News Feed
Updates every 30 minutes - Generated via RSS feed on: 2026-10-10 07:00:04 UTC Feedback and suggestions for other sources are welcome.
2026-10-10 #
- 06:58 UTC -
[Cyber Security News] One Prompt Could Hijack AWS AI Agents and Steal Cloud Credentials - 05:49 UTC - [Cyber Security News] Microsoft Teams to Warn Users About Malicious Links Hidden in QR Codes
- 04:57 UTC - [Cyber Security News] AT&T to Pay $177 Million After Two Massive Customer Data Breaches
- 00:17 UTC -
[Krebs on Security] FBI Arrests Founder of Ransomware Negotiation Firm
2026-10-09 #
- 21:07 UTC -
[SecurityWeek] OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks - 20:58 UTC -
[darkreading] ASOS Breach Reveals the Risks in Customer-Facing SaaS - 20:31 UTC -
[BleepingComputer] Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks - 19:26 UTC - [darkreading] AI Scramble Drives Cybersecurity M&A Boom
- 19:14 UTC -
[The Hacker News] Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories - 17:45 UTC - [The Hacker News] FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
- 17:31 UTC -
[watchTowr Labs] Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) - 17:31 UTC - [0day Fans] Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
- 17:21 UTC - [darkreading] What We Missed: FBI Strikes Back at ShinyHunters
- 17:17 UTC - [BleepingComputer] Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
- 17:15 UTC - [Cyber Security News] AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication
- 17:02 UTC - [BleepingComputer] FBI arrests another suspected ShinyHunters hacker after agency breach
- 16:38 UTC - [Cyber Security News] New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
- 16:29 UTC - [The Hacker News] P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
- 16:25 UTC - [darkreading] Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
- 16:25 UTC - [darkreading] Security Threats Don't Stop at the Office: Why Executives' Families Need Training Too
- 16:06 UTC - [Cyber Security News] New Agentic AI Red Team Checklist Adds 222 Tests Across 20 Attack Categories
- 15:38 UTC - [BleepingComputer] Germany arrests alleged core Qilin ransomware member after extradition
- 15:00 UTC -
[All Fortinet Blog | Latest Posts] Leveraging MITRE ATT&CK TTPs for Threat-Informed SecOps: A Fortinet Perspective - 14:47 UTC - [Cyber Security News] CastleStealer Malware Uses Browser Protection Bypass and Remote Shell to Expand Attacker Access
- 14:35 UTC -
[Graham Cluley] $10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack - 14:29 UTC - [Cyber Security News] Cisco Talos Warns Autonomous AI Agents Could Turn Pentests Into Stealthy Red Team Attacks
- 14:16 UTC -
[Cybersecurity Dive - Latest News] FBI seizes domains linked to China-nexus botnet - 14:01 UTC - [BleepingComputer] How to keep AI agents within their permissions
- 13:50 UTC -
[DataBreaches.Net] Silent Ransom Group claims “Luna Moth Files” are fake. The data suggest otherwise. - 13:22 UTC - [The Hacker News] TP-Link Sued by Four More U.S. States Over Router Security and China Ties
- 13:20 UTC - [Cyber Security News] Hackers Abuse Trusted Terraform Workflows to Infect Developer Systems With Cross-Platform Malware
- 13:05 UTC -
[Latest from TechRadar in Security] Microsoft Teams will soon be able to spot third-party deepfakes on your morning meeting - 13:00 UTC - [darkreading] Social Engineering AI Agents: The New BEC for 2026
- 12:59 UTC - [The Hacker News] Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
- 12:47 UTC - [The Hacker News] Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
- 12:47 UTC - [The Hacker News] Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
- 12:32 UTC - [BleepingComputer] Max severity SonicWall SMA1000 flaw now exploited in attacks
- 12:32 UTC - [Cyber Security News] Warden Stealer Spreads Through ClickFix, Malvertising, Cracked Software and Game Cheats
- 12:21 UTC - [The Hacker News] Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
- 12:03 UTC - [SecurityWeek] In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
- 12:00 UTC - [Cybersecurity Dive - Latest News] As frontier models go rogue, colleges beef up AI cybersecurity education
- 11:43 UTC - [SecurityWeek] Google Domains Impacted by Recent ccTLD Hijacks
- 11:30 UTC - [The Hacker News] The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
- 11:23 UTC - [DataBreaches.Net] Cyberattack at IDC Frontier disrupts services around nation
- 11:14 UTC - [BleepingComputer] Man admits to running network of 15,000 money mules for cybercriminals
- 11:05 UTC - [Latest from TechRadar in Security] In open source cybersecurity, AI is kind of a problem — but it can also be a solution
- 10:55 UTC - [Latest from TechRadar in Security] Why identity needs a heartbeat, not a checkpoint
- 10:23 UTC - [SecurityWeek] Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
- 10:12 UTC - [BleepingComputer] Microsoft: Outdated Windows devices will stop receiving security updates
- 10:10 UTC - [Cyber Security News] MATCHBOIL Malware Uses Cloudflare-Hidden C2 Servers to Deliver Backdoor Payloads
- 09:55 UTC - [SecurityWeek] Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries
- 09:54 UTC - [Cyber Security News] PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
- 09:28 UTC - [Cyber Security News] Top 10 Best Container Image Scanning Tools in 2026 [Ranked & Scored]
- 09:17 UTC - [Latest from TechRadar in Security] Beyond the vault: Who's responsible for what banking sites share?
- 09:03 UTC - [The Hacker News] GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
- 08:52 UTC - [Cyber Security News] New Anthropic OSS Scanner Tool to Scan Open-source Repositories for Vulnerabilities
- 08:36 UTC - [SecurityWeek] US Disrupts Chinese State-Sponsored Hacking Tools
- 08:33 UTC - [Cyber Security News] Top 10 Best Bug Bounty Platforms in 2026 [Ranked & Scored]
- 08:32 UTC - [Cyber Security News] Let’s Encrypt Cuts TLS Certificate Lifetimes From 90 to 64 Days Starting February 2027
- 08:27 UTC - [BleepingComputer] Citrix warns admins to patch new NetScaler RCE flaw immediately
- 08:27 UTC - [Cyber Security News] Top 10 Best IaC Security Tools in 2026 [Ranked & Scored]
- 08:26 UTC - [The Hacker News] Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
- 08:22 UTC - [Cyber Security News] Microsoft Says PKI, HSMs and Security Appliances Must Prepare for Post-Quantum Authentication
- 08:19 UTC - [SecurityWeek] Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
- 08:11 UTC - [The Hacker News] Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
- 07:47 UTC - [Cyber Security News] VirusTotal Adds Scanning for Public IPv4 Space to Expose C2 Servers and Malware Infrastructure
- 07:06 UTC -
[Have I Been Pwned latest breaches] Neogen - 435,963 breached accounts - 06:53 UTC - [SecurityWeek] Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
- 06:39 UTC - [SecurityWeek] Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own
- 06:39 UTC - [The Hacker News] FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
- 06:35 UTC - [Cyber Security News] Leaked Chat Logs Show Silent Ransomware Extorted Over $200,000,000 in 6 Months Without Encrypting Data
- 06:25 UTC - [Cyber Security News] Malicious PDF Reader With 10,000+ Installs on Google Play Delivers Anatsa Banking Trojan
- 05:52 UTC - [Cyber Security News] React Server Components Flaw Lets Attackers Freeze Next.js Servers With a Single POST Request
- 05:41 UTC - [BleepingComputer] Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
- 04:12 UTC - [SecurityWeek] Formula Predicts When AI Chatbots Are at Risk of Turning Bad
- 03:11 UTC - [Cyber Security News] Anthropic Cyber Mission to Support Defenders with Tools, Research, and Resources
- 02:24 UTC - [Cyber Security News] FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers
- 01:50 UTC - [Cyber Security News] Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
2026-10-08 #
- 21:42 UTC - [BleepingComputer] FBI disrupts Chinese hacking tools used to breach critical infrastructure
- 21:41 UTC -
[CyberScoop] Leader of 764 pleads guilty, faces up to 30 years in prison - 21:32 UTC - [CyberScoop] Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
- 20:44 UTC -
[Microsoft Security Blog] Post-quantum authentication: Why organizations should start testing certificate ecosystems now - 20:39 UTC - [darkreading] 'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
- 20:39 UTC - [darkreading] 'AgentCorruption' Puts AWS Environments At Risk With Single Prompt
- 20:09 UTC - [BleepingComputer] Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
- 20:02 UTC - [CyberScoop] DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
- 19:44 UTC - [CyberScoop] Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
- 19:20 UTC - [BleepingComputer] Low-cost Android phones ship with residential proxy malware
- 19:08 UTC - [darkreading] Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
- 18:32 UTC - [The Hacker News] FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
- 18:01 UTC - [darkreading] Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
- 17:58 UTC - [The Hacker News] ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
- 17:44 UTC - [CyberScoop] OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
- 17:10 UTC - [BleepingComputer] FakeGit malware campaign returns with 17,610 malicious GitHub repos
- 16:05 UTC - [Latest from TechRadar in Security] 'This is a first for us': Attackers uses poem to infect thousands of servers with malware
- 15:50 UTC - [Cyber Security News] Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets
- 15:45 UTC - [The Hacker News] Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
- 15:33 UTC - [Cyber Security News] Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts
- 15:28 UTC - [SecurityWeek] Cisco Patches a Dozen Critical Vulnerabilities
- 15:26 UTC - [The Hacker News] UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
- 15:26 UTC - [BleepingComputer] Cisco warns of critical flaws allowing Nexus switch takeover
- 15:26 UTC - [Cyber Security News] Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases
- 15:15 UTC - [Latest from TechRadar in Security] CIA officer said he was developing hacking tools, but actually stole $190 million in top secret fraud scam
- 15:13 UTC - [Latest from TechRadar in Security] Digital sovereignty has become Europe’s top priority — here's how open source is helping pave the way
- 15:10 UTC - [Cyber Security News] Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks
- 15:06 UTC - [Cyber Security News] DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
- 15:00 UTC - [darkreading] [Virtual Event] Building a Secure AI Strategy for the Enterprise
- 15:00 UTC - [All Fortinet Blog | Latest Posts] 3 Key Takeaways from the Fortinet SASE Summit 2026
- 15:00 UTC - [All Fortinet Blog | Latest Posts] 3 Key Takeaways from the Fortinet SASE Summit 2026
- 14:57 UTC - [Cyber Security News] Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords
- 14:52 UTC - [Cyber Security News] Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code
- 14:44 UTC - [Cyber Security News] Hackers Use Negative Hotel Reviews to Spread Malware That Hides C2 on Blockchain
- 14:34 UTC - [Cyber Security News] PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution
- 14:33 UTC - [Cybersecurity Dive - Latest News] What the C-suite needs to know about AI governance
- 14:30 UTC - [SecurityWeek] Security Awareness Training Isn’t Dead, but It Needs a Rethink
- 14:27 UTC - [Cyber Security News] PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution
- 14:20 UTC - [Latest from TechRadar in Security] Google says counterfeit TLS certificates of major services stolen by hackers
- 14:19 UTC - [Cyber Security News] Hackers Allegedly Selling VirusTotal API Keys on the Dark Web
- 14:19 UTC - [Cyber Security News] Hackers Use Web3 and Blockchain C2 to Hide Supply Chain Attacks Targeting Cloud Credentials
- 14:12 UTC - [The Hacker News] ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
- 14:08 UTC - [Cyber Security News] FBI Dismantles Scam Center in Ghana and Seizes 300+ Devices in Operation Blackout
- 14:04 UTC - [SecurityWeek] Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
- 14:01 UTC - [Cyber Security News] GitHub AI Can Spot Passwords Hidden in Code Before Developers Push Them
- 14:00 UTC - [BleepingComputer] OAuth grants pile up faster than you can review them. Here's how to keep up.
