News Feed
Updates every 30 minutes - Generated via RSS feed on: 2026-10-14 23:00:05 UTC Feedback and suggestions for other sources are welcome.
2026-10-14 #
- 22:56 UTC -
[BleepingComputer] Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks - 22:00 UTC -
[Unit 42] Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant - 21:43 UTC -
[Black Hills Information Security, Inc.] The Threat Hunting Flywheel: Why Threat Hunting Isn’t About Finding Bad Things - 21:40 UTC -
[CyberScoop] Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia - 21:20 UTC -
[darkreading] Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles - 20:57 UTC - [darkreading] Yam Store: The Phishing Network Behind a Billion Messages
- 20:24 UTC -
[Proofpoint Threat Insight] Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus - 20:09 UTC - [darkreading] Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
- 19:41 UTC - [BleepingComputer] FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
- 18:38 UTC -
[The Hacker News] Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability - 18:19 UTC -
[Cyber Security News] Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code - 17:46 UTC - [BleepingComputer] Ledger asks sellers across Asia to halt sales after supply-chain attack
- 17:42 UTC - [CyberScoop] Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
- 17:38 UTC - [The Hacker News] Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
- 17:29 UTC - [BleepingComputer] Cisco patches new Secure Email Gateway zero-day exploited in attacks
- 17:09 UTC - [The Hacker News] Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
- 16:46 UTC - [Cyber Security News] 24 Security Vulnerabilities Patched in curl Used Across 30 Billion Installations
- 16:34 UTC - [The Hacker News] U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
- 16:29 UTC - [Cyber Security News] How MSSPs Can Cut Tier 1 Bottlenecks Eating into Profit Margins
- 16:00 UTC -
[SecurityWeek] AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds - 16:00 UTC -
[Cisco Security Advisory] Cisco Secure Email Gateway Arbitrary File Write Vulnerability - 16:00 UTC - [Cisco Security Advisory] Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
- 15:51 UTC - [Cyber Security News] Microsoft’s Recent Windows Updates Break Remote Desktop Services With Error “0xC000000D”
- 15:51 UTC - [Cyber Security News] Microsoft’s October Windows Updates Break Remote Desktop Services
- 15:15 UTC - [SecurityWeek] ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
- 15:13 UTC -
[Cybersecurity Dive - Latest News] Hacker targets Ivanti Connect Secure in chained exploitation - 15:11 UTC - [CyberScoop] Senators press Trump admin to rally federal government around AI safety, security
- 15:09 UTC -
[DataBreaches.Net] Japan on Cyberattack Alert as Ransomware Wave Hits Major Brands and Exposes Millions of Records - 15:05 UTC -
[Latest from TechRadar in Security] Security flaws found in top open source AI gateway — LiteLLM vulnerabilties could affect millions of users - 15:00 UTC - [Cybersecurity Dive - Latest News] Ahold Delhaize USA banners remain offline
- 15:00 UTC -
[All Fortinet Blog | Latest Posts] Think Before You Click: Phishing in the AI Era - 15:00 UTC - [All Fortinet Blog | Latest Posts] Strengthening OT Security with the Fortinet AI-Enabled OT Security Platform
- 14:46 UTC - [Cybersecurity Dive - Latest News] Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
- 14:40 UTC - [Cybersecurity Dive - Latest News] Microsoft, Health-ISAC and partners take down popular phishing kit services
- 14:27 UTC - [BleepingComputer] Microsoft fixes VPN issues caused by September Windows updates
- 14:22 UTC -
[Krebs on Security] U.K. Sanctions Cryptomus for RU Money Laundering - 14:10 UTC - [Latest from TechRadar in Security] '123456' password was the only thing standing between hacker and data of 8.8 million people
- 14:09 UTC - [SecurityWeek] Harmonic Security Raises $50 Million for Workforce AI Protection
- 14:08 UTC - [Cyber Security News] Hackers Use Fake WatchGuard VPN Download Site to Steal Login Credentials
- 14:00 UTC - [BleepingComputer] The Blind Spots of Agentic Pentesting and How to Close Them
- 13:56 UTC - [SecurityWeek] Virtual Event Today: Zero Trust Strategies Summit
- 13:44 UTC - [Cyber Security News] Meta, Google, Microsoft and OpenAI Join Global Crackdown on West African Scam Networks
- 13:29 UTC - [Latest from TechRadar in Security] The biggest misconceptions about web browsers and why they matter in the AI era
- 13:19 UTC - [Cyber Security News] PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape
- 13:12 UTC - [BleepingComputer] Global takedown hits network behind 1 billion phishing messages
- 13:05 UTC - [Latest from TechRadar in Security] Massive data leak from AI development company exposes almost 14 million records — Vibetech collected data from different breaches and accidentally made them accessible online
- 13:00 UTC - [SecurityWeek] Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
- 13:00 UTC -
[Microsoft Security Blog] The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime - 13:00 UTC - [darkreading] Russian Influence Operation Widely Targeting Latin America
- 13:00 UTC - [CyberScoop] Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
- 12:58 UTC - [BleepingComputer] CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
- 12:37 UTC - [Cyber Security News] FBI Disrupts North Korean Famous Chollima Laptop Farms Used to Infiltrate U.S. Companies
- 12:30 UTC - [The Hacker News] CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
- 12:13 UTC - [The Hacker News] curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
- 12:09 UTC - [DataBreaches.Net] Shipping firms and ports caught in mass cyber extortion claim
- 11:50 UTC - [The Hacker News] How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
- 11:41 UTC - [BleepingComputer] Hirudo Android malware replaces banking apps to evade security checks
- 11:37 UTC - [Latest from TechRadar in Security] New Eufy E10 Window Camera offers 2.5K resolution and subscription-free storage
- 11:19 UTC - [The Hacker News] Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
- 11:08 UTC - [The Hacker News] Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks
- 11:00 UTC - [Latest from TechRadar in Security] 'What companies are facing today is an AI zoo' — NordLayer warns that dozens of unsanctioned chatbots are quietly widening every company's exposure to data leaks
- 11:00 UTC - [The Hacker News] An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
- 10:55 UTC - [SecurityWeek] US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
- 10:48 UTC - [BleepingComputer] Microsoft: Recent Windows updates may trigger Remote Desktop failures
- 10:45 UTC - [Cyber Security News] VirusTotal Integrates Threat Intelligence With ChatGPT for Malware Analysis
- 09:37 UTC - [Cyber Security News] Google Awarded a $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6
- 09:37 UTC - [Cyber Security News] Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6
- 09:28 UTC - [Cyber Security News] Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks
- 09:26 UTC - [Cyber Security News] Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit
- 08:49 UTC - [Cyber Security News] Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People
- 08:33 UTC - [Cyber Security News] Attackers Breach European Bank Through Third-Party Gateway and Target WSUS Server
- 08:11 UTC - [Cyber Security News] Gears of War: E-Day Hit by DDoS Attack, Causing Login Failures and Disconnects
- 07:59 UTC - [Cyber Security News] Multiple Google Chrome Vulnerabilities Could Enable Memory Corruption and Code Execution Attacks
- 07:59 UTC - [Cyber Security News] Multiple Google Chrome Flaws Could Enable Memory Corruption and Code Execution Attacks
- 07:51 UTC - [Cyber Security News] Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentials
- 07:46 UTC - [The Hacker News] AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
- 07:38 UTC - [SecurityWeek] Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
- 07:26 UTC - [SecurityWeek] Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
- 07:16 UTC - [SecurityWeek] Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
- 07:03 UTC - [Cyber Security News] Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks
- 06:57 UTC - [Cyber Security News] Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer
- 06:12 UTC - [SecurityWeek] SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
- 06:01 UTC -
[Have I Been Pwned latest breaches] Crunchbase - 559,908 breached accounts - 05:52 UTC - [The Hacker News] Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
- 05:00 UTC - [darkreading] Ransomware Gangs Embrace Physical Threats, Family Stalking?
- 04:34 UTC - [The Hacker News] Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug
- 03:28 UTC - [Cyber Security News] Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks
- 02:25 UTC - [Cyber Security News] OpenAI Engineer Arrested for Planting Spyware Device in an Executive Conference Room
- 01:59 UTC - [The Hacker News] OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
2026-10-13 #
- 23:24 UTC - [Krebs on Security] Microsoft Patches More Than 1,400 Security Flaws
- 23:07 UTC - [SecurityWeek] Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
- 22:33 UTC - [BleepingComputer] OpenAI engineer arrested for allegedly planting spy device in office
- 22:29 UTC - [darkreading] Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
- 22:10 UTC - [CyberScoop] Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
- 22:00 UTC -
[0day Fans] Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) - 22:00 UTC - [Unit 42] The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
- 21:43 UTC - [CyberScoop] DOJ charges 14 over a sprawling North Korean remote work scheme
- 21:33 UTC - [BleepingComputer] Ghostscript flaw lets hackers hijack servers via PDF uploads
- 21:24 UTC - [darkreading] North Korea Phishes Ukrainians for War Intel
- 21:16 UTC - [BleepingComputer] Anthropic warns self-replicating AI could spread to your smart devices
- 20:49 UTC - [DataBreaches.Net] Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach
- 20:35 UTC - [darkreading] Anthropic Finds Ingredients for Future AI Worms
- 19:56 UTC - [BleepingComputer] Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
- 19:47 UTC - [BleepingComputer] Microsoft releases Windows 10 KB5126657 extended security update
- 19:23 UTC - [CyberScoop] FTC says ‘sextortion’ protection companies deceived customers about services
- 19:04 UTC - [BleepingComputer] Microsoft: Windows 11 24H2 Home and Pro reached end of support
- 18:43 UTC - [SecurityWeek] Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
- 18:20 UTC - [The Hacker News] Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
- 18:19 UTC - [BleepingComputer] UK Housing Ombudsman Service investigates 'security incident'
- 18:19 UTC - [Cyber Security News] Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts
- 18:03 UTC - [The Hacker News] Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
- 17:54 UTC - [Cyber Security News] Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication
- 17:49 UTC - [BleepingComputer] Windows 11 KB5127648 & KB5126653 cumulative updates released
- 17:33 UTC - [The Hacker News] Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
- 17:28 UTC - [The Hacker News] SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
- 17:26 UTC - [Cyber Security News] TFG London Cyberattack Disrupts IT Systems Used by Phase Eight, Hobbs, and Whistles Brands
- 17:15 UTC - [Latest from TechRadar in Security] AI model ‘self-replication’ is only months away, Anthropic says — and it doesn’t even need a data center to happen
- 17:14 UTC - [SecurityWeek] Adobe Patches 176 Vulnerabilities Across 11 Products
- 17:14 UTC - [SecurityWeek] Adobe Patches 140 Vulnerabilities Across 10 Products
- 17:00 UTC - [SecurityWeek] Google Partially Reverses Chrome Bug Bounty Cuts
- 16:55 UTC - [Cyber Security News] Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images
- 16:49 UTC - [Cyber Security News] CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure
- 16:44 UTC - [BleepingComputer] TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
- 16:25 UTC - [Latest from TechRadar in Security] Microsoft closes a worrying Windows 11 account bypass hack — all it took was one click
- 16:18 UTC - [The Hacker News] GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
- 16:15 UTC - [Cyber Security News] Zoom Clients for Certificate Validation Flaw Exposes Sensitive Information via Network Access
- 16:15 UTC - [CyberScoop] West African scammers targeted in joint international government-industry operation
- 16:01 UTC - [SecurityWeek] Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
- 15:55 UTC - [Cyber Security News] Ivanti Connect Secure 0-Day Vulnerability Actively Exploited in the Wild
- 15:55 UTC - [Cyber Security News] Ivanti Connect Secure 0-Day Flaw Actively Exploited in the Wild to Execute Arbitrary Commands
- 15:49 UTC - [Cyber Security News] Danfoss Refrigeration Hack Update – 4,980 Hosts Found Exposed to Internet
- 15:45 UTC - [BleepingComputer] Ivanti warns of Connect Secure zero-day exploited in attacks
- 15:26 UTC - [Cyber Security News] CISA Warns of Hackers Exploiting Two Citrix NetScaler 0-Days to Execute Code Remotely
- 15:20 UTC - [BleepingComputer] Docker Hub flaw let attackers impersonate users, tamper with images
- 15:10 UTC - [Latest from TechRadar in Security] Hackers turn business backup servers into crypto mines after sneaking malware disguised as Microsoft Edge
- 15:02 UTC - [Cyber Security News] Threat Intelligence Guide for US SOC Teams and CISOs: How to Choose the Right Solution
- 15:00 UTC - [All Fortinet Blog | Latest Posts] Measuring Workforce Readiness: What Security Awareness Success Looks Like
- 14:59 UTC - [Cybersecurity Dive - Latest News] Dangerous flaws in refrigeration equipment were disclosed months before retail attacks
- 14:38 UTC - [Cybersecurity Dive - Latest News] Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
- 14:30 UTC -
[0day Fans] When LLM Gateways Go Wrong: Findings from LiteLLM - 14:25 UTC - [Latest from TechRadar in Security] Ahold Delhaize takes systems offline after cyberattack — global retail giant says 'cybersecurity incident' hit systems, but stores remain open
- 14:01 UTC - [BleepingComputer] The MFA Gaps Attackers are Still Exploiting
- 13:57 UTC - [Cyber Security News] Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo
- 13:56 UTC - [Cyber Security News] G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth
- 13:52 UTC - [Cyber Security News] ICMacOS Malware Evolves to Steal Credentials and Provide Persistent Remote Mac Access
- 13:51 UTC - [BleepingComputer] SAP warns of maximum severity OAuth2 SSRF security flaw
- 13:33 UTC - [Cyber Security News] XWorm Malware Can Spy Through Your Microphone and Hijack Logged-In Browser Sessions
- 13:12 UTC - [The Hacker News] Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
- 13:05 UTC - [Latest from TechRadar in Security] Over 8.7 million karaoke fans at risk after major data breach — Japanese giant Nippon Columbia says malware infection was to blame for exposing records
- 13:00 UTC - [DataBreaches.Net] UK: Commercial market research and data-gathering firm in the medical space leaked health data
- 13:00 UTC - [All Fortinet Blog | Latest Posts] Fortinet Achieves IEC 62443 Certification Across the FortiOS Product Family
- 12:48 UTC - [Cyber Security News] Critical Ghostscript Flaw Lets Attackers Use Malicious PDFs to Execute Code
- 12:43 UTC - [DataBreaches.Net] ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives
- 12:37 UTC - [Cyber Security News] SAP Security Update Patches Critical Code Injection and Memory Corruption Vulnerabilities
- 12:36 UTC - [Cyber Security News] Kimsuky Hackers Use Malicious Resume Documents to Deploy Funhouse Ransomware
- 11:59 UTC - [Cyber Security News] Fake Web3 Accelerator Uses Malicious npm Packages to Target Crypto Founders
- 11:59 UTC - [Cyber Security News] Anthropic Warns AI Models May Soon Self-Replicate Across Smart TVs and IoT Devices Without a Data Center
- 11:59 UTC - [Cyber Security News] Anthropic Warns AI Models Could Soon Self-Replicate on Smart TVs and IoT Devices Without a Data Center
- 11:58 UTC - [SecurityWeek] Small AI Models May Soon Be Able to Self-Replicate on IoT Devices, Anthropic Warns
- 11:58 UTC - [SecurityWeek] Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns
- 11:57 UTC - [The Hacker News] [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
- 11:37 UTC -
[0day Fans] Power Grid Model Security Audit - 11:13 UTC - [SecurityWeek] XWorm RAT Evolves Into Surveillance Platform
- 11:09 UTC - [The Hacker News] LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
- 11:00 UTC - [SecurityWeek] AI Turns Familiar Cyberattacks Into a Race Against Time
- 10:59 UTC - [Latest from TechRadar in Security] Mozilla launches Firefox Enterprise to give European firms more choice — new browser gives government, healthcare and finance more control over how they use the web, handle sensitive data and access AI tools
- 10:56 UTC - [Cyber Security News] npm Trusted Publishing Flaw With 10 Million Downloads Exposes 1,500+ Packages to Malicious Takeover
- 10:56 UTC - [Latest from TechRadar in Security] The era of passwords is coming to an end
- 10:36 UTC - [SecurityWeek] $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
- 10:33 UTC - [Cyber Security News] Hackers Exploit Citrix NetScaler 0-Days to Deploy Platypus Remote Access Tool
- 10:30 UTC - [The Hacker News] Product Walkthrough: Bitdefender AI Visibility and Control
- 10:25 UTC - [Cyber Security News] Top 10 Best Mobile Application Security Testing Tools in 2026 [Ranked & Scored]
- 10:21 UTC - [Cyber Security News] Top 10 Best SBOM Tools in 2026 [Ranked & Scored]
- 10:16 UTC - [Cyber Security News] Top 10 Best CI/CD Pipeline Security Tools in 2026 [Ranked & Scored]
- 10:10 UTC - [Cyber Security News] Top 10 Best RASP Tools in 2026 [Ranked & Scored]
- 10:03 UTC - [Cyber Security News] Meta Zurp AI Toolkit Connects Burp Suite With AI Coding Agents for Bug Bounty Research
- 09:50 UTC - [Latest from TechRadar in Security] UK cyber defenses ‘likely’ to be breached, warns AI minister
- 09:46 UTC - [Cyber Security News] Amazon Fire TV Cube 3 Exploit Enables Root Access and Bootloader Unlock
- 09:37 UTC - [SecurityWeek] Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems
- 09:37 UTC - [SecurityWeek] Cyberattack Prompts Ahold Delhaize to Disconnect Systems
- 09:30 UTC - [Cyber Security News] Critical Progress MarkLogic Flaws Enable Remote Code Execution and Admin Takeover
- 09:28 UTC - [Cyber Security News] Critical MariaDB Flaws Can Let Attackers Execute Code and Steal Database Data
- 09:11 UTC - [Cyber Security News] GhostProfile macOS Malware Clones Browser Profiles to Hijack Live Sessions
- 09:08 UTC - [Latest from TechRadar in Security] Sovereign AI isn't just where your data lives
- 08:48 UTC - [The Hacker News] Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
- 08:44 UTC - [The Hacker News] Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
- 08:43 UTC - [The Hacker News] GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
- 08:28 UTC - [SecurityWeek] Refrigeration Controller Hack Spoils Food Across European Supermarkets
- 08:27 UTC - [Cyber Security News] Kimsuky Operation GitPower Uses GitHub to Deliver Malware and Steal Data
- 08:20 UTC -
[Graham Cluley] GTA 6 leaker threatens to release full playable version of game ahead of official launch - 07:22 UTC - [Cyber Security News] Critical SonicWall Vulnerability Exploited in Attacks Following Disclosure
- 06:00 UTC - [The Hacker News] Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
- 04:09 UTC - [Cyber Security News] Massive DDoS Attack Disrupts Ubuntu’s Canonical Websites and Security APIs
- 03:28 UTC - [Cyber Security News] Yandex Data Center Outage Disrupts Access to Cloud Files Following Drone Attack
- 03:09 UTC - [Cyber Security News] WordPress Plugin Vulnerability Exploited in Attacks to Upload and eEecute Arbitrary PHP code
- 03:07 UTC - [Cyber Security News] LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication
- 02:05 UTC - [Latest from TechRadar in Security] 'People aren’t perfect, and everyone knows it': Security experts still see humans as the biggest threat to their business
- 01:10 UTC - [Latest from TechRadar in Security] Russian bot traffic decimated overnight after Ukraine drone strikes knock multiple Yandex data centers offline
- 00:20 UTC - [Latest from TechRadar in Security] Hackers claim to have hit thousands of Trump Phone customers as the bad news for golden smartphone fans continues
2026-10-12 #
- 23:28 UTC - [Have I Been Pwned latest breaches] Sharecare - 318,185 breached accounts
- 22:11 UTC - [CyberScoop] Flock can now issue CVEs for its own products. Should we trust it?
