI From Government Systems
The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems.
-
Vulnerabilities via SOCRadar
PHP2Shell: CVE-2026-109618 & CVE-2026-109619
PHP2Shell is the name researchers now use for two critical vulnerabilities in PHP, the server-side language behind WordPress, Drupal, Magento, Laravel, and many custom…
-
Vulnerabilities via The Hacker News
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own…
-
AI Security via The Hacker News
The Harness Is the Hard Part of Agentic Pentesting
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that…
-
Vulnerabilities via NCSC UK
Critical security issue affecting PHP
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
-
Threat Intel via The Hacker News
Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #103
engineering design and installations · Portugal | [PENDING EXPOSURE]