- 13:50 UTC - [Cyber Security News] Co-Creator of Dark Web Marketplace “Empire Market” Sentenced to 40 Years in Prison
- 13:18 UTC - [BleepingComputer] Uranium crypto exchange hacker convicted for stealing $53 million
- 12:55 UTC - [Cyber Security News] Hackers Exploit Critical Citrix NetScaler Flaw to Deploy Web Shells and Steal Configuration Data
- 12:46 UTC - [SecurityWeek] US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
- 12:37 UTC - [SecurityWeek] SonicWall and Splunk Patch Critical Vulnerabilities
- 12:33 UTC - [DataBreaches.Net] It Wasn’t Me, It Was the AI Agent” May Not Avoid Liability Under New Senate Proposal
- 12:32 UTC - [Cyber Security News] GhostAction Supply Chain Campaign Uses Malicious GitHub Actions to Steal CI/CD Credentials
- 12:25 UTC - [DataBreaches.Net] KR: Coupang files lawsuits against 620 billion won fine over data leak
- 12:08 UTC - [BleepingComputer] Microsoft Teams to get support for third-party deepfake detection tools
- 12:00 UTC - [darkreading] Writing the Next Chapter
- 12:00 UTC - [Cybersecurity Dive - Latest News] US government lagging in transition to post-quantum encryption, GAO finds
- 11:42 UTC - [BleepingComputer] ASOS links data breach to social engineering attack, credential theft
- 11:14 UTC - [Cyber Security News] Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data
- 11:11 UTC - [SecurityWeek] Rein Security Raises $25 Million to Guard AI Agents at Runtime
- 10:56 UTC - [Cyber Security News] Gitea Patches 27 Security Flaws, Including Critical SSH Authentication Bypass and SSRF
- 10:56 UTC - [Latest from TechRadar in Security] Cyber resilience isn't measured in firewalls. It's measured in minutes
- 10:30 UTC - [The Hacker News] Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
- 10:29 UTC - [BleepingComputer] Owner of Empire cybercrime market gets 40 years in prison
- 10:24 UTC - [SecurityWeek] TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
- 10:23 UTC - [Cyber Security News] wolfSSH 1.6.0 Fixes 5 Security Flaws Including Critical MITM Host Key Verification Bypass
- 10:11 UTC - [Cyber Security News] Royal Navy Service Member Charged with Spying for a Foreign Country
- 10:00 UTC - [CyberScoop] Quantum computers could break today’s encryption. Washington needs to prepare now.
- 09:53 UTC - [Latest from TechRadar in Security] The most dangerous attacker of the past year looked completely ordinary
- 09:46 UTC - [The Hacker News] 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
- 09:27 UTC - [SecurityWeek] Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
- 09:14 UTC - [Cyber Security News] Hackers Use GitHub-Hosted Poem to Control PoeLLM Malware Targeting AI Infrastructure
- 08:44 UTC - [Cyber Security News] Critical Cisco Nexus Flaws Let Unauthenticated Attackers Execute Code With Root Privileges
- 08:23 UTC - [SecurityWeek] Oracle Health Data Breach Tally Climbs to Nearly 20 Million
- 07:52 UTC - [SecurityWeek] FortiBleed Attackers Locking Victims Out of Fortinet Devices
- 07:51 UTC - [Cyber Security News] MALFEX npm Malware Hides Executables in PNG Files to Infect Windows Developers
- 07:42 UTC - [The Hacker News] U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
- 07:41 UTC - [The Hacker News] MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
- 07:34 UTC - [Cyber Security News] Top 10 Best Secrets Detection Tools in 2026 [Ranked & Scored]
- 07:31 UTC - [Cyber Security News] Top 10 Best Software Supply Chain Security Tools in 2026 [Ranked & Scored]
- 07:27 UTC - [Cyber Security News] Top 10 Best API Security Tools in 2026 [Ranked & Scored]
- 07:25 UTC - [Cyber Security News] Top 10 Best ASPM Platforms in 2026 [Ranked & Scored]
- 07:10 UTC - [Cyber Security News] Top 10 Best SCA Tools in 2026 [Ranked & Scored]
- 07:08 UTC - [Cyber Security News] PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to-Host Code Execution
- 07:04 UTC - [Cyber Security News] Splunk Patches Critical 9.8 Flaw Allowing Unauthenticated Remote Command Execution
- 06:44 UTC - [Cyber Security News] Hackers Registered New Domain with Exact Microsoft Teams Interface to Steal Logins
- 06:32 UTC - [BleepingComputer] Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
- 05:46 UTC - [The Hacker News] Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
- 03:41 UTC - [Cyber Security News] Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data
- 03:28 UTC - [Cyber Security News] Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use
- 03:28 UTC - [Cyber Security News] Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use.
- 02:37 UTC - [Cyber Security News] U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research
- 00:47 UTC - [DataBreaches.Net] Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients
- 00:00 UTC -
[0day Fans] Novinarya: An Android stealer that hides its live C2 in a shop bio - 00:00 UTC -
[The GreyNoise Blog] Spike in Attacks Targeting Digital Video Recorders in Ukraine
2026-10-07 #
- 23:19 UTC - [Have I Been Pwned latest breaches] CyrusOne - 373,460 breached accounts
- 23:10 UTC -
[Graham Cluley] Smashing Security podcast #487: Clippy’s crypto comeback - 23:04 UTC - [BleepingComputer] Ransomware recovery CEO charged over secret ransom payments
- 22:00 UTC -
[Unit 42] Evolution of Web3 in Cloud Supply Chain Attacks - 21:57 UTC - [DataBreaches.Net] Can you really make more than $200M in six months without encrypting victims? It seems Silent Ransom Group can.
- 21:57 UTC - [DataBreaches.Net] Can you really make more than $200M in six months without encrypting victims? It seems Silent Ransom Group can. (1)
- 21:42 UTC - [darkreading] Australian Gov't Weighs Mandatory AI Incident Reporting
- 21:28 UTC - [BleepingComputer] FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
- 21:25 UTC - [darkreading] Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives
- 20:51 UTC - [darkreading] Anthropic Gives Vetted Defenders Fewer Claude Guardrails
- 20:50 UTC - [BleepingComputer] Hackers hijack Google domains after breaching ccTLD registries
- 19:44 UTC - [CyberScoop] Major rules for federal contractors handling sensitive data are nearing the finish line
- 19:34 UTC - [darkreading] OpenAI Agent Escape Causes Wikimedia Service Outage
- 19:27 UTC -
[0day Fans] Microsoft, Adobe, Apple, and Foxit vulnerabilities - 18:48 UTC - [The Hacker News] Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
- 18:45 UTC - [Latest from TechRadar in Security] Netgear reveals new dark web monitoring tool which will tell you if your personal data turns up online
- 18:00 UTC - [Latest from TechRadar in Security] Arizona court system hack leads to theft of personal data belonging to 1.3 million Americans
- 17:43 UTC - [The Hacker News] Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
- 17:40 UTC - [Cyber Security News] Discord Users’ Data Exposed in Security Bot Double Counter Security Breach
- 17:19 UTC - [Cyber Security News] Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs
- 17:05 UTC - [CyberScoop] FBI, French authorities seize deepfake CSAM-for-sale websites
- 16:30 UTC -
[The Cloudflare Blog] Building an evidence-grounded agentic security operations harness on Cloudflare - 16:20 UTC - [Latest from TechRadar in Security] Microsoft blocks Outlook from sending two more file types over security concerns
- 16:17 UTC - [The Hacker News] SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
- 16:00 UTC - [Microsoft Security Blog] 3 lessons from frontier AI vulnerability research
- 16:00 UTC -
[Cisco Security Advisory] Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability - 16:00 UTC - [Cisco Security Advisory] Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
- 16:00 UTC - [Cisco Security Advisory] Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software Python Sandbox Escape Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software Control Plane Denial of Service Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Meraki Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco License (Smart Software Manager) On-Prem Vulnerabilities
- 16:00 UTC - [Cisco Security Advisory] Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco Finesse Server-Side Request Forgery Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
- 15:44 UTC - [BleepingComputer] Microsoft Outlook to block MSIX attachments starting November
- 15:39 UTC - [Cyber Security News] Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates
- 15:34 UTC - [The Hacker News] Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
- 15:33 UTC - [The Hacker News] PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
- 15:16 UTC - [Cybersecurity Dive - Latest News] AI underscores singular importance of phishing-resistant authentication, Okta says
- 15:16 UTC - [Cybersecurity Dive - Latest News] AI doesn’t change singular importance of phishing-resistant authentication, Okta says
- 15:10 UTC - [Cyber Security News] CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator
- 15:08 UTC - [Latest from TechRadar in Security] ChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
- 15:04 UTC - [BleepingComputer] PoeLLM malware infects exposed AI servers in cryptomining attacks
- 15:00 UTC - [All Fortinet Blog | Latest Posts] Rural Health Transformation Funding Can Strengthen Care and Cyber Resilience
- 15:00 UTC - [All Fortinet Blog | Latest Posts] Rural Health Transformation Funding Can Strengthen Care and Cyber Resilience
- 15:00 UTC - [CyberScoop] PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
- 14:45 UTC - [Cyber Security News] CyberXero Combines Claude Code, PentAGI and Cobalt Strike in AI-Augmented Cyberattacks
- 14:37 UTC - [Cybersecurity Dive - Latest News] FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
- 14:27 UTC - [Cyber Security News] SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10
- 14:15 UTC - [SecurityWeek] Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
- 14:13 UTC - [Cyber Security News] Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People
- 14:01 UTC - [BleepingComputer] Ransomware has a new target. Is your backup ready?
- 14:00 UTC - [Latest from TechRadar in Security] Ring's new Smart Lock lets you crank your way back inside
- 13:48 UTC - [Krebs on Security] ShinyHunters Extorted Boeing Spin-off Prior to Arrests
- 13:47 UTC - [SecurityWeek] Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
- 13:30 UTC - [Cyber Security News] PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
- 13:28 UTC - [Cyber Security News] Hackers Compromise 100+ Websites With Fake Cloudflare Checks to Spread LUNEXSTEALER
- 13:19 UTC - [Cyber Security News] FortiBleed Attack Campaign Exploiting Fortinet Firewalls and VPNs – FBI Warns
- 13:19 UTC - [Cyber Security News] FBI Warns of FortiBleed Attack Compromising 80,000+ Devices and Locking Out Admins
- 13:19 UTC - [Cyber Security News] FBI Warns FortiBleed Attack Compromised 80,000+ Devices and Locked Out Admins
- 13:06 UTC - [SecurityWeek] Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform
- 12:49 UTC - [BleepingComputer] Hackers exploit critical Atlassian flaw after public PoC release
- 12:39 UTC - [Cyber Security News] Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware
- 12:37 UTC - [SecurityWeek] Advantest Discloses Data Breach Months After Ransomware Attack
- 12:13 UTC - [DataBreaches.Net] Alleged ATM malware creator appears in Nebraska court after arrest
- 12:13 UTC - [DataBreaches.Net] De Kalb County, Indiana fell prey to vendor impersonation billing
- 12:04 UTC - [Cyber Security News] Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build
- 11:57 UTC - [The Hacker News] The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow
- 11:56 UTC - [The Hacker News] FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
- 11:49 UTC - [The Hacker News] Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
- 11:42 UTC - [The Hacker News] What Is Agentic Pentesting? What It Proves, and Where It Stops.
- 11:37 UTC - [BleepingComputer] SonicWall warns of max severity SSRF flaw in SMA1000 gateways
- 10:51 UTC - [SecurityWeek] Chrome 155 Update Patches 247 Vulnerabilities
- 10:51 UTC - [Cyber Security News] Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code
- 10:49 UTC - [Cyber Security News] Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands
- 10:35 UTC - [BleepingComputer] Musician sent to prison for $10 million streaming fraud using AI bots
- 10:34 UTC - [Cyber Security News] OpenAI Sandbox Escape Flaw Allowed Free Access to Paid AI Models Without an API Key
- 10:33 UTC - [Latest from TechRadar in Security] The AI escape is a red herring. The real problem is we can't tell a good sandbox from a bad one
- 10:27 UTC - [BleepingComputer] Advantest confirms personal information stolen in ransomware attack
- 10:07 UTC - [SecurityWeek] Anthropic Introduces 3-Tier Cyber Verification Program for AI Access
- 10:06 UTC - [Cyber Security News] Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them
- 09:59 UTC - [Latest from TechRadar in Security] AI agents don’t create new risk. They inherit it
- 09:46 UTC - [SecurityWeek] ASOS Confirms Cyberattack, Data Breach
- 09:21 UTC - [Cyber Security News] Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
- 08:53 UTC - [Cyber Security News] Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks
- 08:47 UTC - [Cyber Security News] Multiple OpenSSH Vulnerabilities Could Enable Plaintext Recovery, File Write and Injection Attacks
- 08:27 UTC - [Cyber Security News] 32 Unique 0-Days Exploited in Samsung S26, Pixel 10, OpenAI Codex and Other Devices in Pwn2Own 2026
- 08:13 UTC - [Cyber Security News] Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws
- 08:10 UTC - [Cyber Security News] Top 10 Best IAST Tools in 2026 [Ranked & Scored]
- 08:10 UTC - [Cyber Security News] Veeam Backup and Replication Vulnerability Allow Attackers to Execute Malicious Script
- 08:07 UTC - [The Hacker News] Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
- 07:58 UTC - [SecurityWeek] Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies
- 07:57 UTC - [Cyber Security News] Top 10 Best DAST Tools in 2026 [Ranked & Scored]
- 07:43 UTC - [Cyber Security News] Hackers Hide Vasilek Backdoor Inside VMware Tools to Target Medical Organizations
- 07:00 UTC - [Latest from TechRadar in Security] Almost two thirds of UK workers have received no training on spotting AI-driven cyber threats
- 06:57 UTC - [The Hacker News] 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
- 06:55 UTC - [SecurityWeek] Android’s October 2026 Updates Patch 25 Vulnerabilities
- 06:37 UTC - [SecurityWeek] Atlassian Patches Critical Vulnerability Affecting 8 Products
- 05:42 UTC - [Have I Been Pwned latest breaches] Double Counter - 274,922 breached accounts
- 04:38 UTC - [Cyber Security News] EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Data
- 03:54 UTC -
[0day Fans] Google CTF 2025: webz - 03:45 UTC - [Have I Been Pwned latest breaches] Angel One - 6,765,054 breached accounts
- 03:26 UTC - [Cyber Security News] Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders
- 03:26 UTC - [Cyber Security News] Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders With Reduced Restrictions
- 01:32 UTC - [SecurityWeek] Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
2026-10-06 #
- 23:59 UTC - [DataBreaches.Net] Engineer sentenced for locking over 3,000 devices on employer’s network
- 23:58 UTC -
[0day Fans] VisiData VisiData unzip_http RemoteZipFile extract path traversal vulnerability - 23:58 UTC - [0day Fans] VisiData VisiData EmailSheet extract_parts path traversal vulnerability
- 21:03 UTC - [CyberScoop] Alert: FortiBleed remains active campaign, can lock out users or lead to ransomware attacks
- 21:00 UTC - [BleepingComputer] Ninja Forms plugin flaw exploited to hack WordPress sites
- 20:32 UTC - [darkreading] ClickFix Attacks Evolve to Better Hide Malicious Payloads
- 20:30 UTC - [darkreading] Critical Healthcare Systems Aren't Quantum-Ready
- 19:55 UTC - [CyberScoop] Wiretapping change sparks big privacy fight in the Golden State
- 19:21 UTC - [BleepingComputer] Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
- 18:38 UTC - [The Hacker News] Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
- 18:24 UTC - [The Hacker News] Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
- 17:56 UTC - [darkreading] Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps
- 17:56 UTC - [CyberScoop] Former NSA chief Nakasone says agency overhaul is ‘probably needed’
- 17:34 UTC - [BleepingComputer] Atlassian warns of critical file-access flaw in Jira, Confluence
- 17:15 UTC - [darkreading] IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams
- 17:14 UTC -
[PortSwigger Research] The model isn't cooperating - 17:14 UTC - [0day Fans] The model isn't cooperating
- 17:01 UTC - [0day Fans] You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
- 17:01 UTC - [watchTowr Labs] You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
- 16:59 UTC - [darkreading] 'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
- 16:33 UTC - [BleepingComputer] ASOS confirms data breach after “HACKED” in-app notifications
- 16:02 UTC - [Cyber Security News] Critical Apache Struts Vulnerabilities Enables Remote Code Execution Attacks
- 16:00 UTC -
[bellingcat] Groups Associated With India’s Far-Right Receive Millions Through US Donor-Advised Funds - 16:00 UTC - [Microsoft Security Blog] CISO perspectives on managing vulnerability risks in the age of AI
- 16:00 UTC - [Microsoft Security Blog] CISO perspectives on managing vulnerability risks in the age of AI
- 15:50 UTC - [Cyber Security News] Former Infrastructure Engineer Sentenced for Sabotaging Employer’s Windows Network
- 15:49 UTC - [Cyber Security News] GitHub Copilot CLI Vulnerability Lets Attackers Steal Developer Secrets Using Encrypted Prompt Injection
- 15:45 UTC - [Cyber Security News] From Telemetry to Defense: How SOC and MSSP Leaders Can Build Intelligence-Led Threat Monitoring
- 15:23 UTC - [DataBreaches.Net] FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
- 15:16 UTC - [BleepingComputer] Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
- 15:06 UTC - [Cyber Security News] ASOS Hacked – App Users Receive Notifications Sent by Hackers
- 15:01 UTC - [Cybersecurity Dive - Latest News] IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws
- 15:00 UTC - [All Fortinet Blog | Latest Posts] CISA Highlights the Value of Cyber Decoys. FortiDeceptor Puts Them to Work.
- 15:00 UTC - [All Fortinet Blog | Latest Posts] CISA Highlights the Value of Cyber Decoys. FortiDeceptor Puts Them to Work.
- 14:58 UTC - [Cyber Security News] Aembit Extends Access Controls to Personal AI Agents
- 14:31 UTC - [Cyber Security News] Iranian Hackers Use Fake Dubai Airports Coding Test to Target Iraqi Critical Infrastructure
- 14:29 UTC - [Latest from TechRadar in Security] Microsoft Exchange flaw allows hackers to read mailboxes across an organization, so patch now
- 14:15 UTC - [SecurityWeek] FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
- 14:14 UTC - [Cyber Security News] Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
- 14:12 UTC - [Cyber Security News] AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security
- 14:09 UTC - [Cyber Security News] Ransomware Hacker Uses AI Coding Assistant as Attack Channel Against Enterprise Networks
- 14:03 UTC - [Cybersecurity Dive - Latest News] US cyber resilience, oversight tested in series of attacks
- 14:00 UTC - [BleepingComputer] How to secure RMM software: 8 controls MSPs should test
- 13:26 UTC - [Cyber Security News] Rogue OpenAI Agents Caught Editing Wikis and Making Millions of Wikimedia Requests
- 13:26 UTC - [Cyber Security News] OpenAI Agents Caught Editing Wikis, Making Millions of Requests That Led to Outage
- 13:25 UTC - [Cyber Security News] Hackers Exploit Exposed Industrial Controllers to Disrupt US Water and Critical Infrastructure
- 12:57 UTC - [Cyber Security News] Critical Dell System Update Tool Vulnerability Allows Attackers to Execute Code as Root User
- 12:47 UTC - [SecurityWeek] FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
- 12:01 UTC - [DataBreaches.Net] Self-described “cybersecurity engineer” arrested after computer case reopened
- 12:00 UTC - [DataBreaches.Net] Japan hands over ‘Qilin’ hacker group member to Germany
- 12:00 UTC - [DataBreaches.Net] Denmark Central Person Register (CPR) Breach: Cyberattack Exposes Data of 8.8 Million
- 12:00 UTC - [DataBreaches.Net] ASOS customers receive ‘hack’ notification threatening leak
- 11:57 UTC - [The Hacker News] LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
- 11:48 UTC - [SecurityWeek] Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks
- 11:31 UTC - [BleepingComputer] Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
- 11:30 UTC - [CyberScoop] Here’s how experts think CISA should tell agencies to protect OT
- 11:26 UTC - [The Hacker News] Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
- 11:02 UTC - [The Hacker News] Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
- 11:01 UTC - [SecurityWeek] Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
- 10:52 UTC - [Cyber Security News] Midnight Blizzard Abuses Hotel Wi-Fi Captive Portals to Deliver Malware and Steal Credentials
- 10:34 UTC - [SecurityWeek] Long-Running NPM Malware Campaign Accumulates 40,000 Downloads
- 10:25 UTC - [Latest from TechRadar in Security] Why governance and visibility are the real defense against AI sovereignty risks
- 10:23 UTC - [Cyber Security News] Meta and Microsoft are Actively Cutting Employee Use of Claude AI
- 10:00 UTC - [Unit 42] Blinder Tunnel Campaign Targets Iraqi Infrastructure
- 09:51 UTC - [Latest from TechRadar in Security] ASOS hacked? Customers receive threatening notification from hackers, here’s what we know
- 09:38 UTC - [SecurityWeek] 8.8 Million Impacted by Data Breach at Denmark’s Central Person Register
- 09:25 UTC - [BleepingComputer] Nikkei discloses breaches of employees’ Microsoft, Google email accounts
- 09:21 UTC - [The Hacker News] Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
- 09:07 UTC - [Cyber Security News] ClingSTUN Backdoor Exploits Multiple IoT Vulnerabilities to Gain Persistent Remote Access
- 09:07 UTC - [Cyber Security News] FBI Removes Accenture Contractor After Unpatched PeopleSoft Flaw Exposes Thousands of Employees
- 09:07 UTC - [Cyber Security News] FBI Cuts Accenture Contractor Over Unpatched PeopleSoft Flaw Exposing Thousands
- 08:38 UTC - [SecurityWeek] Social Engineering Detection Moves Into the Live Conversation
- 08:38 UTC - [Cyber Security News] Google Adds 6 Advanced Protection Features to Android 17 Against Sophisticated Attacks
- 08:19 UTC - [BleepingComputer] Engineer sentenced for locking over 3,000 devices on employer network
- 08:18 UTC - [Cyber Security News] Atlassian Patches Critical Vulnerabilities in Jira, Confluence, Bitbucket, and Five More Products
- 07:51 UTC -
[0day Fans] Chromium: WebGPU Security Technical Report - 07:45 UTC - [Cyber Security News] Top 10 Best SAST Tools in 2026 [Ranked & Scored]
- 07:17 UTC - [Cyber Security News] Top 10 Best Just-in-Time (JIT) Access Tools in 2026 [Ranked & Scored]
- 06:58 UTC - [The Hacker News] Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
- 06:56 UTC - [The Hacker News] FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
- 06:00 UTC - [The Hacker News] Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
- 05:22 UTC - [The Hacker News] ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
- 02:41 UTC - [Cyber Security News] Hacker Group Claims to Have Stolen Trump Mobile Customers’ Personal Data
2026-10-05 #
- 23:07 UTC - [CyberScoop] Citrix discloses third actively exploited NetScaler zero-day in less than a week
- 22:55 UTC - [DataBreaches.Net] CISA to keep cyber pay incentives, but less staff will qualify
- 22:46 UTC - [BleepingComputer] OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU
- 21:25 UTC - [darkreading] ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
- 21:10 UTC - [Latest from TechRadar in Security] Open Microsoft database with 17 trillion total rows and 25,000 user accounts hacked by a bored teenager — but he's been well-paid for his actions
- 21:05 UTC - [Latest from TechRadar in Security] Nearly 40,000 phishing attacks hit US financial firms in H1 2026 — automated AI agents and a new Seychelles bulletproof host fuel aggressive new campaigns
- 20:20 UTC - [BleepingComputer] Rejetto HFS servers now actively scanned for critical RCE flaw
- 19:40 UTC - [FreshRSS releases] FreshRSS 1.30.1
- 17:19 UTC - [BleepingComputer] IQVIA fined $7.8 million for failing to properly anonymize health data
- 17:05 UTC - [Latest from TechRadar in Security] Hackers hijacked Microsoft's X account for a scam featuring everyone's least-favorite tech mascot Clippy
- 16:21 UTC - [The Hacker News] Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
- 15:52 UTC - [darkreading] Chinese Hackers Impersonate US Officials for AI Cyber Espionage
- 15:21 UTC - [BleepingComputer] Denmark population registry data breach affects 8.8 million people
- 15:20 UTC - [Cyber Security News] Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers
- 15:10 UTC - [Latest from TechRadar in Security] These social media posts promise big online discounts on Lego, Calvin Klein and more — but really they're just phishing scams
- 15:09 UTC - [Cyber Security News] 16 Suspects Detained in Timor-Leste for Japanese Police Impersonation Scam
- 15:04 UTC - [PortSwigger Research] Smashing the token limit with overlapping fragments
- 15:04 UTC - [0day Fans] Smashing the token limit with overlapping fragments
- 14:53 UTC - [BleepingComputer] New Dell System Update flaw lets hackers gain root privileges
- 14:50 UTC - [Latest from TechRadar in Security] Google benches open source bug bounty program following ‘significant rise’ in AI submissions
- 14:43 UTC - [DataBreaches.Net] Nueva EPS, Colombia’s largest regional healthcare promoting entity has allegedly been hacked
- 14:43 UTC - [DataBreaches.Net] Nueva EPS, Colombia’s largest regional healthcare promoting entity has allegedly been hacked (1)
- 14:42 UTC - [Cybersecurity Dive - Latest News] Citrix issues patch for third exploited flaw in NetScaler
- 14:41 UTC - [Cybersecurity Dive - Latest News] White House AI task force faces expertise, partnership challenges
- 14:26 UTC - [SecurityWeek] Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports
- 14:22 UTC - [BleepingComputer] South Korea probes bank breaches amid suspected AI-powered attacks
- 14:20 UTC - [The Hacker News] ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
- 14:10 UTC - [Cyber Security News] Researcher Infiltrates Lazarus Group’s Crypto Laundering Network After $1.5B Bybit Hack
- 14:07 UTC - [Cyber Security News] Zammad Zero-Day Chain Lets AI Agent Hijack Sessions, Execute Code and Escalate to Root
- 13:44 UTC - [Cyber Security News] CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks
- 13:33 UTC - [Cyber Security News] Google Gemini Will Soon Get Full Access Permission to Use Your Computer
- 13:33 UTC - [BleepingComputer] tenfold CE: Our free Identity Governance tool just got 2 new features
- 13:02 UTC - [Cyber Security News] ClickFix Fake CAPTCHA Attack Executes Malware Hidden Inside Browser Cache
- 13:01 UTC - [BleepingComputer] Alleged dev of Ploutus ATM malware appears in US court after arrest
- 13:00 UTC - [SecurityWeek] Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
- 13:00 UTC - [darkreading] Need for Speed: AI-Driven Attacks Are Changing Security Strategies
- 13:00 UTC - [All Fortinet Blog | Latest Posts] ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
- 13:00 UTC - [All Fortinet Blog | Latest Posts] ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure
- 12:53 UTC - [Cyber Security News] RemoveMacAI Free Up 12GB of Data by Removing Apple Intelligence Models
- 12:40 UTC - [Cyber Security News] GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware
- 12:35 UTC - [SecurityWeek] 250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
- 12:30 UTC - [DataBreaches.Net] Hackers Breached Propulsion System of U.S.-Bound Oil Tanker
- 12:30 UTC - [DataBreaches.Net] Daiwa Securities says info on 110,000 clients may have been leaked in vendor incident
- 12:29 UTC - [DataBreaches.Net] Ransomware group threatens to leak customer data from top insurance companies in South Africa
- 12:20 UTC - [Latest from TechRadar in Security] AI giants targeted by scraping bots — ChatGPT and Perplexity enter the most-scraped websites list for the first time
- 12:05 UTC - [Cyber Security News] Apple Tightens macOS Full Disk Access as AI Agents Become More Powerful
- 11:55 UTC - [The Hacker News] The Credential Layer Is Expanding Faster Than Security Teams Can See It
- 11:46 UTC - [The Hacker News] Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
- 11:44 UTC - [Cyber Security News] Google Pauses Open-Source Bug Bounty Program After Flood of Invalid AI-Generated Reports
- 11:27 UTC - [Cyber Security News] Hackers Abuse Legitimate ScreenConnect Tool to Gain Remote Access Through Phishing
- 11:16 UTC - [Cyber Security News] Windows 11 KB5124010 Update Crashes Productivity Apps, Games and Media Players
- 11:01 UTC - [Latest from TechRadar in Security] How mid-market companies can capitalize on their AI advantage
- 11:00 UTC - [SecurityWeek] Exploitation Hits Rejetto HFS Vulnerability Discovered by AI
- 10:42 UTC - [SecurityWeek] Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity
- 10:38 UTC - [The Hacker News] Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
- 10:28 UTC - [BleepingComputer] OpenAI will show visual ads in ChatGPT while you generate images
- 10:26 UTC - [Cyber Security News] Denmark Data Breach Exposes Personal Records of 8.8 Million People
- 10:00 UTC - [CyberScoop] The US needs a real plan to defend its water systems
- 09:54 UTC - [Latest from TechRadar in Security] Why agentic AI demands a new approach to enterprise security
- 09:37 UTC - [BleepingComputer] Microsoft: Windows KB5124010 update crashes some games and apps
- 09:00 UTC - [Cybersecurity Dive - Latest News] Why permissions must be the foundation for next-gen identity security
- 09:00 UTC - [Cybersecurity Dive - Latest News] Modernizing data security with DSPM, AI and fewer tools
- 08:46 UTC -
[0day Fans] Technical Analysis of WhatsApp Zero-Click Exploit - 08:42 UTC - [Cyber Security News] Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains
- 08:34 UTC - [Cyber Security News] CISA Adds Fortinet FortiMail 0-day Vulnerability to KEV Following Active Exploitation
- 08:32 UTC - [Cyber Security News] CISA Warns of Zammad DIVD Vulnerabilities Actively Exploited in Attacks
- 08:27 UTC - [BleepingComputer] Google halts open-source bug bounty program amid AI spam surge
- 08:09 UTC - [The Hacker News] Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
- 07:53 UTC - [Cyber Security News] Top 10 Best Fine-Grained Authorization Tools in 2026 [Ranked & Scored]
- 07:43 UTC - [Cyber Security News] Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices
- 07:33 UTC - [Cyber Security News] Top 10 Best Certificate Lifecycle Management (PKI) Tools in 2026 [Ranked & Scored]
- 07:26 UTC - [Cyber Security News] Top 10 Best Machine Identity Management Solutions in 2026 [Ranked & Scored]
- 07:16 UTC - [SecurityWeek] Alleged ShinyHunters Leader Arrested in Jordan
- 06:40 UTC - [The Hacker News] New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
- 05:14 UTC - [SecurityWeek] Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
- 01:49 UTC - [Cyber Security News] Citrix NetScaler SAML 0-Day Vulnerability Actively Exploited in Attacks
- 01:28 UTC - [Cyber Security News] Cybersecurity Newsletter Bulletin – Pentagon Data Breach, Citrix, Fortimail and Apple 0-days and 20+ stories
2026-10-04 #
- 21:58 UTC - [BleepingComputer] Citrix patches NetScaler SAML zero-day exploited in attacks
- 19:38 UTC - [DataBreaches.Net] South Korea’s President Lee Jae Myung orders thorough probe into data breaches at local banks
- 19:12 UTC - [DataBreaches.Net] Slate Valley Unified School District voted not to pay ransom demand; Kairos likely to leak data
- 15:05 UTC - [Latest from TechRadar in Security] 'The agent itself has become its own entity to secure': Bitdefender's new free Mac tool goes after flaws that let attackers fool AI models
- 14:57 UTC - [SecurityWeek] Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force
- 11:11 UTC - [Cyber Security News] South Korean President Orders Full Security Checks After Financial Sector Hacks
- 10:53 UTC - [BleepingComputer] Anthropic asks Claude users to share voice data for AI model training
- 07:22 UTC - [The Hacker News] ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
- 07:20 UTC - [The Hacker News] China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
- 06:00 UTC - [Latest from TechRadar in Security] Beware the smartphone security threat — new report claims most banking scam attempts now take place on mobile devices
- 02:05 UTC - [Cyber Security News] Vercel Confirms KVM Zero-Day VM Escape, Awards Researcher $50,000
2026-10-03 #
- 23:12 UTC - [BleepingComputer] Google Gemini could soon get full access to your Mac’s files, apps and the web
- 20:41 UTC - [DataBreaches.Net] The Italian Italy’s Data Protection Authority fines IQVIA €7 million over data protection breach
- 20:41 UTC - [DataBreaches.Net] Italy’s Data Protection Authority fines IQVIA €7 million over data protection breach
- 19:09 UTC - [BleepingComputer] ShinyHunters hacker reportedly detained in Jordan, aiding FBI
- 17:21 UTC - [Cyber Security News] ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers
- 16:00 UTC - [DataBreaches.Net] ShinyHunters hacker “Rey,” allegedly involved in FBI data theft, detained in Jordan
- 14:59 UTC - [Cyber Security News] Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw
- 14:38 UTC - [The Hacker News] MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics
- 14:36 UTC - [The Hacker News] Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
- 14:35 UTC - [BleepingComputer] Danish university DTU breach exposes data of up to 200,000 people
- 14:22 UTC - [DataBreaches.Net] DHS readies major cyber contract
- 13:41 UTC - [DataBreaches.Net] OpenAI faces California DOJ subpoena amid growing cybersecurity incident notices
- 13:41 UTC - [DataBreaches.Net] Fed employee repeatedly removed sensitive files, watchdog finds
- 13:40 UTC - [DataBreaches.Net] Over 543,000 valid credentials exposed in public GitHub repositories
- 13:40 UTC - [DataBreaches.Net] Senate passes bipartisan bill to bolster hospital cybersecurity
- 13:40 UTC - [DataBreaches.Net] Medical records giant Epic pauses product development to fix security bugs that risk patients’ data
- 13:40 UTC - [DataBreaches.Net] Metamask discloses security incident affecting its infrastructure
- 11:45 UTC - [SecurityWeek] doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures
- 11:34 UTC - [SecurityWeek] Fortra Patches Critical Vulnerabilities in BoKS
- 11:00 UTC - [The Hacker News] The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
- 08:29 UTC -
[Graham Cluley] N0n ransomware: what you need to know - 04:11 UTC - [Cyber Security News] Critical GitLab AI Gateway Vulnerability Enables Remote Code Execution Attacks
- 03:52 UTC - [Cyber Security News] Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control
- 02:41 UTC - [Cyber Security News] Citrix NetScaler Keeps Rebooting Following the 0-Day Patch
- 02:23 UTC - [Cyber Security News] Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks
2026-10-02 #
- 20:18 UTC - [darkreading] RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
- 19:01 UTC - [BleepingComputer] Frontline Education breach exposes school district employee data
- 18:33 UTC - [BleepingComputer] Warlock ransomware breach SharePoint in water, telecom operator attacks
- 17:47 UTC - [CyberScoop] The legal questions raised by agentic AI hacks
- 17:33 UTC - [The Hacker News] GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
- 17:33 UTC - [The Hacker News] Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
- 17:05 UTC - [Latest from TechRadar in Security] This popular AI agent could be hacked by a single email — with potentially disastrous consequences
- 17:02 UTC - [The Hacker News] Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
- 16:56 UTC - [darkreading] Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response
- 16:27 UTC - [darkreading] SWIFT Banking & Government Middleware Enables RCE
- 16:20 UTC - [BleepingComputer] GitLab warns of critical RCE vulnerability in AI Gateway service
- 16:15 UTC - [Cybersecurity Dive - Latest News] Defending against AI-fueled cyberattacks requires focus on identity, data governance, Microsoft says
- 16:01 UTC - [darkreading] Is Your Organization Ready for 2027's AI Accountability Era?
- 15:51 UTC - [darkreading] Is It Fair to Blame 'Rogue' AI for Security Failures?
- 15:20 UTC - [BleepingComputer] US sanctions Tren de Aragua gang members in ATM hacks crackdown
- 14:56 UTC - [Cybersecurity Dive - Latest News] Fortinet warns that critical flaw in FortiMail is facing exploitation
- 14:30 UTC - [SecurityWeek] In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
- 14:15 UTC - [Cyber Security News] Rethinking automotive cyber risk for the age of accelerated vulnerability discovery
- 14:04 UTC - [Cyber Security News] Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel
- 14:00 UTC - [BleepingComputer] The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
- 14:00 UTC - [darkreading] Vulnerability Backlogs Are an Ownership Problem
- 13:43 UTC - [Cyber Security News] Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials
- 13:15 UTC - [SecurityWeek] macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
- 13:14 UTC - [Cyber Security News] Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks
- 13:13 UTC - [DataBreaches.Net] City of Vicksburg, Mississippi, shuts down computers after cyberattack
- 13:10 UTC - [Cyber Security News] Multiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server
- 13:05 UTC - [Latest from TechRadar in Security] AI agents aggressively tried to hack US and Canadian government websites
- 13:00 UTC - [Cyber Security News] OpenClaw Launches Free Open-source Enterprise Agent Platform for AI Agents
- 13:00 UTC - [darkreading] Malicious Linux Implants Mimic Asian Mail Security Products
- 13:00 UTC - [The Cloudflare Blog] Protected Quick Tunnels: simple accountless authentication for your next dev project
- 13:00 UTC - [The Cloudflare Blog] Follow the thread: a new dashboard to investigate account abuse
- 12:45 UTC - [Cyber Security News] Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials
- 12:37 UTC - [BleepingComputer] Dell asks admins to patch max severity CSM flaws as soon as possible
- 12:23 UTC - [The Hacker News] OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling
- 12:17 UTC - [Cyber Security News] Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access
- 11:50 UTC - [Cyber Security News] Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks
- 11:46 UTC - [SecurityWeek] Crypto Scammers Hijack Microsoft’s Official X Account
- 11:30 UTC - [Cyber Security News] Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak
- 11:30 UTC - [The Hacker News] Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report
- 11:24 UTC - [Cyber Security News] Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users
- 11:15 UTC - [Latest from TechRadar in Security] Police take down dangerous KillSec ransomware gang — and find out it's being run by a teenager
- 11:14 UTC - [SecurityWeek] In Rare Move, Alleged Iranian State Hacker Extradited to US
- 11:02 UTC - [Cyber Security News] Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features
- 10:57 UTC - [Cyber Security News] Safari History Database Tags Can Reveal What Users Were Browsing on macOS
- 10:04 UTC - [Latest from TechRadar in Security] Cyberattacks are the ultimate business continuity tests that nearly half of organizations fail
- 09:56 UTC - [Cyber Security News] Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA
- 09:34 UTC - [SecurityWeek] Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
- 09:29 UTC - [BleepingComputer] Microsoft’s X account hacked in crypto pump-and-dump scheme
- 09:00 UTC - [Cyber Security News] Kiteworks Patches 126 Vulnerabilities in Massive Security Update
- 08:53 UTC - [Cyber Security News] Cloudflare Launches Free Certificate Authority for the Whole Internet
- 08:39 UTC - [Cyber Security News] OpenAI Blocks 15,000-User Campaign Trying to Extract Hidden AI Reasoning
- 08:38 UTC - [SecurityWeek] AI Agents Aimed SQL Injection at US and Canadian Government Sites
- 08:07 UTC - [SecurityWeek] Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
- 08:01 UTC - [The Hacker News] Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
- 07:00 UTC - [Cyber Security News] Treasury Sanctions Tren de Aragua ATM Jackpotting Network Linked to $40.7 Million in Losses