Latest news

Advertisement
  1. Threat Intel via Wired

    The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe

    With no accurate Big Tech mapping app to help him, Anas Hattab launched a Telegram group to get himself home at night. Now nearly 350,000 Palestinians rely on it to…

  2. AI Security via Adversa AI

    Top MCP security resources — October 2026

    MCP security in October 2026: an MCP auth bypass in LiteLLM joins CISA's KEV list, Grafana MCP session spoofing, and malicious servers that pass five scanners.

  3. Threat Intel via SOCRadar

    SOCRadar Freshdesk Integration: Track and Resolve Security Incidents as Tickets

    SOCRadar Freshdesk Integration: Track and Resolve Security Incidents as Tickets SOCRadar Incident Sync: new incidents are pulled every five minutes and opened as…

  4. Threat Intel via ESET WeLiveSecurity

    MATCHBOIL: New tricks, same old evil intentions

    ESET Research catalogs the changes of UAC-0099’s MATCHBOIL downloader from 2024 to 2026

  5. Threat Intel via Infosecurity Magazine

    FBI and Secret Service Warn of FortiBleed Lockout Threat

    The FBI and Secret Service are warning Fortigate admins that their systems are still being targeted

  6. Vulnerabilities via NCSC-NL

    NCSC-2026-0407 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco License On-Prem

    Cisco heeft meerdere kwetsbaarheden verholpen in Cisco License On-Prem. De kwetsbaarheden bevinden zich in de webgebaseerde managementinterface en API-eindpunten van…

  7. Breaches via SecurityWeek

    Oracle Health Data Breach Tally Climbs to Nearly 20 Million

    The figure is far higher than the counts that surfaced in earlier filings and patient notifications.

  8. Vulnerabilities via NCSC-NL

    NCSC-2026-0406 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco NX-OS Software

    Cisco heeft meerdere kwetsbaarheden verholpen in Cisco NX-OS Software.

  9. Advertisement
  10. Ransomware via Help Net Security

    Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims

    The owner of Florida-based ransomware remediation company MonsterCloud has been charged with fraud for allegedly paying ransomware gangs behind his clients’ backs and…

  11. Threat Intel via SecurityWeek

    FortiBleed Attackers Locking Victims Out of Fortinet Devices

    Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access.

  12. Threat Intel via The Hacker News

    U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

    The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United…

  13. Ransomware via The Hacker News

    MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

    The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by…

  14. Vulnerabilities via Security Affairs

    Atlassian Vulnerability Comes Under Attack Hours After Details Go Public

    Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors have started…

  15. Breaches via HIPAA Journal

    Almost 20 Million Individuals Affected by 2025 Data Breach at Oracle Health/Cerner

    The scale of a 2025 data breach involving electronic protected health information stored on Oracle Health’s legacy Cerner servers is becoming clearer. While not…

  16. Vulnerabilities via BleepingComputer

    Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland

    On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities.

  17. AI Security via Help Net Security

    Pricing your bad days and how to build an economic model for security decisions

    Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests…

  18. Breaches via The Hacker News

    Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

    The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of…

  19. AI Security via Help Net Security

    Who watches the AI watching your street?

    Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His…

  20. AI Security via ransomware.live

    🏴☠️ Storm has just published a new victim : Cooperative Des Techniciens Ambulanciers De La Monte

    CETAM is the largest employer in prehospital care in Montérégie, comprising over 400 ambulance technicians and paramedics. Founded in 1988, it operates on a cooperative…

  21. Ransomware via ransomware.live

    🏴☠️ Storm has just published a new victim : TheraCare

    TheraCare is a multi-service healthcare, rehabilitation, developmental, and educational organization founded in 1991 and headquartered in New York. The company provides…