Latest news
-
Threat Intel via DataBreaches.net
Alleged ATM malware creator appears in Nebraska court after arrest
Jonathan Greig reports: The alleged mastermind behind a strain of malware used to empty ATMs of millions of dollars appeared in court for the first time after being…
-
Threat Intel via DataBreaches.net
De Kalb County, Indiana fell prey to vendor impersonation billing
The Star reports that the DeKalb County government fell victim to a cybersecurity incident for the second time in little more than a year. This time, it paid an invoice…
-
Vulnerabilities via Rapid7
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
OverviewOn October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products…
-
AI Security via The Hacker News
The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow
The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are…
-
Threat Intel via Infosecurity Magazine
Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading
A Group-IB researcher has found the Telegram account linked to the unauthorized ASOS customer notification previously engaged in gaming-item trading
-
Threat Intel via The Hacker News
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat…
-
Breaches via SOCRadar
FortiBleed Is Still Active, Locking Organizations Out
FortiBleed Is Still Active, Locking Organizations Out On October 6, 2026, the FBI and the U.S. Secret Service published a joint Cybersecurity Advisory on FortiBleed, the…
-
Vulnerabilities via The Hacker News
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under…
- Advertisement
-
AI Security via The Hacker News
What Is Agentic Pentesting? What It Proves, and Where It Stops.
If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates…
-
Vulnerabilities via BleepingComputer
SonicWall warns of max severity SSRF flaw in SMA1000 gateways
SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances.
-
Vulnerabilities via SOCRadar
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation
NetScaler C2: A Massive CVE-2026-88771 Exploitation Operation On September 27, 2026, Citrix released a security bulletin regarding multiple vulnerabilities in Citrix…
-
Ransomware via ransomware.live
🏴☠️ Umbra has just published a new victim : SANAtech Global Solutions
SANAtech Global Solutions is an Egypt-based IT services and software development company located in Cairo, delivering customized technology solutions with a dedicated…
-
Ransomware via ransomware.live
🏴☠️ Umbra has just published a new victim : Raqib
Raqib is a Saudi cybersecurity and digital surveillance company based in Riyadh, providing monitoring and security solutions with a small dedicated team.
-
Breaches via Help Net Security
Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains
Attackers who took control of three country-code top-level domains (ccTLDs) used that access to obtain HTTPS certificates for several Google domains and for domains run…
-
Threat Intel via Schneier on Security
Apple’s Verified Photography System
Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or…
-
AI Security via Malwarebytes Labs
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
In August, the Malwarebytes research team reported on a new malicious turnkey kit that makes it possible for almost anyone to launch a sophisticated online scam. The kit…
-
Vulnerabilities via SecurityWeek
Chrome 155 Update Patches 247 Vulnerabilities
Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track.
-
Vulnerabilities via Rapid7
The ASOS incident: When attackers use the channels customers trust
ASOS customers opened their phones to find a hostile push notification delivered through the retailer’s own app. The message claimed the company’s Snowflake environment…
-
Vulnerabilities via Help Net Security
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)
SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote…
-
AI Security via BleepingComputer
Musician sent to prison for $10 million streaming fraud using AI bots
A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube…