News Feed
Updates every 30 minutes - Generated via RSS feed on: 2026-08-26 01:30:06 UTC Feedback and suggestions for other sources are welcome.
2026-08-25 #
- 21:58 UTC -
[BleepingComputer] LACMA data breach last year exposed social security and medical data - 21:39 UTC - [BleepingComputer] Hackers abuse npm mirrors to host phishing redirect pages
- 21:34 UTC -
[Have I Been Pwned latest breaches] Carhartt - 12,933,413 breached accounts - 21:08 UTC -
[darkreading] Hidden Prompts Trick AI Into False Email Summaries - 20:51 UTC -
[CyberScoop] The GTA VI leaks are breaking the internet. Security researchers have seen this before. - 20:50 UTC -
[DataBreaches.Net] 2 weeks after JPS Health Network outage, patients still dealing with fallout - 20:25 UTC - [BleepingComputer] AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes
- 20:25 UTC - [DataBreaches.Net] ‘Close Enough’ Data Breach Notifications Create Exposure
- 20:25 UTC -
[Latest from TechRadar in Security] Of course, this fake GTA VI ISO download is malware — testers reveal 113GB download is 99.99% empty zeroes, with a tiny virus attached - 19:50 UTC - [darkreading] Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
- 18:43 UTC - [CyberScoop] Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice
- 18:17 UTC -
[The Hacker News] U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches - 17:11 UTC - [CyberScoop] Water sector passes, government sector fails attempts to spot and halt simulated CISA attack
- 16:45 UTC -
[Cyber Security News] CISA Red Team Breaches Critical Infrastructure to Reveal SOC and Cloud Security Gaps - 16:40 UTC - [DataBreaches.Net] New Utah law protects student privacy after BYU research found K-12 apps were collecting and sharing data
- 16:23 UTC -
[SecurityWeek] Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation - 16:10 UTC - [Latest from TechRadar in Security] New Windows malware lays dormant until a custom command activates it like a sleeper agent
- 16:00 UTC -
[Microsoft Security Blog] The patch window is collapsing: Why security needs a new control plane - 15:52 UTC - [BleepingComputer] Massive DDoS attack disrupts Norway’s government digital services
- 15:43 UTC - [DataBreaches.Net] Inside a Syrian Interrogation Room: The Detainee Files an Infostealer Stole From a Military Police Unit
- 15:37 UTC - [Cyber Security News] AI Security Startup Alice Raises $140 Million as Enterprise AI Threats Surge
- 15:33 UTC -
[Cybersecurity Dive - Latest News] Researchers warn about chained SharePoint sequence - 15:14 UTC - [DataBreaches.Net] Health systems warn of coordinated phishing targeting Epic’s patient portal
- 15:10 UTC - [Cybersecurity Dive - Latest News] CISA orders agencies to fix exploited Zimbra vulnerability
- 14:55 UTC - [DataBreaches.Net] Seoul National University Hospital skips cybersecurity disclosure for years despite breach affecting 830,000
- 14:53 UTC - [darkreading] Is Cyber Facing an Affordability Crisis?
- 14:44 UTC - [BleepingComputer] Hospital operator Nutex Health says data stolen in cyberattack
- 14:32 UTC - [Cyber Security News] SynkLoader Mimic as IT Support Personnel Attacking Users Via Microsoft Teams
- 14:30 UTC - [Cyber Security News] ToxNetV2 Linux Botnet Uses NVIDIA AI to Generate Shell and Remote SSH Attack Actions
- 14:25 UTC - [CyberScoop] Interpol targets Black Axe’s illicit financial web in latest international sting
- 14:24 UTC -
[PortSwigger Research] What's in a tag name? JavaScript, apparently - 14:23 UTC - [Cyber Security News] WhatsApp Passkeys Reach 1 Billion Users as Two-Step Verification Gets Stronger Passwords
- 14:23 UTC - [0day Fans] What's in a tag name? JavaScript, apparently
- 14:15 UTC - [Cyber Security News] ASOS Warns Customer Accounts Were Accessed Using Compromised Login Credentials
- 14:12 UTC - [Cyber Security News] Eight AI Agents Breach Government Systems, Crack 85 Accounts and Steal 2,500+ Records
- 14:11 UTC - [SecurityWeek] Alice Raises $140M to Expand AI Model Defenses and Enterprise Guardrails
- 14:11 UTC - [Cyber Security News] Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access
- 14:07 UTC - [Cyber Security News] AliExpress Uses WebAudio API and Zero-Gain Audio Graphs for Silent Device Fingerprinting
- 14:07 UTC - [The Hacker News] A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
- 14:01 UTC - [Cyber Security News] Tata’s B2B Platform Flaw Enables Account Takeover Just by Knowing Victim’s Phone Number
- 14:01 UTC - [BleepingComputer] From Fake Workers to Account Recovery: The Growing Identity Verification Risk
- 13:51 UTC - [BleepingComputer] Microsoft PowerToys adds Alt+Tab-style switching for an app's windows
- 13:33 UTC - [SecurityWeek] WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities
- 13:19 UTC - [The Hacker News] WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
- 13:12 UTC - [Cyber Security News] ClickFix Campaigns Deploy PavinLoader With Blockchain-Based C2 and Amatera Stealer
- 13:11 UTC - [Cyber Security News] Microsoft August 2026 Update Breaks When Generating PDF/XPS Content
- 13:10 UTC - [Latest from TechRadar in Security] Android car systems abused by hackers to launch new malware that pulls devices into a hidden proxy network
- 13:00 UTC - [SecurityWeek] WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update
- 13:00 UTC - [BleepingComputer] WhatsApp adds stronger two-step verification, multiple passkeys
- 12:57 UTC - [SecurityWeek] Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference
- 12:53 UTC - [Cyber Security News] Multiple Zscaler Client Connector Vulnerabilities Enable RCE Attacks
- 12:43 UTC - [The Hacker News] Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
- 12:39 UTC - [Cyber Security News] 91 Spring Vulnerabilities Impact 209,000+ Software Components Across Open-Source Ecosystem
- 12:35 UTC - [Latest from TechRadar in Security] Some Mac users think they're installing OpenAI Codex, but it's actually a malware that can steal passwords in seconds
- 12:04 UTC - [BleepingComputer] Hackers breached over 270 Zimbra servers in ongoing attacks
- 11:56 UTC - [The Hacker News] Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows
- 11:52 UTC - [The Hacker News] 24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
- 11:33 UTC - [The Hacker News] E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
- 11:18 UTC - [SecurityWeek] First Malware Built Specifically for Car Head Units Fuels Botnet
- 11:14 UTC - [The Hacker News] Frontier AI: Vulnerability Management's Systemic Revolution
- 11:12 UTC - [Cyber Security News] Hackers Abuse Google Sites to Host Fake OpenAI Codex Download Pages
- 10:53 UTC - [BleepingComputer] Police arrests dozens of suspects in global cybercrime crackdown
- 10:51 UTC - [Latest from TechRadar in Security] Defining the MVC: Recover faster from cyberattacks by restoring what matters most
- 10:36 UTC - [Latest from TechRadar in Security] No standing still: Zero Trust and cybersecurity
- 10:00 UTC -
[Unit 42] The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution - 10:00 UTC - [SecurityWeek] Silent Patches Don’t Stop Attackers – They Blind Defenders
- 09:59 UTC - [Cyber Security News] EvilTokens Doesn’t Just Steal Microsoft Sessions—Its AI Tells Attackers Who to Scam Next
- 09:48 UTC -
[netbiosX] - 09:38 UTC - [Cyber Security News] CISA Warns of Oracle HTTP and WebLogic Server Vulnerability Exploited in Attacks
- 09:26 UTC - [Cyber Security News] Hackers Exploit Critical miniOrange SAML SSO Flaws to Hijack WordPress Admin Accounts
- 09:12 UTC - [Cyber Security News] Critical Red Hat Keycloak Flaw Lets Unauthenticated Attackers Take Over Any User Account
- 08:52 UTC -
[bellingcat] Tracking a Sanctioned Russian Vessel’s West African Odyssey - 08:34 UTC - [The Hacker News] Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
- 08:30 UTC - [SecurityWeek] Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff
- 08:20 UTC - [Cyber Security News] Fake GTA 6 Demo Is Actually Malware That Steals Your Passwords and Logged-In Sessions
- 07:46 UTC - [SecurityWeek] CISA Warns of Exploited Oracle WebLogic Vulnerability
- 07:13 UTC - [Cyber Security News] Anthropic Rolls Out Enterprise-Managed Auth for Claude’s MCP Connectors
- 07:05 UTC - [Cyber Security News] Top Google Results for Minecraft Client Led Gamers to Malware, McAfee Finds
- 06:15 UTC - [Cyber Security News] Multiple TP-Link Archer Vulnerabilities Enable Command Injection Attacks
- 06:12 UTC - [The Hacker News] Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
- 01:54 UTC - [Cyber Security News] Researcher Discloses Five High-Risk Vulnerabilities in Palo Alto GlobalProtect
- 01:54 UTC - [Cyber Security News] Researcher Discloses Five High-Risk Vulnerabilities in Palo Alto GlobalProtect VPN
2026-08-24 #
- 22:47 UTC - [CyberScoop] SCOTUS tosses one of two injunctions against Trump USPS mail-in ballot rules
- 21:46 UTC - [darkreading] Exploited Zimbra Flaw Highlights Shrinking Window to Patch
- 21:14 UTC - [BleepingComputer] Unpatched Calix flaw lets hackers bypass NAT to expose internal devices
- 20:51 UTC - [darkreading] Foul Language: WordlistLoader Disguises Malware as Ordinary Text
- 19:26 UTC - [BleepingComputer] Hackers target WordPress sites in miniOrange auth bypass attacks
- 19:23 UTC - [DataBreaches.Net] Ascent Skilled Nursing Facilities Assure Breach Victims of “Credible Evidence” Stolen Data Was Deleted
- 19:06 UTC - [CyberScoop] Treasury sanctions alleged Iranian hackers as part of ‘economic D-Day’
- 19:01 UTC - [CyberScoop] Bipartisan Senate bill aims to prepare energy sector for Q-Day
- 18:35 UTC - [Latest from TechRadar in Security] Even connected car head units are being targeted by hackers now — experts warn in-car systems are at risk of being hijacked into a botnet
- 18:11 UTC - [DataBreaches.Net] “Cognizable damage” required for data breach claims, MA appeals court says in a first
- 17:56 UTC - [BleepingComputer] TikTok reaches $400M settlement with US over COPPA violations
- 17:46 UTC - [netbiosX]
- 17:41 UTC - [The Hacker News] Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
- 17:38 UTC - [SecurityWeek] ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited
- 17:15 UTC - [Latest from TechRadar in Security] New malware targets Microsoft Teams users by posing as your company's IT helpdesk
- 17:04 UTC - [Cyber Security News] Zimbra Collaboration Suite Vulnerability Actively Exploited in the Wild
- 16:53 UTC - [Cyber Security News] Microsoft Teams’ New Policy Lets Admins Automatically Block Meeting Bots
- 15:17 UTC - [BleepingComputer] ReliaQuest confirms failed data-theft attack after ShinyHunters breach
- 15:08 UTC - [Cybersecurity Dive - Latest News] UK power facility disabled for days after suspected state-linked cyberattack
- 15:02 UTC - [darkreading] Tricky 'SynkLoader' Multitool May Herald Ransomware
- 15:00 UTC -
[Graham Cluley] Malicious Firefox add-ons caught stealing cryptowallet seed phrases and browser credentials - 14:43 UTC - [Cybersecurity Dive - Latest News] House Democrats ask GAO to study CISA workforce cuts
- 14:34 UTC - [darkreading] ToxicPanda Banking Trojan Matures into Enterprise Threat
- 14:34 UTC - [darkreading] ToxicPanda Banking Trojan Matures Into Enterprise Threat
- 14:32 UTC - [The Hacker News] ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
- 14:25 UTC - [Latest from TechRadar in Security] Canadian SickKids hospital hit again by cyberattacks, more data stolen
- 14:06 UTC - [Cyber Security News] Hackers Poison Google and Bing Results to Deliver Cloaked Banking Phishing Pages
- 14:00 UTC - [BleepingComputer] Microsoft Teams now lets admins block external bots from meetings
- 14:00 UTC - [BleepingComputer] South Korean startup platform breach exposes key management failures
- 14:00 UTC - [SecurityWeek] Hired for One Job, Judged on Another: The CISO’s Real Problem
- 14:00 UTC - [darkreading] The Vulnerability Gap: Why Discovery Is Outrunning Repair
- 13:47 UTC - [Cyber Security News] New Mysterious AI Model Dubbed Ox Alpha With Free 100 Trillion Tokens a Day for Coders
- 13:44 UTC - [Cyber Security News] Hackers Impersonate ReliaQuest Security Team Member to Steal SSO Credentials and MFA Access
- 13:44 UTC - [Cyber Security News] Hackers Impersonate ReliaQuest Security Staff to Steal SSO Credentials and MFA Access
- 13:43 UTC - [Cyber Security News] 768 Leaked Corporate AWS Keys Remain Active With Full Administrator Access
- 13:42 UTC - [Cyber Security News] Kimsuky Uses AI-Generated Chrome Extension to Automatically Steal Gmail Data
- 13:08 UTC - [Cyber Security News] WordPress Plugin Vulnerability Exposes 100,000 Sites to Complete Site Takeover Attacks
- 13:05 UTC - [Latest from TechRadar in Security] Private equity giant Apollo confirms data breach saw personal info stolen
- 12:52 UTC -
[Graham Cluley] Gunra ransomware: what you need to know - 12:42 UTC - [SecurityWeek] Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts
- 12:40 UTC - [BleepingComputer] Microsoft: August updates break printing, PDF export in WPF apps
- 12:35 UTC - [The Hacker News] WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
- 12:33 UTC - [Cyber Security News] Microsoft Teams Phishing Deploys New SynkLoader Malware to Steal Windows Passwords
- 12:22 UTC - [DataBreaches.Net] Personal Information Exposed in Apollo Global Data Breach
- 11:58 UTC - [SecurityWeek] 91 Vulnerabilities Patched in Spring Application Framework
- 11:58 UTC - [The Hacker News] Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
- 11:56 UTC - [The Hacker News] Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
- 11:51 UTC - [The Hacker News] Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
- 11:36 UTC - [DataBreaches.Net] ShinyHunters provided no real proof they hacked ReliaQuest– because they didn’t get anywhere: ReliaQuest
- 11:33 UTC - [Cyber Security News] Microsoft August 2026 Windows Updates Trigger Issues on Devices Using RGB Lighting Features
- 11:30 UTC - [The Hacker News] The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk
- 11:15 UTC - [Cyber Security News] AmnesiaStealer Gives Hackers Hidden Control of Logged-In Browsers on Macs
- 10:59 UTC - [SecurityWeek] Venezuelan Gets Record Federal Prison Term for ATM Jackpotting
- 10:49 UTC - [Latest from TechRadar in Security] Why "I approve" can become the most dangerous button in enterprise AI
- 10:45 UTC - [BleepingComputer] CISA orders urgent patching of actively exploited Zimbra flaw
- 10:42 UTC - [Latest from TechRadar in Security] Why most organizations are getting AI security wrong (and why it’s about to catch up with them)
- 10:08 UTC - [SecurityWeek] Personal Information Exposed in Apollo Global Data Breach
- 10:06 UTC - [Latest from TechRadar in Security] The ascent of autonomous attacks and the race to contain them
- 10:00 UTC - [SecurityWeek] Rethinking Application Security for the AI Era
- 09:49 UTC - [Cyber Security News] Fake CAPTCHA Tricks Mac Users Into Installing a Backdoor That Steals Passwords and Mines Crypto
- 09:42 UTC - [BleepingComputer] Microsoft shares temporary fix for Windows 11 gaming issues
- 09:22 UTC - [SecurityWeek] Iran-Linked Hackers Shut Down UK Power Plant for Four Days
- 09:11 UTC - [SecurityWeek] TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy
- 09:00 UTC - [Cybersecurity Dive - Latest News] Salesforce gave every org the same free scanner. Attackers already know what it misses.
- 08:49 UTC - [Latest from TechRadar in Security] What airports can teach us about the power of invisible business AI
- 08:47 UTC - [netbiosX]
- 08:43 UTC - [Latest from TechRadar in Security] Who really needs Forward Deployed Engineers around AI?
- 08:10 UTC - [Cyber Security News] Hugging Face Reportedly Explores $13 Billion Sale Following Recent AI Security Incident
- 08:08 UTC - [The Hacker News] UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
- 08:01 UTC - [Cyber Security News] Anthropic’s Claude AI Suffers Another Outage With Elevated Errors
- 07:30 UTC - [Cyber Security News] Hackers Infect Android Car Screens Through Their Built-In Software Update System
- 07:18 UTC - [SecurityWeek] Anthropic Expands Mythos 5 Access to More Defenders, Unveils $35M Open Source Fund
- 06:27 UTC - [Cyber Security News] AWS Network Firewall Now Shows Which Security Rules Are Actually Being Triggered
- 06:27 UTC - [Cyber Security News] AWS Network Firewall Now Displays Count of Triggered Security Rules
- 06:09 UTC - [Cyber Security News] Malicious npm Packages Deploy AI-Powered RedC2 Linux Implant to Steal Credentials and Pivot Networks
- 05:57 UTC - [Cyber Security News] Critical isolated-vm Flaw Lets Untrusted JavaScript Escape Sandbox and Hijack Host Execution
- 05:39 UTC - [Cyber Security News] Cybermes – AI Red Teaming Agent for Automated Penetration Testing
- 04:47 UTC - [Cyber Security News] New Malware-as-a-service Leveraging Adobe-themed Domain to Attack Windows Users Using .bat File
2026-08-23 #
- 22:25 UTC - [Have I Been Pwned latest breaches] NIUS - 6,090 breached accounts
- 17:21 UTC - [Cyber Security News] Iran-Linked Hackers Force UK Power Plant Offline in Unprecedented Four-Day Cyberattack
- 16:45 UTC - [Cyber Security News] Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
- 15:07 UTC - [DataBreaches.Net] ShinyHunters provided no real proof they hacked ReliaQuest– because they didn’t get anywhere: ReliaQuest (2)
- 15:07 UTC - [DataBreaches.Net] ShinyHunters claims hack of ReliaQuest; no confirmation by ReliaQuest (1)
- 15:07 UTC - [DataBreaches.Net] ShinyHunters claims hack of ReliaQuest but provides no proof
- 14:23 UTC - [BleepingComputer] ToxicPanda Android malware uses VPN permissions to block Google Play
- 13:24 UTC - [Cyber Security News] Microsoft Windows 11 App Pushes Bing as Default Search in Chrome, Firefox and Brave
- 11:00 UTC - [Latest from TechRadar in Security] Why are ‘paranoid’ Claude agents launching a turf war and deploying self-replicating malware against each other? The experts weigh in
- 09:00 UTC - [Latest from TechRadar in Security] Why is the Premier League now subject to new cybersecurity rules, and what punishments could they face? The experts weigh in
2026-08-22 #
- 17:01 UTC - [CyberScoop] Postal Service moves to finalize mail ballot regs before SCOTUS ruling
- 14:40 UTC - [DataBreaches.Net] Connecticut says data from 41,000 Medicaid members exposed in portal breach; the second portal incident this year
- 14:32 UTC - [The Hacker News] TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
- 14:14 UTC - [BleepingComputer] Hackers infect Android car head units with proxy botnet malware
- 13:05 UTC - [Latest from TechRadar in Security] Experts warn 2,000 hacked WordPress sites were secretly running a global crime ring
- 13:00 UTC - [BleepingComputer] Named Pipes Under Attack: Securing Windows Interprocess Communication
- 09:31 UTC - [Cyber Security News] Top 10 Best Wireless / Wi-Fi Security Solutions in 2026
- 08:30 UTC - [SecurityWeek] Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight
- 07:17 UTC - [Have I Been Pwned latest breaches] Golf Canada - 568,972 breached accounts
- 05:09 UTC - [Cyber Security News] What specifically allowed the agent to reach a real company’s systems during testing?
- 04:43 UTC - [Cyber Security News] What 45 Million wp2shell Exploit Attempts Reveal About the New Vulnerability Response Window
- 01:31 UTC - [Cyber Security News] Grok Zero-Click Attack Steals Chat Data Using Encrypted Prompt Injection
2026-08-21 #
- 23:00 UTC - [Unit 42] Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
- 21:15 UTC - [Latest from TechRadar in Security] Experts warn expired credit cards can be brought back from the dead to make contactless payments
- 20:24 UTC - [darkreading] How an Emerging Industrial Protocol Family Could Put OT at Risk
- 19:14 UTC - [CyberScoop] Apollo discloses data breach from ongoing wave of attacks hitting financial sector
- 18:53 UTC - [The Hacker News] 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
- 18:20 UTC - [Latest from TechRadar in Security] Even dead websites aren't safe — experts warn hackers are spending millions on expired domains to enable malware scams
- 18:01 UTC - [BleepingComputer] New SynkLoader malware pushed in Microsoft Teams phishing campaign
- 17:46 UTC - [Cyber Security News] Claude Mythos 5 Now Available in Claude Security for Vulnerability Scanning
- 17:36 UTC - [darkreading] OWASP Flags Top AI Skill Risks in New Security Blueprint
- 16:37 UTC - [Cyber Security News] Microsoft Expands Mailbox Storage From 50 GB to 100 GB for Users
- 16:28 UTC - [DataBreaches.Net] Troutman Pepper Locke Silent as Threat Actors Leak Client Data, Tens of Thousands of SSNs
- 16:27 UTC - [SecurityWeek] Former NSA Director Paul Nakasone Launches National Security Advisory Firm
- 16:05 UTC - [Latest from TechRadar in Security] Target may have suffered another damaging data leak as hackers claim 8.6GB haul
- 16:00 UTC -
[All Fortinet Blog | Latest Posts] From Awareness to Action: Building A Behavior-Based Security Program - 15:55 UTC - [BleepingComputer] Hundreds of leaked AWS keys give full control over corporate accounts
- 15:52 UTC - [The Hacker News] Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
- 15:41 UTC - [The Hacker News] Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
- 15:11 UTC - [SecurityWeek] In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug
- 15:05 UTC - [CyberScoop] Lawmakers seek watchdog review of federal hacking of Americans
- 15:05 UTC - [Latest from TechRadar in Security] This new malware can use Google passkeys even after a victim resets their password
- 15:04 UTC -
[0day Fans] AWS EKS forensics: data sources and investigation tooling - 14:54 UTC - [BleepingComputer] Microsoft blames Windows gaming issues on RGB lighting devices
- 14:54 UTC - [Cybersecurity Dive - Latest News] Microsoft discloses maximum severity flaw in Entra ID
- 14:54 UTC - [Cybersecurity Dive - Latest News] Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation
- 14:52 UTC - [Cyber Security News] Scammers Use WhatsApp Groups to Coordinate Millions in Victim Trades and Pump Real Stocks
- 14:41 UTC - [Cyber Security News] Chinese Hackers Use AI Agents to Exploit Web Servers and Automate Attacks
- 14:37 UTC - [netbiosX]
- 14:34 UTC - [SecurityWeek] Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
- 14:24 UTC - [Cybersecurity Dive - Latest News] Defense contractors’ CMMC confidence lags, even as self-assessments improve
- 14:24 UTC - [Cybersecurity Dive - Latest News] Defense contractors still struggling with basic CMMC requirements
- 14:22 UTC - [SecurityWeek] New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets
- 14:14 UTC - [Cyber Security News] Hackers Hide Agent Tesla JScript Behind Unicode Emojis to Evade Detection
- 14:00 UTC - [BleepingComputer] Is Online Privacy Possible? How Digital Identities Can Help
- 14:00 UTC - [darkreading] Calling on Cyber Pros to Help Defend City Hall
- 14:00 UTC - [darkreading] Calling on Cyber Pros to Help Defend City Hall
- 13:39 UTC - [BleepingComputer] Microsoft rolls out Classic Outlook theme for New Outlook users
- 13:30 UTC - [darkreading] OpenAI Adds Controls That Should've Been There Already
- 13:26 UTC - [Cyber Security News] Claude Opus 5 Routes Around Obfuscated Binaries Instead of Defeating the Protection
- 13:20 UTC - [Latest from TechRadar in Security] Security experts targeted by fake crypto conference in scam to hand over details
- 13:10 UTC - [darkreading] Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near
- 13:06 UTC - [Cyber Security News] Critical WordPress Plugin Vulnerability Exposes Sites to RCE Attacks
- 13:06 UTC - [Cyber Security News] Critical GitLab Code Injection Vulnerability Actively Exploited in Attacks
- 13:01 UTC - [Cyber Security News] US Bank Investigating Data Breach Following LockBit Ransomware Claim
- 13:00 UTC - [Cyber Security News] Critical N-able Passportal Flaw Lets Malicious Websites Steal Entire Password Vault and 2FA Codes
- 12:41 UTC - [DataBreaches.Net] Scammers Pose as NYPD Officers in “Well-Done” Video-Call Impersonation Scam
- 12:26 UTC - [SecurityWeek] Critical Isolated-vm Vulnerability Leads to RCE on Host
- 12:25 UTC - [BleepingComputer] CISA orders feds to patch actively exploited TrueConf Server flaws
- 12:21 UTC - [DataBreaches.Net] AI, Data Breaches, and an Old Lesson from the Law of Bailment
- 11:31 UTC - [Cyber Security News] Russian Hackers Abuse OAuth and WhatsApp Device Linking to Hijack High-Value Accounts
- 11:21 UTC - [The Hacker News] Wazuh and AI For Enhanced SOC Workflows
- 11:04 UTC - [BleepingComputer] Microsoft warns of max severity Entra ID flaw exploited in attacks
- 11:04 UTC - [BleepingComputer] Microsoft patches max severity code execution, privilege escalation flaws
- 11:00 UTC - [BleepingComputer] Hackers abuse FTP server banners to deliver new Windows malware
- 10:56 UTC - [Cyber Security News] Hackers Use Fake Google Gemini Installer to Deploy Vidar Stealer and Steal Browser Credentials
- 10:10 UTC - [BleepingComputer] SickKids data breach exposes employee and job applicant info
- 10:03 UTC - [The Hacker News] Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
- 09:32 UTC - [Cyber Security News] Bandwidth-Sharing App Can Turn Employee Devices Into Gateways to Internal Networks
- 09:23 UTC - [SecurityWeek] Rust Supply Chain Attack Linked to North Korean Hackers
- 08:41 UTC - [SecurityWeek] Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind
- 08:12 UTC - [SecurityWeek] Microsoft Rolls Out 22 Fresh Security Patches
- 08:12 UTC - [SecurityWeek] Microsoft Patches Exploited Entra ID Vulnerability
- 07:52 UTC - [Cyber Security News] DOJ Charges 17 Iranian Hackers in IRGC-Linked Campaign That Stole 31.5TB of Research Data
- 07:50 UTC - [Cyber Security News] OpenAI Offers Zero Data Retention for Frontier AI Models With Private Safety Processing
- 07:46 UTC - [Cyber Security News] Critical Spring Security Flaw Lets Attackers Gain Admin Access to LDAP Servers
- 07:39 UTC - [Cyber Security News] Sakura Internet Breach – Hackers Accessed 1.36 million Customers’ Personal Records
- 07:25 UTC - [SecurityWeek] CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
- 07:04 UTC - [The Hacker News] GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
- 06:27 UTC - [Cyber Security News] Apple’s Private Find My People Reversed to Decrypt Live Shared Locations on Linux
- 06:21 UTC - [Cyber Security News] Hackers Exploit TrueConf Servers to Push Malware Through Legitimate Video Conference Downloads
- 06:06 UTC - [The Hacker News] Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution
- 06:06 UTC - [The Hacker News] Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution
- 05:41 UTC - [Cyber Security News] Google Chrome 151 Chromoting Flaw Allows Attackers to Execute Malicious Code Remotely
- 05:11 UTC - [Cyber Security News] China-Linked Spy Campaign Uses Five New Malware Families Against Central Asian Governments
- 03:38 UTC - [Cyber Security News] Microsoft Entra ID Remote Code Execution Vulnerability Exploited in the Wild
- 03:00 UTC - [Latest from TechRadar in Security] Massive supply-chain attack sees terabytes of data belonging to some of the world’s biggest and most sensitive organizations leaked online
2026-08-20 #
- 20:50 UTC - [bellingcat] Satellite Imagery Documents New Border Patrol Road Construction in Big Bend National Park
- 20:42 UTC - [darkreading] New CUSTODY Framework Constrains AI Agents Inside the Network
- 20:25 UTC - [Latest from TechRadar in Security] NASA's ground control software has a worrying security flaw which could let hackers contact spacecraft
- 20:22 UTC - [The Hacker News] Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
- 19:59 UTC - [The Hacker News] Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
- 19:11 UTC - [darkreading] What We Missed: Delta Flight Disrupted With Wi-Fi Hack
- 18:45 UTC - [Latest from TechRadar in Security] Android users beware — if you own one of these budget smartphones, your device could be hacked with a simple video call
- 18:34 UTC - [CyberScoop] Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist
- 17:53 UTC - [BleepingComputer] Hackers poison arrayref Rust crate to push infostealer malware
- 17:39 UTC - [darkreading] N-able Bug Exposes Password Vault Master Keys
- 17:32 UTC - [darkreading] Money and Mindset: The Two Biggest Roadblocks to Cyber Policing
- 17:23 UTC - [The Hacker News] ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
- 17:23 UTC - [The Hacker News] ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
- 17:15 UTC - [Latest from TechRadar in Security] Hackers are using “evolved” capabilities in AI-generated malware to hit US critical infrastructure at an unprecedented scale — “active threat” currently hitting energy, water and agricultural industries
- 17:04 UTC - [Cyber Security News] CRLF-Powered Desync Lets Attackers Poison CDN Cache and Serve XSS to Live Users
- 16:59 UTC - [The Hacker News] AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
- 16:55 UTC - [Cyber Security News] AWS Shows How to Stop a Hijacked AI Agent From Reading Data the User Cannot Access
- 16:39 UTC - [Cyber Security News] Microsoft Defender Driver Can Be Weaponized to Disable EDR and AV From Windows Kernel
- 16:15 UTC - [Cyber Security News] Popular Rust Packages With 244M Downloads Compromised to Run Malware
- 15:30 UTC - [Latest from TechRadar in Security] Scammers pose as ransomware recovery agents, but just go on to steal more from victims
- 15:27 UTC - [CyberScoop] Retail theft bill spurs ‘very large and very dangerous’ surveillance fears
- 15:24 UTC - [Cyber Security News] Critical NASA AIT-GUI Flaw Lets Unauthenticated Attackers Issue Spacecraft Commands
- 14:50 UTC - [SecurityWeek] Hackers Target Zimbra Servers in Active Exploitation Campaign
- 14:45 UTC - [Cybersecurity Dive - Latest News] Fitch explains how water, healthcare organizations can keep strong credit ratings, despite cyberattacks
- 14:45 UTC - [Cybersecurity Dive - Latest News] Fitch explains how water, healthcare organizations can keep strong credit ratings despite cyberattacks
- 14:39 UTC - [BleepingComputer] Critical Elementor Pro bug exposes WordPress sites to RCE attacks
- 14:36 UTC - [The Hacker News] New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
- 14:30 UTC - [SecurityWeek] Surveillance – Everything You Wanted to Know, But Were Afraid to Ask
- 14:22 UTC - [Latest from TechRadar in Security] Moving AI from pilot to production
- 14:07 UTC - [Cybersecurity Dive - Latest News] What we know so far about the hacking campaign against US water systems
- 14:01 UTC - [BleepingComputer] How MSPs can catch phishing attacks email filters miss
- 13:55 UTC - [Cyber Security News] ToxicPanda Android Malware Can Steal Banking PINs and Gain Shell Access to Phones
- 13:55 UTC - [Latest from TechRadar in Security] Healthtech firm CareCloud reveals March 2026 data breach impacted 3.7 million patients
- 13:48 UTC - [The Hacker News] Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
- 13:39 UTC - [Cyber Security News] Hackers Use Fake CAPTCHA to Install Malware That Kills 145 Security Processes
- 13:35 UTC - [The Hacker News] Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
- 13:31 UTC - [CyberScoop] The push to designate AI as the next critical infrastructure sector
- 13:30 UTC - [darkreading] 'Grandoreiro' Malware Resurfaces With Mexico Campaign
- 13:24 UTC - [The Hacker News] Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
- 13:20 UTC - [Cyber Security News] New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones
- 13:17 UTC - [DataBreaches.Net] Largest Applebee’s franchisee says hackers stole sensitive data
- 13:16 UTC - [SecurityWeek] Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia
- 13:06 UTC -
[0day Fans] BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive - 12:54 UTC - [Cyber Security News] Hackers Bypass Microsoft 365 MFA and Hijack Finance Mailbox to Steal Payments
- 12:32 UTC - [Cyber Security News] Zyxel Patches Command Injection Flaw in 18 Access Points Allowing Root OS Command Execution
- 12:24 UTC - [SecurityWeek] Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities
- 12:14 UTC - [BleepingComputer] Citrix urges admins to patch new NetScaler flaws as soon as possible
- 12:06 UTC - [Cyber Security News] Hackers Weaponize OpenClaw AI Agents to Push Malware and Steal Crypto Wallets
- 12:05 UTC - [SecurityWeek] MLflow Vulnerability Exploited for Cloud Credential Theft
- 12:01 UTC - [The Hacker News] Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments
- 11:59 UTC - [Cyber Security News] Cisco External Entity Injection Vulnerability Allows Attackers to Read Sensitive Data
- 11:57 UTC - [Cyber Security News] OpenAI Pauses AI Training Amid Concerns of New Model Potentially Discovering 0-Day Flaws
- 11:50 UTC - [Cyber Security News] Critical Red Hat Kubernetes SSRF Flaw Exposes Internal Services Across Managed Clusters
- 11:46 UTC - [SecurityWeek] Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
- 11:45 UTC - [The Hacker News] Why "Shady AI" is Security's Next Big Governance Problem
- 11:39 UTC - [Cyber Security News] Hackers Hide Malware Code Inside English Words to Infect Windows Users
- 11:39 UTC - [The Hacker News] CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification
- 11:26 UTC - [The Hacker News] Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
- 11:08 UTC - [SecurityWeek] AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking
- 11:06 UTC - [BleepingComputer] CISA warns of hackers exploiting critical MLflow vulnerability
- 11:05 UTC - [The Hacker News] NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
- 11:05 UTC - [Latest from TechRadar in Security] Over 9 million facial recognition images leaked in major breach at reverse image search and identity verification service
- 11:02 UTC - [Cyber Security News] Hackers Are Turning Claude, ChatGPT and Copilot Into Bait for Real Malware
- 10:53 UTC - [Latest from TechRadar in Security] How AI is transforming the role of test engineers
- 10:38 UTC - [The Hacker News] ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud
- 10:36 UTC - [SecurityWeek] OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses
- 10:02 UTC - [BleepingComputer] New Manic Android malware can exfiltrate data through nearby devices
- 10:01 UTC - [Latest from TechRadar in Security] Before approving the next AI budget, check the network
- 10:00 UTC - [Unit 42] Identity Abuse Through Trusted Communication Channels
- 09:58 UTC - [Cyber Security News] CyberPanel Pre-Auth RCE Chain Lets Attackers Gain Server Shell via AI Scanner Flaws
- 09:46 UTC - [BleepingComputer] Critical Zimbra RCE flaw now actively exploited in attacks
- 09:27 UTC - [Cyber Security News] New “Zombie Card” Flaw Lets Expired Visa Cards Make Contactless Payments
- 08:56 UTC - [Cyber Security News] 15 Malicious Firefox Extensions Abuse Cloudflare Workers to Exfiltrate Crypto Wallet Secrets
- 08:42 UTC - [The Hacker News] 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
- 08:33 UTC - [SecurityWeek] Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
- 08:22 UTC - [Cyber Security News] Splunk Patches Critical MCP Server RCE and 16 Other Security Flaws Across AI Toolkit, Kafka Apps
- 07:48 UTC - [SecurityWeek] Critical GitLab Flaw Exploited Shortly After Disclosure
- 07:02 UTC - [SecurityWeek] Hackers Using AI to Target Siemens PLCs in Critical US Sectors
- 06:51 UTC - [Cyber Security News] Claude AI Finds SAML Security Flaws That Can Let Attackers Take Over Accounts
- 06:51 UTC - [BleepingComputer] Microsoft says August Windows updates may cause gaming issues
- 06:34 UTC - [Cyber Security News] Critical Zimbra RCE Vulnerability Actively Exploited in the Wild
- 06:29 UTC - [Latest from TechRadar in Security] AI vendor dependency is becoming a resilience risk
- 06:04 UTC - [The Hacker News] Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
- 04:42 UTC - [Cyber Security News] Airlock Digital Completes Independent IRAP Assessment at the PROTECTED Level
- 04:15 UTC - [darkreading] Pakistan's Transparent Tribe Refreshes Toolset for Afghan Cyberattacks
- 04:11 UTC - [Cyber Security News] U.S. Agencies Warn of Hackers Actively Attacking Siemens S7 PLCs in Critical Facilities
- 03:31 UTC - [Cyber Security News] T-Mobile Cyber Team Physically Cuts Cable to Remove Chinese Hackers From Network
- 02:32 UTC - [Cyber Security News] AI Agent Hacks Snowflake GitHub Workflow and Reaches Internal Jira
- 00:20 UTC - [BleepingComputer] OpenAI confirms ChatGPT is down as logins and signups fail
- 00:00 UTC -
[0day Fans] [Initial Disclosure] AMD | ZEN 1
2026-08-19 #
- 23:10 UTC -
[Graham Cluley] Smashing Security podcast #481: Never say this to a robot dog - 20:59 UTC - [BleepingComputer] Rogue ransomware affiliate poses as recovery firm to steal payments
- 20:59 UTC - [BleepingComputer] Rogue ransomware affiliate poses as data recovery firm to steal payments
- 20:53 UTC - [BleepingComputer] Sakura Internet hack exposes data of up to 1.36 million accounts
- 20:32 UTC - [darkreading] No-Filter 'Kriminal' AI Platform Raises Cybercrime Concerns
- 20:07 UTC - [BleepingComputer] Healthtech firm CareCloud data breach impacts 3.7 million patients
- 20:00 UTC - [Latest from TechRadar in Security] Comcast is adding motion detection to millions of routers, and I’m worried it’s a privacy nightmare
- 19:54 UTC - [darkreading] Agentic AI Presents New Insider Threat Model for Orgs
- 19:37 UTC - [Cybersecurity Dive - Latest News] AI-backed campaign targeting vulnerable Siemens S7 devices, CISA and FBI warn
- 19:02 UTC - [The Hacker News] Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
- 18:45 UTC - [CyberScoop] AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn
- 18:37 UTC - [Cyber Security News] Trusted Vendors Are Becoming Attack Paths: How US and EU Enterprises Can Reduce the Risk
- 18:09 UTC - [BleepingComputer] Hackers compromise 14,500 Dahua web cameras in 35-day campaign
- 18:06 UTC - [The Hacker News] OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
- 17:50 UTC - [BleepingComputer] US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
- 17:30 UTC -
[Microsoft Security Blog] Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026 - 17:30 UTC - [Microsoft Security Blog] Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026
- 16:58 UTC - [darkreading] SilkParasite Threatens Central Asian Orgs With Flurry of RATs
- 16:56 UTC - [Cyber Security News] Critical Citrix NetScaler Flaw Lets Remote Attackers Bypass Authentication Without Credentials
- 16:47 UTC - [Cyber Security News] CISA Adds Microsoft Internet Key Exchange RCE Vulnerability Exploited in Attacks
- 16:17 UTC - [Cyber Security News] Hackers Let Microsoft 365 Users Complete MFA, Then Steal Logged-In Sessions
- 16:00 UTC -
[Cisco Security Advisory] Cisco Unified Intelligence Center SQL Injection Vulnerability - 16:00 UTC - [Cisco Security Advisory] Cisco Secure Workload Software Security Hardening Release: August 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco RoomOS Stack Overflow Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Crosswork Security Hardening Release: August 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
- 15:57 UTC - [CyberScoop] A California county wants to hire Tina Peters to help run its elections
- 15:56 UTC - [BleepingComputer] US charges Iranian hackers over $3.4 billion intellectual property theft
- 15:53 UTC - [Cyber Security News] Microsoft 365 Service Degradation Disrupts Users Across South America
- 15:19 UTC - [Cyber Security News] Former Ping Identity and CyberArk Executives Join AppViewX to Scale Machine and Agent Identity Security
- 15:15 UTC - [Cyber Security News] CISA Adds Microsoft SharePoint Weak Authentication Vulnerability to KEV List
- 15:07 UTC - [Cyber Security News] Microsoft to End Support for Windows 11 24H2 Home and Pro Editions
- 15:05 UTC - [Cyber Security News] China-Nexus Hackers Disguise Malicious VHD as JPEG to Deploy QUICAgent Backdoor
- 14:55 UTC - [Latest from TechRadar in Security] Experts manage to hack Microsoft Copilot by continually asking it questions about itself
- 14:50 UTC - [Cyber Security News] Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts
- 14:44 UTC - [Cybersecurity Dive - Latest News] Ransomware disproportionately targets medium-sized firms, straining customer relationships
- 14:30 UTC - [CyberScoop] The long tail of Clop’s PTC hack is just beginning to emerge
- 14:20 UTC - [Latest from TechRadar in Security] Microsoft smothers malware by tracking behavior instead of blocking domains
- 14:09 UTC - [Cyber Security News] Hundreds of Leaked Stripe Merchant Keys Expose Payment and Payout Capabilities
- 14:04 UTC - [DataBreaches.Net] Prison for data analyst who tried to extort $2.5 million from his employer
- 14:00 UTC - [BleepingComputer] Password spraying attacks surge 155x as hackers exploit MFA gaps
- 13:39 UTC - [Cyber Security News] Ransomware Hackers Pose as Recovery Firm and Demand Up to $60,000
- 13:36 UTC - [SecurityWeek] Virtual Event Today: CodeSecCon – Secure Your Code and Applications
- 13:22 UTC - [DataBreaches.Net] DOJ secures indictment of 17 Iranians accused of ‘massive’ cyber theft campaign
- 13:18 UTC - [Cyber Security News] MacSync Stealer Hides Behind 30+ Domains While Stealing Passwords and Sensitive Mac Data
- 13:12 UTC - [The Hacker News] SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
- 13:03 UTC - [Cyber Security News] Hackers Actively Exploiting macOS’s Built-in Screen Sharing Service Vulnerability in the Wild
- 12:54 UTC - [Cyber Security News] Windows Defender Update for 0-day Vulnerability Breaks Virus Scans
- 12:48 UTC - [DataBreaches.Net] Beware the Ransomware Rescuer: Ransom Busters
- 12:45 UTC - [DataBreaches.Net] Server Mistake Exposes StopAndProtect’s Hacked WordPress Network
- 12:00 UTC - [SecurityWeek] Prevalent AI Raises $22 Million to Expand Data Fabric Platform
- 11:42 UTC - [Cyber Security News] RAVEN Tool Exfiltrates Entire Elasticsearch Databases and Maintains Access After Password Rotation
- 11:34 UTC - [The Hacker News] Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
- 11:30 UTC - [SecurityWeek] US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them
- 11:30 UTC - [The Hacker News] Phishing 3.0: The Fight Moves to Agent Versus Agent
- 11:25 UTC - [The Hacker News] StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
- 11:20 UTC - [Latest from TechRadar in Security] Bluesky reveals recent outage was caused by major DDoS attack
- 11:14 UTC - [BleepingComputer] Microsoft fixes known issue causing Windows Defender crashes
- 11:07 UTC - [SecurityWeek] Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
- 11:01 UTC - [The Hacker News] Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
- 10:38 UTC - [Cyber Security News] Oracle Releases 943 Security Patches Including Critical WebLogic Full Takeover Vulnerability
- 10:37 UTC - [SecurityWeek] CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities
- 10:34 UTC - [Cyber Security News] Hackers Use Fake Claude Install Guide to Deploy MacSync Stealer and Trojanize Crypto Wallet Apps
- 10:12 UTC - [BleepingComputer] Critical RCE flaw in Windows IKE Extension now actively exploited
- 10:10 UTC - [Latest from TechRadar in Security] AI needs rules and rails: Why governance must move beyond policy
- 09:44 UTC - [Cyber Security News] BeyondTrust Windows EPM Vulnerabilities Allows Attackers to Escalate Privileges
- 09:30 UTC - [Cyber Security News] Claude Can Now Send Emails in Gmail and Manage Files in Google Drive
- 09:14 UTC - [SecurityWeek] 943 Patches Rolled Out With Oracle’s August 2026 Security Update
- 09:10 UTC - [BleepingComputer] Windows 11 24H2 Home and Pro reach end of support in 2 months
- 09:09 UTC - [Cyber Security News] CISA Warns of VMware vCenter Path Traversal Vulnerability Actively Exploited in Attacks
- 09:06 UTC - [Cyber Security News] Google Fixes Two Critical Chrome Flaws in WebGL and Dawn — Update Your Browser
- 08:45 UTC - [Cyber Security News] Critical Cursor 0-day Vulnerability Enables Arbitrary Code Execution Attacks
- 08:45 UTC - [Latest from TechRadar in Security] SMEs aren’t too small to target for cybercriminals, they’re too exposed to ignore
- 08:25 UTC -
[0day Fans] Breaking secure boot without breaking the crypto - 08:19 UTC - [SecurityWeek] Chrome, Firefox Updates Patch Dozens of Vulnerabilities
- 08:00 UTC - [BleepingComputer] CISA: Medusa ransomware hit over 500 critical infrastructure orgs
- 07:26 UTC - [Graham Cluley] Prison for data analyst who tried to extort $2.5 million from his employer
- 06:56 UTC - [SecurityWeek] CareCloud Data Breach Impact Grows to 3.7 Million Individuals
- 06:01 UTC - [The Hacker News] Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
- 05:46 UTC - [Cyber Security News] Cl0p Hackers Exploit PTC Windchill Flaw to Steal Passwords and Sensitive Company Data
- 05:39 UTC - [The Hacker News] Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
- 03:15 UTC - [Have I Been Pwned latest breaches] Oz Hair and Beauty - 1,988,331 breached accounts
- 02:32 UTC - [Cyber Security News] Critical Microsoft Copilot CoSnitch Vulnerability Lets Attackers Steal Sensitive Data With One Click
- 02:09 UTC - [Have I Been Pwned latest breaches] Fanlore - 144,520 breached accounts
- 02:06 UTC - [Cyber Security News] Irregular Pushes Stronger Containment Standards for Secure Frontier AI Cyber Evaluations
- 01:00 UTC - [darkreading] China-Linked Hacker Shows AI Capabilities in APAC Attack
2026-08-18 #
- 21:25 UTC - [darkreading] Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
- 21:09 UTC - [Cybersecurity Dive - Latest News] DOJ charges 17 people in Iran-backed hacking campaign against US
- 20:21 UTC - [DataBreaches.Net] Clop Claims Data Theft From More Than 40 Companies
- 20:20 UTC - [DataBreaches.Net] Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
- 20:17 UTC - [darkreading] 'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture
- 20:17 UTC - [darkreading] 'CoSnitch' Attack Tricked Copilot Into Mapping Out Architecture
- 20:15 UTC - [Latest from TechRadar in Security] 'The attacks we found only scratch the surface of what is possible': Experts say so-called 'Proactive SIM' cards can hijack smartphones, IoT devices and even EV chargers
- 20:14 UTC - [BleepingComputer] Comcast turns your Xfinity WiFi into a home motion detector
- 20:12 UTC - [CyberScoop] Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
- 19:15 UTC - [Latest from TechRadar in Security] 'This technology turns every router into a potential means for surveillance': Report claims Wi-Fi devices could 'quietly identify' people with nearly 100% accuracy
- 19:09 UTC - [darkreading] The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed
- 19:05 UTC - [Unit 42] Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)
- 18:32 UTC - [darkreading] CISOs Break Their Silence in 'Declassified' Docuseries
- 17:47 UTC - [Cyber Security News] CISA Warns Medusa Ransomware Hackers Steal Data, Kill Security Tools, and Encrypt Entire Networks
- 17:47 UTC - [The Hacker News] Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
