Latest news

Advertisement
  1. Breaches via oss-security

    Unpatched credential leak in kubernetes/cloud-provider-gcp (auth-provider-gcp) - CVE requested (CAN-2026-2039459)

    Posted by Nebojša Jaćović on Oct 12 Hi, I'm disclosing a vulnerability in kubernetes/cloud-provider-gcp that I reported to Google Cloud VRP on 2026-06-14 (Issue…

  2. Threat Intel via DataBreaches.net

    Co-Creator of Dark Web Marketplace Sentenced to 40 Years in Federal Prison

    40 + 40=80. That’s how old Raheim Hamilton will be when he gets out of prison if he serves his full sentence. There’s an update to a previously reported case.

  3. Threat Intel via The Record

    Ukraine strikes third Yandex data center, disrupting digital services across Russia

    A third Yandex data center in Russia was hit by Ukrainian drones over the weekend, forcing it to shut down and causing further disruptions to cloud services, payments…

  4. Threat Intel via SecurityWeek

    Canonical Websites Disrupted in Second DDoS Attack This Year

    The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal

  5. Vulnerabilities via BleepingComputer

    Microsoft: Windows 11 23H2 reaches end of support in 30 days

    Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month.

  6. Threat Intel via Infosecurity Magazine

    Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted

    The CEO of Cooperative U confirmed a cyber-attack affected the food stock in several stores from October 11

  7. AI Security via The Hacker News

    Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

    The personal AI agents rollout is going about as smoothly as expected: Amazon now blocks Meta's Muse because it doesn't identify itself as a bot while browsing; Instinct…

  8. Vulnerabilities via NCSC-NL

    NCSC-2026-0413 [1.01] [M/H] Kwetsbaarheden verholpen in HPE Networking AOS-Switch

    HPE Networking, onder andere bekend als HPE Aruba Networking, heeft meerdere kwetsbaarheden verholpen in de HPE Networking AOS-Switch (AOS-S). De kwetsbaarheden bevinden…

  9. Advertisement
  10. Breaches via HIPAA Journal

    Etairos Health Settles Ransomware-Related Class Action Lawsuit

    Etairos Health has agreed to settle class action litigation stemming from a February 20, 2024, ransomware attack and data breach that exposed the personal information of…

  11. Threat Intel via SecurityWeek

    Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US

    Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US.

  12. Threat Intel via The Hacker News

    Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

    Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via Cryptobilis following reports of stolen funds linked to devices sold by the…

  13. Breaches via SecurityWeek

    iRhythm Data Breach Impacts at Least 360,000 People

    Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.

  14. Ransomware via ransomware.live

    🏴☠️ Dragonforce has just published a new victim : Canadian Mennonite University (CMU)

    Canadian Mennonite University (CMU) is a Christian institution in Winnipeg, Manitoba, offering undergraduate degrees in various fields such as arts, business, music, and…

  15. AI Security via Help Net Security

    Microsoft’s new model helps AI agents judge their next move

    Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each…

  16. Threat Intel via Wired

    Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer

    Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota state Senate…

  17. AI Security via Malwarebytes Labs

    Phishing emails are baiting your AI assistant

    You ignored the suspicious email. You didn’t open the attachment, click the link, or reply to the sender. Then you asked your AI assistant to summarize your inbox.

  18. Threat Intel via Help Net Security

    Low-cost Android phones are arriving with malware that owners can’t uninstall

    People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The…

  19. Vulnerabilities via SOCRadar

    CVE-2026-102255: Critical SonicWall SMA1000 SSRF

    CVE-2026-102255: Critical SonicWall SMA1000 SSRF SonicWall has patched CVE-2026-102255, a critical pre-authentication Server-Side Request Forgery (SSRF) vulnerability…

  20. Vulnerabilities via The Hacker News

    Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

    Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public…

  21. Ransomware via SecurityWeek

    Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

    The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.