Latest news

Advertisement
  1. Vulnerabilities via CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2024-27834 Apple Multiple…

  2. Ransomware via Infosecurity Magazine

    3AM Ransomware Used Human-AI Hybrid Tactics in UK School Estate Compromise

    Bitdefender highlighted a unique human-AI approach during a September attack on a UK school estate, which resulted in financial data being exfiltrated

  3. Vulnerabilities via Qualys

    CISA Warns of WordPress Vulnerability Exploited in the Wild (CVE-2026-119977)

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a WordPress core vulnerability to the Known Exploited Vulnerabilities catalog. CISA urges…

  4. Breaches via HIPAA Journal

    Data Breaches Announced by HCA Healthcare; Blossom Health

    Data breaches have been announced by HCA Healthcare, Blossom Health, El Camino Health, and University of Mississippi Medical Center. HCA Healthcare Inc. Nashville…

  5. Vulnerabilities via The Hacker News

    Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory

    Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 is the VM…

  6. AI Security via The Hacker News

    Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It

    Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent, the kind whose…

  7. Threat Intel via The Hacker News

    China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor

    A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in…

  8. Threat Intel via Help Net Security

    Poisoned cPGuard update hits thousands of web hosting servers

    An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to nearly 3,000…

  9. Advertisement
  10. Breaches via HIPAA Journal

    University Hospitals Working on Restoring Systems After Cyberattack

    University Hospitals is working on restoring systems after an October 22 cyberattack. Cybersecurity incidents have also been announced by EyeMed Vision Care and Facial…

  11. Threat Intel via Infosecurity Magazine

    Police Seize 100+ Servers After Four-Year Investment Fraud Probe

    A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme

  12. Breaches via HIPAA Journal

    $2 Million Settlement Resolves Covenant Health Data Breach Lawsuit

    Covenant Health, St. Joseph Healthcare Foundation, St. Joseph Hospital, St.

  13. Threat Intel via SecurityWeek

    Malicious cPGuard Updates Served in OpsShield Supply Chain Attack

    Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

  14. Vulnerabilities via SecurityWeek

    Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

    The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.

  15. Threat Intel via SecurityWeek

    Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist

    Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

  16. Threat Intel via Help Net Security

    Fake job interview opened the door to $6.34 billion Binance heist

    A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a…

  17. Vulnerabilities via Security Affairs

    CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

    Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed…

  18. Threat Intel via ESET WeLiveSecurity

    SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

    ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method

  19. Breaches via ransomware.live

    🏴☠️ Rhysida has just published a new victim : Juge, Napolitano, Ruli, Putfark & Pittman

    Juge, Napolitano, Ruli, Putfark & Pittman Juge, Napolitano, Ruli, Putfark & Pittman / 'WC Defense' - insurer & corporate defense law firm.The Juge Firm (Metairie /…

  20. Ransomware via ransomware.live

    🏴☠️ Pear has just published a new victim : gWorks

    A technology company specializing in software solutions designed to help small towns and rural areas make effective use of software and technology

  21. Ransomware via ransomware.live

    🏴☠️ Pear has just published a new victim : Palm Vascular Centers

    A company specializing in collaboration with interventional radiologists and vascular surgeons