- 22:00 UTC -
[0day Fans] Playing It SFAPE: Code Execution in Isolated User Mode - 21:42 UTC - [darkreading] Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
- 20:13 UTC - [BleepingComputer] Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
- 20:00 UTC - [darkreading] Prominent Ransomware Negotiator Faces Extortion Charges
- 20:00 UTC - [Cybersecurity Dive - Latest News] Ahold Delhaize experiencing cybersecurity issue
- 19:23 UTC - [BleepingComputer] Yandex confirms service outage as users lose access to cloud files
- 18:51 UTC - [BleepingComputer] Anthropic takes risky AI tests offline after models breach govt sites
- 18:27 UTC - [darkreading] No Identity, No Recovery: Cyber Resilience Starts With IAM
- 18:25 UTC - [Latest from TechRadar in Security] Trying to change your browser? It might be harder than you think, based on one simple thing
- 18:12 UTC - [CyberScoop] IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
- 17:25 UTC - [Latest from TechRadar in Security] Experts warn cheap Android phones are being shipped with malware built in, so be on your guard
- 16:27 UTC - [BleepingComputer] Ledger confirms spy chip implant behind wallet crypto thefts
- 16:27 UTC - [BleepingComputer] Ledger confirms hardware wallet spy implant behind crypto thefts
- 16:05 UTC - [Latest from TechRadar in Security] Hackers hide behind Microsoft's own websites to get past email filters and launch phishing campaigns
- 15:27 UTC - [Cybersecurity Dive - Latest News] CISA calls on Citrix NetScaler customers to patch as new flaws disclosed
- 15:26 UTC - [Latest from TechRadar in Security] An AI scammer tricked a woman into believing she was dating Jon Bon Jovi
- 15:23 UTC - [BleepingComputer] Cyberattack shuts down refrigerators at French supermarkets
- 15:16 UTC - [The Hacker News] ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
- 15:12 UTC - [Cyber Security News] Ahold Delhaize Takes Systems Offline Following Cybersecurity Incident
- 15:00 UTC - [All Fortinet Blog | Latest Posts] Fortinet Advances Cybercrime Cooperation at the CSI 2026 Global Summit
- 14:55 UTC - [Cybersecurity Dive - Latest News] GitLab fixes serious vulnerability that exposed software environments to sabotage
- 14:55 UTC - [Cybersecurity Dive - Latest News] GitLab fixes critical vulnerability that exposed software environments to sabotage
- 14:31 UTC - [Cyber Security News] Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions
- 14:25 UTC - [SecurityWeek] IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
- 14:19 UTC - [Cyber Security News] Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers
- 14:02 UTC - [Cyber Security News] WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows
- 14:00 UTC - [BleepingComputer] Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
- 13:51 UTC - [BleepingComputer] Retail giant Ahold Delhaize takes systems offline after cyberattack
- 13:46 UTC - [DataBreaches.Net] Australian patient data compromised in Icon Cancer Centre hack
- 13:19 UTC - [DataBreaches.Net] French supermarket chains say cyberattack forced refrigerator shutdown
- 13:19 UTC - [DataBreaches.Net] French supermarket chains say cyberattack forced refrigerator shutdown (2)
- 13:19 UTC - [DataBreaches.Net] French supermarket chains say cyberattack forced refrigerator shutdown (1)
- 13:14 UTC - [SecurityWeek] Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
- 13:11 UTC - [Cyber Security News] Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time
- 13:10 UTC - [Cyber Security News] Ledger Confirms Unauthorized Hardware Implant in Crypto Wallet Sold by CryptoBilis
- 13:09 UTC - [BleepingComputer] GitLab warns of max severity code execution vulnerability
- 12:54 UTC - [Cyber Security News] Attackers Reportedly Hack Supermarket Fridges and Raise Temperatures to 50°C
- 12:30 UTC - [darkreading] Passing the Baton: Dark Reading Names New Editor-in-Chief
- 12:15 UTC - [Latest from TechRadar in Security] Why small businesses can’t afford to treat cybersecurity as an afterthought
- 12:07 UTC - [Cyber Security News] IBM Patches 22 Verify Access Flaws, Including Critical Remote Code Execution Bugs
- 12:07 UTC - [DataBreaches.Net] Co-Creator of Dark Web Marketplace Sentenced to 40 Years in Federal Prison
- 11:58 UTC - [SecurityWeek] Canonical Websites Disrupted in Second DDoS Attack This Year
- 11:58 UTC - [BleepingComputer] Microsoft: Windows 11 23H2 reaches end of support in 30 days
- 11:56 UTC - [Cyber Security News] Hackers Exploit Critical AhsayCBS Flaws to Deploy Webshells and XMRig Miners
- 11:55 UTC - [The Hacker News] Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
- 11:50 UTC - [Cyber Security News] FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation
- 11:27 UTC - [Cyber Security News] New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing
- 11:24 UTC - [SecurityWeek] Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
- 11:21 UTC - [The Hacker News] Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
- 11:09 UTC - [Latest from TechRadar in Security] The growing risk of SaaS sprawl requires a smarter approach to integration
- 11:05 UTC - [SecurityWeek] iRhythm Data Breach Impacts at Least 360,000 People
- 10:52 UTC - [Cyber Security News] Microsoft Exchange Admin Center Issue Blocks Web Portal Access to Admins With “Internal Server Error”
- 10:43 UTC - [Cyber Security News] Nippon Columbia Malware Infection May Have Exposed 8.7 Million Customer Records
- 10:36 UTC - [The Hacker News] Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
- 10:34 UTC - [Cyber Security News] Casbaneiro Malware Hides C2 Activity Until Victims Visit Banking Websites
- 10:32 UTC - [SecurityWeek] Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
- 10:00 UTC - [CyberScoop] Your AI agent is only as safe as the packages it downloads
- 09:31 UTC - [Cyber Security News] FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
- 09:02 UTC - [The Hacker News] Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
- 09:00 UTC - [Cybersecurity Dive - Latest News] AI-driven security: Why agentic AI is changing cybersecurity
- 08:40 UTC - [Cyber Security News] Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
- 08:36 UTC - [SecurityWeek] Critical SonicWall Vulnerability Exploited Days After Disclosure
- 08:05 UTC - [Cyber Security News] Decepticon – Autonomous Red Team Agent that Integrates Claude and Codex
- 07:53 UTC - [SecurityWeek] Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
- 07:43 UTC - [Cyber Security News] CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks
- 07:26 UTC - [The Hacker News] CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
- 07:18 UTC - [Cyber Security News] Midnight Mimosa Infects Android Phones Before Users Even Turn Them On
- 06:43 UTC - [Cyber Security News] Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
- 04:52 UTC - [Cyber Security News] NVIDIA DCGM Exporter Bug Exposes GPU Servers to Resource Exhaustion Attacks
- 04:42 UTC - [Cyber Security News] Admin Password “123456” Led to 8.8 Million Danish CPR Data Breach
- 03:21 UTC - [Cyber Security News] KFC Named in Gentlemen Ransomware Group’s Latest Breach Claim
2026-10-11 #
- 14:23 UTC - [BleepingComputer] Nippon Columbia malware incident exposes 8.6 million karaoke fan records
- 13:51 UTC - [DataBreaches.Net] The Luna Moth Files Weren’t Hacked. Here’s How They Leaked.