- 17:44 UTC - [The Hacker News] Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
- 17:29 UTC - [BleepingComputer] Clop created custom web shell for Windchill data theft attacks
- 17:18 UTC - [CyberScoop] Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics
- 17:08 UTC - [Microsoft Security Blog] Hunting MacSync Stealer infrastructure through behavioral pivots
- 17:00 UTC - [Cyber Security News] French Tax Authority Data Breach Exposes 600,000+ Users’ Personal Tax-Related Data
- 17:00 UTC - [Cyber Security News] French Tax Authority Data Breach Exposes 600,000+ Users Personal Tax-Related Data
- 16:58 UTC - [The Hacker News] Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
- 16:52 UTC - [Cyber Security News] Critical MLflow SSRF Vulnerability Exploited by Hackers in the Wild
- 16:47 UTC - [Cyber Security News] Hackers Hijack Thousands of WordPress Sites to Use as C2 Servers for StopAndProtect Malware
- 16:26 UTC - [Cyber Security News] Microsoft 365 Search Outage Disrupts SharePoint, OneDrive, and Outlook Users Worldwide
- 16:03 UTC - [Cyber Security News] Anthropic Launches New /design Skill for Claude Code UI Workflows
- 15:34 UTC - [Cyber Security News] Projextor Shows How Malware Can Hide Behind Trusted Electron Executables
- 15:10 UTC - [Cyber Security News] BTMob Fraud-as-a-Service Platform Uses 1,400 Live Servers to Power Android Device Takeovers
- 15:05 UTC - [Latest from TechRadar in Security] Geekom reveals multiple mini-PCs may be infected with malware hidden in a network driver — but it's now down to you to fix your PC
- 15:03 UTC - [SecurityWeek] Webinar Today: Rethinking Cyber Defense for AI-Speed Attacks
- 14:52 UTC - [Cybersecurity Dive - Latest News] GitLab issues emergency patch for critical code-injection flaw
- 14:30 UTC - [SecurityWeek] CISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOW
- 14:27 UTC - [Cyber Security News] GEEKOM Mini PC Realtek LAN Driver Package Found Infected With Asruex Trojan
- 14:15 UTC - [Latest from TechRadar in Security] Loan company breach sees nearly 750,000 users have financial info, SSNs leaked
- 14:03 UTC - [Cyber Security News] JWR Phishing Framework Uses Real-Time WebSocket Control and AES Encryption to Steal Banking Credentials
- 14:01 UTC - [BleepingComputer] Your Controls Block Known Attacks. What About the Behavior?
- 13:41 UTC - [Cyber Security News] Kimsuky Expands Its Cyber Espionage Arsenal With Local AI Development Environment
- 13:21 UTC - [Cyber Security News] Octagon Can Steal SMS One-Time Codes During Banking and Crypto Account Takeovers
- 13:05 UTC - [0day Fans] Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect
- 13:02 UTC - [Cyber Security News] Apple Fixes 28 Security Vulnerabilities Across macOS, iOS, and iPadOS
- 13:00 UTC - [Latest from TechRadar in Security] Millions of stolen records allegedly dumped online by mystery "Hatman" hacker — McDonalds, Vodafone and more see Microsoft Azure records stolen
- 13:00 UTC - [SecurityWeek] AI-Driven Vulnerability Surge Breaks the Traditional Patching Model
- 13:00 UTC - [darkreading] Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
- 13:00 UTC - [darkreading] 'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service
- 12:53 UTC - [Cyber Security News] OpenAI Warns AI Models Can Automate Cyberattacks and Exploit Security Vulnerabilities
- 12:47 UTC - [Cyber Security News] C2Looper Updates Itself Through OneDrive DLL Sideloading to Evade Detection
- 12:38 UTC - [The Hacker News] AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files
- 12:38 UTC - [The Hacker News] TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
- 12:36 UTC - [Cyber Security News] Why Threat Intelligence Feeds Often Fail to Meet SOC Expectations
- 12:29 UTC - [SecurityWeek] Xpander Raises $7.5 Million for AI Management and Governance
- 12:16 UTC - [Cyber Security News] Crypto Scammer Uses Claude Code to Process 100,000+ Phone Numbers for Victim Targeting
- 12:06 UTC - [SecurityWeek] Fortinet Acquires AI Security Company Virtue AI
- 12:02 UTC - [Cyber Security News] 10 Best Dark Web Monitoring Tools in 2026
- 12:00 UTC - [Cybersecurity Dive - Latest News] AI-powered vulnerability clearinghouse faces deep skepticism, major challenges
- 11:40 UTC - [The Hacker News] 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
- 11:30 UTC - [The Hacker News] One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
- 11:14 UTC - [BleepingComputer] Microsoft tests faster Windows File Explorer, new context menu
- 11:06 UTC - [Cyber Security News] CISA Warns of Ray-Project Ray Code Injection Vulnerability Exploited in Attacks
- 10:55 UTC - [Cyber Security News] Shadow hVNC Gives Attackers Remote Desktop Control Without Moving the Victim’s Mouse
- 10:48 UTC - [SecurityWeek] 300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw
- 10:40 UTC -
[Schneier on Security] LLMs and Contextual Integrity - 10:32 UTC - [BleepingComputer] CISA: Windows Task Host flaw now exploited by ransomware gangs
- 10:23 UTC - [Latest from TechRadar in Security] Pokémon Center data breach exposes customer info, cancels some orders
- 10:00 UTC - [Latest from TechRadar in Security] Cybersecurity needs a new KPI: it's time to measure our ability to adapt
- 09:24 UTC - [BleepingComputer] Microsoft confirms outage affecting search in Microsoft 365 apps
- 09:18 UTC - [SecurityWeek] Heights Finance Data Breach Impacts at Least 1.2 Million Individuals
- 09:10 UTC - [The Hacker News] SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
- 08:56 UTC - [Latest from TechRadar in Security] National infrastructure needs a new approach to cyber resilience
- 08:51 UTC - [SecurityWeek] GitLab Patches Critical Code Injection Vulnerability
- 08:48 UTC - [Cyber Security News] Critical WordPress Plugin Vulnerability Exposes 600,000 Sites to File Upload Attacks
- 08:12 UTC - [BleepingComputer] Microsoft starts removing WMIC tool used by cybercriminals
- 08:02 UTC - [Cyber Security News] VMware vCenter Attackers Drop JSP Webshell Disguised as Performance Update
- 08:02 UTC - [Cyber Security News] VMware Syslog Path Traversal Becomes Root RCE, Persistent SSH Access and ESXi Ransomware
- 07:37 UTC - [Cyber Security News] Critical GitLab GraphQL Vulnerability Allow Attackers to Delete Public Projects
- 06:49 UTC - [Cyber Security News] Windows 11 File Explorer Gets Faster, Customizable Right-Click Menu With App Extension Controls
- 06:46 UTC - [SecurityWeek] Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates
- 06:34 UTC - [The Hacker News] CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
- 06:25 UTC - [Cyber Security News] Top 10 Best Network Sandboxing Solutions in 2026
- 05:56 UTC - [Cyber Security News] Claude Code Helps Ransomware Operator Steal LDAP Passwords, Backdoor VPNs and Exfiltrate SQL Databases
- 05:39 UTC - [Cyber Security News] Public Exploit Code Released for Microsoft SCCM Remote Code Execution Vulnerability
- 02:38 UTC - [Cyber Security News] Pokémon Center Confirms Data Breach – Hackers Stole Customers’ Personal Data