Latest news
-
Threat Intel via Malwarebytes Labs
Fake Calendly “Meta Careers” pages steal Facebook and Google logins
We found a wave of websites posing as Calendly booking pages for job interviews at Meta. Visitors pick a slot for a 30-minute phone call with a recruiter, fill in their…
-
Threat Intel via The Hacker News
Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched…
-
Vulnerabilities via HIPAA Journal
Ivanti Connect Secure Zero Day Exploited in Attacks
A high-severity authentication bypass vulnerability has been identified in the Ivanti Connect Secure (Pulse Connect Secure) enterprise-grade SSL VPN that can allow a…
-
AI Security via Wiz
Securing the Mission at Machine Speed: Wiz AI Agents Arrive in Wiz for Gov
Wiz AI Agents elevate traditional CNAPP, empowering public sector security teams to accelerate security and innovation.
-
AI Security via The Hacker News
An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI…
-
Breaches via Trail of Bits
Package managers have an integrity problem
I tested 25 of the most popular package managers to check whether they detect a compromised package repository injecting malicious code into legitimate packages. This…
-
Threat Intel via SecurityWeek
US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
-
Breaches via ransomware.live
🏴☠️ Emperador has just published a new victim : MyM ODONTOCLINICA S.A
Сompany from Paraguay operating in the field of dentistry. Financial documents, personal and customer data. The archive contains the most important documents [Sector…
- Advertisement
-
Threat Intel via Help Net Security
Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers
People who have shopped with Phase Eight, Hobbs or Whistles will have to wait to find out whether their personal information was exposed in a cyberattack on the company…
-
Vulnerabilities via BleepingComputer
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator…
-
AI Security via Malwarebytes Labs
Police receive fake murder tip from Anthropic’s Claude AI
Police tip hotlines already have their fair share of crank callers. Apparently they now have to contend with crank AI agents as well. AI agents have already been caught…
-
Threat Intel via Hudson Rock
Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation Platform
Partnership Announcement October 14, 2026 · Cybercrime Intelligence Hudson Rock Partners with TRM Labs as a Launch Data Partner for Ardence, the New AI Investigation…
-
AI Security via Help Net Security
Radware MCP Server Protection monitors agent activity and guards against protocol abuse
Radware has announced Radware Model Context Protocol (MCP) Server Protection, a purpose-built solution designed to help organizations more securely adopt MCP as AI…
-
AI Security via Help Net Security
SolarWinds Avior pairs IT automation with human approval and audit trails
SolarWinds has announced the launch of Avior, a standalone, goal-oriented agentic AI system purpose-built for mission-critical IT environments. Built on the SolarWinds…
-
Vulnerabilities via Help Net Security
Chainguard Harness uses frontier AI to test running applications for vulnerabilities
Chainguard has announced Chainguard Harness, a new cyber harness that uses frontier AI models like Anthropic’s Claude Mythos 5.1 to find and fix exploitable…
-
Vulnerabilities via Security Affairs
Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities
Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise. On October 5, Volexity started…
-
Threat Intel via Infosecurity Magazine
Passkey Authentications Double but Adoption Remains Slow
Dashlane data finds that passkey adoption is growing but not quickly enough
-
AI Security via Help Net Security
Scytale MCP gives AI tools scoped, read-only access to compliance data
Scytale has announced the launch of Scytale MCP, a Model Context Protocol server that connects a customer’s AI tools directly to their compliance program. With Scytale…
-
Breaches via HIPAA Journal
Twin Cities Pain Clinic Settles Data Breach Litigation
Twin Cities Pain Clinic, an Edina, Minnesota-based pain management center, has settled class action litigation arising from a July 2025 data incident that exposed…
-
Breaches via ransomware.live
🏴☠️ Aurora has just published a new victim : Estrategias BigMat S.L.U.
[distribution] Estrategias BigMat S.L.U. — the Spanish master franchisee of BigMat International, a French cooperative and one of Europe's largest building materials…