- 13:02 UTC - [Cyber Security News] Claude Exploited SQL Injection Flaws to Execute Commands on Real Servers
- 03:35 UTC - [Cyber Security News] The Best Protected Website Builder in 2027: Which Platform Keeps Your Site Truly Safe [Ranked & Scored]
- 03:21 UTC - [Cyber Security News] Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access
2026-10-10 #
- 20:42 UTC - [DataBreaches.Net] “123456” password used in massive Danish CPR data breach
- 20:42 UTC - [DataBreaches.Net] `123456’ password used in massive Danish CPR data breach
- 15:07 UTC - [BleepingComputer] Cyber exec arrested in case allegedly tied to ShinyHunters hackers
- 14:16 UTC - [BleepingComputer] ARTEX AI, Claude agents used in cyberattacks on South Korean banks
- 13:35 UTC - [CyberScoop] Canadian cybersecurity executive arrested in federal extortion case
- 12:30 UTC - [BleepingComputer] Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
- 11:57 UTC - [DataBreaches.Net] FBI announces yet another arrest allegedly connected to the FBI Jobs hack
- 11:00 UTC - [SecurityWeek] Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
- 11:00 UTC - [The Hacker News] The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
- 10:42 UTC - [DataBreaches.Net] Anthropic AI agent gives fake murder tip to US cops in global breach
- 09:18 UTC - [The Hacker News] Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
- 08:08 UTC - [Cyber Security News] REA Tool Connects Claude Code and Cursor to Ghidra and IDA Pro to Reverse Engineer Anything
- 06:58 UTC - [Cyber Security News] One Prompt Could Hijack AWS AI Agents and Steal Cloud Credentials
- 05:49 UTC - [Cyber Security News] Microsoft Teams to Warn Users About Malicious Links Hidden in QR Codes
- 04:57 UTC - [Cyber Security News] AT&T to Pay $177 Million After Two Massive Customer Data Breaches
- 00:17 UTC - [Krebs on Security] FBI Arrests Founder of Ransomware Negotiation Firm
- 00:17 UTC - [Krebs on Security] FBI Arrests Executive at Ransomware Negotiation Firm
2026-10-09 #
- 21:07 UTC - [SecurityWeek] OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
- 20:58 UTC - [darkreading] ASOS Breach Reveals the Risks in Customer-Facing SaaS
- 20:31 UTC - [BleepingComputer] Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
- 19:26 UTC - [darkreading] AI Scramble Drives Cybersecurity M&A Boom
- 19:14 UTC - [The Hacker News] Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
- 17:45 UTC - [The Hacker News] FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
- 17:31 UTC -
[watchTowr Labs] Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) - 17:31 UTC - [0day Fans] Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
- 17:21 UTC - [darkreading] What We Missed: FBI Strikes Back at ShinyHunters
- 17:17 UTC - [BleepingComputer] Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
- 17:15 UTC - [Cyber Security News] AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication
- 17:02 UTC - [BleepingComputer] FBI arrests another suspected ShinyHunters hacker after agency breach
- 16:38 UTC - [Cyber Security News] New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
- 16:29 UTC - [The Hacker News] P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
- 16:25 UTC - [darkreading] Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
- 16:25 UTC - [darkreading] Security Threats Don't Stop at the Office: Why Executives' Families Need Training Too
- 16:06 UTC - [Cyber Security News] New Agentic AI Red Team Checklist Adds 222 Tests Across 20 Attack Categories
- 15:38 UTC - [BleepingComputer] Germany arrests alleged core Qilin ransomware member after extradition
- 15:00 UTC - [All Fortinet Blog | Latest Posts] Leveraging MITRE ATT&CK TTPs for Threat-Informed SecOps: A Fortinet Perspective
- 14:47 UTC - [Cyber Security News] CastleStealer Malware Uses Browser Protection Bypass and Remote Shell to Expand Attacker Access
- 14:35 UTC - [Graham Cluley] $10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
- 14:29 UTC - [Cyber Security News] Cisco Talos Warns Autonomous AI Agents Could Turn Pentests Into Stealthy Red Team Attacks
- 14:16 UTC - [Cybersecurity Dive - Latest News] FBI seizes domains linked to China-nexus botnet
- 14:01 UTC - [BleepingComputer] How to keep AI agents within their permissions
- 13:50 UTC - [DataBreaches.Net] Silent Ransom Group claims “Luna Moth Files” are fake. The data suggest otherwise.
- 13:22 UTC - [The Hacker News] TP-Link Sued by Four More U.S. States Over Router Security and China Ties
- 13:20 UTC - [Cyber Security News] Hackers Abuse Trusted Terraform Workflows to Infect Developer Systems With Cross-Platform Malware
- 13:05 UTC - [Latest from TechRadar in Security] Microsoft Teams will soon be able to spot third-party deepfakes on your morning meeting
- 13:00 UTC - [darkreading] Social Engineering AI Agents: The New BEC for 2026
- 12:59 UTC - [The Hacker News] Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
- 12:47 UTC - [The Hacker News] Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
- 12:47 UTC - [The Hacker News] Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
- 12:32 UTC - [BleepingComputer] Max severity SonicWall SMA1000 flaw now exploited in attacks
- 12:32 UTC - [Cyber Security News] Warden Stealer Spreads Through ClickFix, Malvertising, Cracked Software and Game Cheats
- 12:21 UTC - [The Hacker News] Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
- 12:03 UTC - [SecurityWeek] In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
- 12:00 UTC - [Cybersecurity Dive - Latest News] As frontier models go rogue, colleges beef up AI cybersecurity education
- 11:43 UTC - [SecurityWeek] Google Domains Impacted by Recent ccTLD Hijacks
- 11:30 UTC - [The Hacker News] The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
- 11:23 UTC - [DataBreaches.Net] Cyberattack at IDC Frontier disrupts services around nation
- 11:14 UTC - [BleepingComputer] Man admits to running network of 15,000 money mules for cybercriminals
- 11:05 UTC - [Latest from TechRadar in Security] In open source cybersecurity, AI is kind of a problem — but it can also be a solution
- 10:55 UTC - [Latest from TechRadar in Security] Why identity needs a heartbeat, not a checkpoint
- 10:23 UTC - [SecurityWeek] Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
- 10:12 UTC - [BleepingComputer] Microsoft: Outdated Windows devices will stop receiving security updates
- 10:10 UTC - [Cyber Security News] MATCHBOIL Malware Uses Cloudflare-Hidden C2 Servers to Deliver Backdoor Payloads
- 09:55 UTC - [SecurityWeek] Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries
- 09:54 UTC - [Cyber Security News] PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
- 09:28 UTC - [Cyber Security News] Top 10 Best Container Image Scanning Tools in 2026 [Ranked & Scored]
- 09:17 UTC - [Latest from TechRadar in Security] Beyond the vault: Who's responsible for what banking sites share?
- 09:03 UTC - [The Hacker News] GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
- 08:52 UTC - [Cyber Security News] New Anthropic OSS Scanner Tool to Scan Open-source Repositories for Vulnerabilities
- 08:36 UTC - [SecurityWeek] US Disrupts Chinese State-Sponsored Hacking Tools
- 08:33 UTC - [Cyber Security News] Top 10 Best Bug Bounty Platforms in 2026 [Ranked & Scored]
- 08:32 UTC - [Cyber Security News] Let’s Encrypt Cuts TLS Certificate Lifetimes From 90 to 64 Days Starting February 2027
- 08:27 UTC - [BleepingComputer] Citrix warns admins to patch new NetScaler RCE flaw immediately
- 08:27 UTC - [Cyber Security News] Top 10 Best IaC Security Tools in 2026 [Ranked & Scored]
- 08:26 UTC - [The Hacker News] Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
- 08:22 UTC - [Cyber Security News] Microsoft Says PKI, HSMs and Security Appliances Must Prepare for Post-Quantum Authentication
- 08:19 UTC - [SecurityWeek] Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
- 08:11 UTC - [The Hacker News] Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
- 07:47 UTC - [Cyber Security News] VirusTotal Adds Scanning for Public IPv4 Space to Expose C2 Servers and Malware Infrastructure
- 07:06 UTC - [Have I Been Pwned latest breaches] Neogen - 435,963 breached accounts
- 06:53 UTC - [SecurityWeek] Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
- 06:39 UTC - [SecurityWeek] Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own
- 06:39 UTC - [The Hacker News] FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions
- 06:35 UTC - [Cyber Security News] Leaked Chat Logs Show Silent Ransomware Extorted Over $200,000,000 in 6 Months Without Encrypting Data
- 06:25 UTC - [Cyber Security News] Malicious PDF Reader With 10,000+ Installs on Google Play Delivers Anatsa Banking Trojan
- 05:52 UTC - [Cyber Security News] React Server Components Flaw Lets Attackers Freeze Next.js Servers With a Single POST Request
- 05:41 UTC - [BleepingComputer] Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland
- 04:12 UTC - [SecurityWeek] Formula Predicts When AI Chatbots Are at Risk of Turning Bad
- 03:11 UTC - [Cyber Security News] Anthropic Cyber Mission to Support Defenders with Tools, Research, and Resources
- 02:24 UTC - [Cyber Security News] FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers
- 01:50 UTC - [Cyber Security News] Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
2026-10-08 #
- 21:42 UTC - [BleepingComputer] FBI disrupts Chinese hacking tools used to breach critical infrastructure
- 21:41 UTC - [CyberScoop] Leader of 764 pleads guilty, faces up to 30 years in prison
- 21:32 UTC - [CyberScoop] Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
- 20:44 UTC - [Microsoft Security Blog] Post-quantum authentication: Why organizations should start testing certificate ecosystems now
- 20:39 UTC - [darkreading] 'AgentCorruption' Puts AWS Environments at Risk With Single Prompt
- 20:39 UTC - [darkreading] 'AgentCorruption' Puts AWS Environments At Risk With Single Prompt
- 20:09 UTC - [BleepingComputer] Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
- 20:02 UTC - [CyberScoop] DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
- 19:44 UTC - [CyberScoop] Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions
- 19:20 UTC - [BleepingComputer] Low-cost Android phones ship with residential proxy malware
- 19:08 UTC - [darkreading] Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
- 18:32 UTC - [The Hacker News] FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
- 18:01 UTC - [darkreading] Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
- 17:58 UTC - [The Hacker News] ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
- 17:44 UTC - [CyberScoop] OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
- 17:10 UTC - [BleepingComputer] FakeGit malware campaign returns with 17,610 malicious GitHub repos
- 16:05 UTC - [Latest from TechRadar in Security] 'This is a first for us': Attackers uses poem to infect thousands of servers with malware
- 15:50 UTC - [Cyber Security News] Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets
- 15:45 UTC - [The Hacker News] Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
- 15:33 UTC - [Cyber Security News] Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts
- 15:28 UTC - [SecurityWeek] Cisco Patches a Dozen Critical Vulnerabilities
- 15:26 UTC - [The Hacker News] UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
- 15:26 UTC - [BleepingComputer] Cisco warns of critical flaws allowing Nexus switch takeover
- 15:26 UTC - [Cyber Security News] Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases
- 15:15 UTC - [Latest from TechRadar in Security] CIA officer said he was developing hacking tools, but actually stole $190 million in top secret fraud scam
- 15:13 UTC - [Latest from TechRadar in Security] Digital sovereignty has become Europe’s top priority — here's how open source is helping pave the way
- 15:10 UTC - [Cyber Security News] Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks
- 15:06 UTC - [Cyber Security News] DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
- 15:00 UTC - [darkreading] [Virtual Event] Building a Secure AI Strategy for the Enterprise
- 15:00 UTC - [All Fortinet Blog | Latest Posts] 3 Key Takeaways from the Fortinet SASE Summit 2026
- 15:00 UTC - [All Fortinet Blog | Latest Posts] 3 Key Takeaways from the Fortinet SASE Summit 2026
- 14:57 UTC - [Cyber Security News] Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords
- 14:52 UTC - [Cyber Security News] Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code
- 14:44 UTC - [Cyber Security News] Hackers Use Negative Hotel Reviews to Spread Malware That Hides C2 on Blockchain
- 14:34 UTC - [Cyber Security News] PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution
- 14:33 UTC - [Cybersecurity Dive - Latest News] What the C-suite needs to know about AI governance
- 14:30 UTC - [SecurityWeek] Security Awareness Training Isn’t Dead, but It Needs a Rethink
- 14:27 UTC - [Cyber Security News] PoC Released for Zammad Session Leak Flaw Enabling Remote Code Execution
- 14:20 UTC - [Latest from TechRadar in Security] Google says counterfeit TLS certificates of major services stolen by hackers
- 14:19 UTC - [Cyber Security News] Hackers Allegedly Selling VirusTotal API Keys on the Dark Web
- 14:19 UTC - [Cyber Security News] Hackers Use Web3 and Blockchain C2 to Hide Supply Chain Attacks Targeting Cloud Credentials
- 14:12 UTC - [The Hacker News] ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
- 14:08 UTC - [Cyber Security News] FBI Dismantles Scam Center in Ghana and Seizes 300+ Devices in Operation Blackout
- 14:04 UTC - [SecurityWeek] Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
- 14:01 UTC - [Cyber Security News] GitHub AI Can Spot Passwords Hidden in Code Before Developers Push Them
- 14:00 UTC - [BleepingComputer] OAuth grants pile up faster than you can review them. Here's how to keep up.
- 13:50 UTC - [Cyber Security News] Co-Creator of Dark Web Marketplace “Empire Market” Sentenced to 40 Years in Prison
- 13:18 UTC - [BleepingComputer] Uranium crypto exchange hacker convicted for stealing $53 million
- 12:55 UTC - [Cyber Security News] Hackers Exploit Critical Citrix NetScaler Flaw to Deploy Web Shells and Steal Configuration Data
- 12:46 UTC - [SecurityWeek] US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
- 12:37 UTC - [SecurityWeek] SonicWall and Splunk Patch Critical Vulnerabilities
- 12:33 UTC - [DataBreaches.Net] It Wasn’t Me, It Was the AI Agent” May Not Avoid Liability Under New Senate Proposal
- 12:32 UTC - [Cyber Security News] GhostAction Supply Chain Campaign Uses Malicious GitHub Actions to Steal CI/CD Credentials
- 12:25 UTC - [DataBreaches.Net] KR: Coupang files lawsuits against 620 billion won fine over data leak
- 12:08 UTC - [BleepingComputer] Microsoft Teams to get support for third-party deepfake detection tools
- 12:00 UTC - [darkreading] Writing the Next Chapter
- 12:00 UTC - [Cybersecurity Dive - Latest News] US government lagging in transition to post-quantum encryption, GAO finds
- 11:42 UTC - [BleepingComputer] ASOS links data breach to social engineering attack, credential theft
- 11:14 UTC - [Cyber Security News] Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data
- 11:11 UTC - [SecurityWeek] Rein Security Raises $25 Million to Guard AI Agents at Runtime
- 10:56 UTC - [Cyber Security News] Gitea Patches 27 Security Flaws, Including Critical SSH Authentication Bypass and SSRF
- 10:56 UTC - [Latest from TechRadar in Security] Cyber resilience isn't measured in firewalls. It's measured in minutes
- 10:30 UTC - [The Hacker News] Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
- 10:29 UTC - [BleepingComputer] Owner of Empire cybercrime market gets 40 years in prison
- 10:24 UTC - [SecurityWeek] TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
- 10:23 UTC - [Cyber Security News] wolfSSH 1.6.0 Fixes 5 Security Flaws Including Critical MITM Host Key Verification Bypass
- 10:11 UTC - [Cyber Security News] Royal Navy Service Member Charged with Spying for a Foreign Country
- 10:00 UTC - [CyberScoop] Quantum computers could break today’s encryption. Washington needs to prepare now.
- 09:53 UTC - [Latest from TechRadar in Security] The most dangerous attacker of the past year looked completely ordinary
- 09:46 UTC - [The Hacker News] 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
- 09:27 UTC - [SecurityWeek] Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
- 09:14 UTC - [Cyber Security News] Hackers Use GitHub-Hosted Poem to Control PoeLLM Malware Targeting AI Infrastructure
- 08:44 UTC - [Cyber Security News] Critical Cisco Nexus Flaws Let Unauthenticated Attackers Execute Code With Root Privileges
- 08:23 UTC - [SecurityWeek] Oracle Health Data Breach Tally Climbs to Nearly 20 Million
- 07:52 UTC - [SecurityWeek] FortiBleed Attackers Locking Victims Out of Fortinet Devices
- 07:51 UTC - [Cyber Security News] MALFEX npm Malware Hides Executables in PNG Files to Infect Windows Developers
- 07:42 UTC - [The Hacker News] U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
- 07:41 UTC - [The Hacker News] MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
- 07:34 UTC - [Cyber Security News] Top 10 Best Secrets Detection Tools in 2026 [Ranked & Scored]
- 07:31 UTC - [Cyber Security News] Top 10 Best Software Supply Chain Security Tools in 2026 [Ranked & Scored]
- 07:27 UTC - [Cyber Security News] Top 10 Best API Security Tools in 2026 [Ranked & Scored]
- 07:25 UTC - [Cyber Security News] Top 10 Best ASPM Platforms in 2026 [Ranked & Scored]
- 07:10 UTC - [Cyber Security News] Top 10 Best SCA Tools in 2026 [Ranked & Scored]
- 07:08 UTC - [Cyber Security News] PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to-Host Code Execution
- 07:04 UTC - [Cyber Security News] Splunk Patches Critical 9.8 Flaw Allowing Unauthenticated Remote Command Execution
- 06:44 UTC - [Cyber Security News] Hackers Registered New Domain with Exact Microsoft Teams Interface to Steal Logins
- 06:32 UTC - [BleepingComputer] Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
- 05:46 UTC - [The Hacker News] Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
- 03:41 UTC - [Cyber Security News] Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data
- 03:28 UTC - [Cyber Security News] Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use
- 03:28 UTC - [Cyber Security News] Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use.
- 02:37 UTC - [Cyber Security News] U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research
- 00:47 UTC - [DataBreaches.Net] Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients
- 00:00 UTC -
[0day Fans] Novinarya: An Android stealer that hides its live C2 in a shop bio - 00:00 UTC -
[The GreyNoise Blog] Spike in Attacks Targeting Digital Video Recorders in Ukraine
2026-10-07 #
- 23:19 UTC - [Have I Been Pwned latest breaches] CyrusOne - 373,460 breached accounts
- 23:10 UTC -
[Graham Cluley] Smashing Security podcast #487: Clippy’s crypto comeback - 23:04 UTC - [BleepingComputer] Ransomware recovery CEO charged over secret ransom payments
- 22:00 UTC - [Unit 42] Evolution of Web3 in Cloud Supply Chain Attacks
- 21:57 UTC - [DataBreaches.Net] Can you really make more than $200M in six months without encrypting victims? It seems Silent Ransom Group can.
- 21:57 UTC - [DataBreaches.Net] Can you really make more than $200M in six months without encrypting victims? It seems Silent Ransom Group can. (1)
- 21:42 UTC - [darkreading] Australian Gov't Weighs Mandatory AI Incident Reporting
- 21:28 UTC - [BleepingComputer] FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
- 21:25 UTC - [darkreading] Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives
- 20:51 UTC - [darkreading] Anthropic Gives Vetted Defenders Fewer Claude Guardrails
- 20:50 UTC - [BleepingComputer] Hackers hijack Google domains after breaching ccTLD registries
- 19:44 UTC - [CyberScoop] Major rules for federal contractors handling sensitive data are nearing the finish line
- 19:34 UTC - [darkreading] OpenAI Agent Escape Causes Wikimedia Service Outage
- 19:27 UTC -
[0day Fans] Microsoft, Adobe, Apple, and Foxit vulnerabilities - 18:48 UTC - [The Hacker News] Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
- 18:45 UTC - [Latest from TechRadar in Security] Netgear reveals new dark web monitoring tool which will tell you if your personal data turns up online
- 18:00 UTC - [Latest from TechRadar in Security] Arizona court system hack leads to theft of personal data belonging to 1.3 million Americans
- 17:43 UTC - [The Hacker News] Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
- 17:40 UTC - [Cyber Security News] Discord Users’ Data Exposed in Security Bot Double Counter Security Breach
- 17:19 UTC - [Cyber Security News] Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs
- 17:05 UTC - [CyberScoop] FBI, French authorities seize deepfake CSAM-for-sale websites
- 16:30 UTC -
[The Cloudflare Blog] Building an evidence-grounded agentic security operations harness on Cloudflare - 16:20 UTC - [Latest from TechRadar in Security] Microsoft blocks Outlook from sending two more file types over security concerns
- 16:17 UTC - [The Hacker News] SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
- 16:00 UTC - [Microsoft Security Blog] 3 lessons from frontier AI vulnerability research
- 16:00 UTC - [Cisco Security Advisory] Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
- 16:00 UTC - [Cisco Security Advisory] Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software Python Sandbox Escape Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco NX-OS Software Control Plane Denial of Service Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Meraki Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco License (Smart Software Manager) On-Prem Vulnerabilities
- 16:00 UTC - [Cisco Security Advisory] Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco Finesse Server-Side Request Forgery Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability
- 16:00 UTC - [Cisco Security Advisory] Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
- 16:00 UTC - [Cisco Security Advisory] Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
- 15:44 UTC - [BleepingComputer] Microsoft Outlook to block MSIX attachments starting November
- 15:39 UTC - [Cyber Security News] Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates
- 15:34 UTC - [The Hacker News] Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
- 15:33 UTC - [The Hacker News] PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
- 15:16 UTC - [Cybersecurity Dive - Latest News] AI underscores singular importance of phishing-resistant authentication, Okta says
- 15:16 UTC - [Cybersecurity Dive - Latest News] AI doesn’t change singular importance of phishing-resistant authentication, Okta says
- 15:10 UTC - [Cyber Security News] CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator
- 15:08 UTC - [Latest from TechRadar in Security] ChatGPT, Gemini, and Claude imitated in fake ads that steal credentials and MFA codes
- 15:04 UTC - [BleepingComputer] PoeLLM malware infects exposed AI servers in cryptomining attacks
- 15:00 UTC - [All Fortinet Blog | Latest Posts] Rural Health Transformation Funding Can Strengthen Care and Cyber Resilience
- 15:00 UTC - [All Fortinet Blog | Latest Posts] Rural Health Transformation Funding Can Strengthen Care and Cyber Resilience
- 15:00 UTC - [CyberScoop] PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem
- 14:45 UTC - [Cyber Security News] CyberXero Combines Claude Code, PentAGI and Cobalt Strike in AI-Augmented Cyberattacks
- 14:37 UTC - [Cybersecurity Dive - Latest News] FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
- 14:27 UTC - [Cyber Security News] SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10
- 14:15 UTC - [SecurityWeek] Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
- 14:13 UTC - [Cyber Security News] Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People
- 14:01 UTC - [BleepingComputer] Ransomware has a new target. Is your backup ready?
- 14:00 UTC -
[0day Fans] AI and the Rise of Patch-Gap Abuse - 14:00 UTC - [Latest from TechRadar in Security] Ring's new Smart Lock lets you crank your way back inside
- 13:48 UTC - [Krebs on Security] ShinyHunters Extorted Boeing Spin-off Prior to Arrests
- 13:47 UTC - [SecurityWeek] Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
- 13:30 UTC - [Cyber Security News] PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
- 13:28 UTC - [Cyber Security News] Hackers Compromise 100+ Websites With Fake Cloudflare Checks to Spread LUNEXSTEALER
- 13:19 UTC - [Cyber Security News] FortiBleed Attack Campaign Exploiting Fortinet Firewalls and VPNs – FBI Warns
- 13:19 UTC - [Cyber Security News] FBI Warns of FortiBleed Attack Compromising 80,000+ Devices and Locking Out Admins
- 13:19 UTC - [Cyber Security News] FBI Warns FortiBleed Attack Compromised 80,000+ Devices and Locked Out Admins
- 13:06 UTC - [SecurityWeek] Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform
- 12:49 UTC - [BleepingComputer] Hackers exploit critical Atlassian flaw after public PoC release
- 12:39 UTC - [Cyber Security News] Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware
- 12:37 UTC - [SecurityWeek] Advantest Discloses Data Breach Months After Ransomware Attack
- 12:13 UTC - [DataBreaches.Net] Alleged ATM malware creator appears in Nebraska court after arrest
- 12:13 UTC - [DataBreaches.Net] De Kalb County, Indiana fell prey to vendor impersonation billing
- 12:04 UTC - [Cyber Security News] Hackers Steal Rockstar Source Code, 78.6 Million Records and Playable GTA VI Build
- 11:57 UTC - [The Hacker News] The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow
- 11:56 UTC - [The Hacker News] FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
- 11:49 UTC - [The Hacker News] Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
- 11:42 UTC - [The Hacker News] What Is Agentic Pentesting? What It Proves, and Where It Stops.
- 11:37 UTC - [BleepingComputer] SonicWall warns of max severity SSRF flaw in SMA1000 gateways
- 10:51 UTC - [SecurityWeek] Chrome 155 Update Patches 247 Vulnerabilities
- 10:51 UTC - [Cyber Security News] Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code
- 10:49 UTC - [Cyber Security News] Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands
- 10:35 UTC - [BleepingComputer] Musician sent to prison for $10 million streaming fraud using AI bots
- 10:34 UTC - [Cyber Security News] OpenAI Sandbox Escape Flaw Allowed Free Access to Paid AI Models Without an API Key
- 10:33 UTC - [Latest from TechRadar in Security] The AI escape is a red herring. The real problem is we can't tell a good sandbox from a bad one
- 10:27 UTC - [BleepingComputer] Advantest confirms personal information stolen in ransomware attack
- 10:07 UTC - [SecurityWeek] Anthropic Introduces 3-Tier Cyber Verification Program for AI Access
- 10:06 UTC - [Cyber Security News] Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them
- 09:59 UTC - [Latest from TechRadar in Security] AI agents don’t create new risk. They inherit it
- 09:46 UTC - [SecurityWeek] ASOS Confirms Cyberattack, Data Breach
- 09:21 UTC - [Cyber Security News] Hackers Use Fake ChatGPT, Claude and Gemini Ads to Steal Passwords and MFA Codes
- 08:53 UTC - [Cyber Security News] Critical WordPress Vulnerabilities Enable XSS, SQL Injection and Data Disclosure Attacks
- 08:47 UTC - [Cyber Security News] Multiple OpenSSH Vulnerabilities Could Enable Plaintext Recovery, File Write and Injection Attacks
- 08:27 UTC - [Cyber Security News] 32 Unique 0-Days Exploited in Samsung S26, Pixel 10, OpenAI Codex and Other Devices in Pwn2Own 2026
- 08:13 UTC - [Cyber Security News] Google Chrome Update Fixes Massive 247 Vulnerabilities, Including 4 Code Execution Flaws
- 08:10 UTC - [Cyber Security News] Top 10 Best IAST Tools in 2026 [Ranked & Scored]
- 08:10 UTC - [Cyber Security News] Veeam Backup and Replication Vulnerability Allow Attackers to Execute Malicious Script
- 08:07 UTC - [The Hacker News] Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws
- 07:58 UTC - [SecurityWeek] Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies
- 07:57 UTC - [Cyber Security News] Top 10 Best DAST Tools in 2026 [Ranked & Scored]
- 07:43 UTC - [Cyber Security News] Hackers Hide Vasilek Backdoor Inside VMware Tools to Target Medical Organizations
- 07:00 UTC - [Latest from TechRadar in Security] Almost two thirds of UK workers have received no training on spotting AI-driven cyber threats
- 06:57 UTC - [The Hacker News] 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
- 06:55 UTC - [SecurityWeek] Android’s October 2026 Updates Patch 25 Vulnerabilities
- 06:37 UTC - [SecurityWeek] Atlassian Patches Critical Vulnerability Affecting 8 Products
- 05:42 UTC - [Have I Been Pwned latest breaches] Double Counter - 274,922 breached accounts
- 04:38 UTC - [Cyber Security News] EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Data
- 03:54 UTC -
[0day Fans] Google CTF 2025: webz - 03:45 UTC - [Have I Been Pwned latest breaches] Angel One - 6,765,054 breached accounts
- 03:26 UTC - [Cyber Security News] Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders
- 03:26 UTC - [Cyber Security News] Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders With Reduced Restrictions
- 01:32 UTC - [SecurityWeek] Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
2026-10-06 #
- 23:59 UTC - [DataBreaches.Net] Engineer sentenced for locking over 3,000 devices on employer’s network
- 23:58 UTC -
[0day Fans] VisiData VisiData unzip_http RemoteZipFile extract path traversal vulnerability - 23:58 UTC - [0day Fans] VisiData VisiData EmailSheet extract_parts path traversal vulnerability