Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Ryuk ransomware member sentenced to 24 months in prison

Ryuk ransomware member sentenced to 24 months in prison

BleepingComputer

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks

F5 patches BIG-IP APM zero-day flaw exploited in RCE attacks

BleepingComputer

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

Rogue external MFA providers can steal passwords during logins

Rogue external MFA providers can steal passwords during logins

BleepingComputer

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Sweden fines Miljödata $183,000 over breach affecting 2.2 million

BleepingComputer

Chinese hackers exploit multiple technologies to steal govt data

Chinese hackers exploit multiple technologies to steal govt data

BleepingComputer

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

BleepingComputer

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

New ClosedQuorum Windows malware uses AI for attack decisions

New ClosedQuorum Windows malware uses AI for attack decisions

BleepingComputer

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Reducing shadow IT visibility gaps with Wazuh

Reducing shadow IT visibility gaps with Wazuh

BleepingComputer

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Check Point warns of Management Server zero-day exploited in attacks

Check Point warns of Management Server zero-day exploited in attacks

BleepingComputer

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts

BleepingComputer

Webinar tomorrow: Inside real-world Google Workspace breaches

Webinar tomorrow: Inside real-world Google Workspace breaches

BleepingComputer

D-Link warns of max severity zero-day bug in DIR-822A routers

D-Link warns of max severity zero-day bug in DIR-822A routers

BleepingComputer

AI Agents Are Rewriting the Rules of Lateral Movement

AI Agents Are Rewriting the Rules of Lateral Movement

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

DORA Year Two: Can Your SOC Actually See the Attack?

DORA Year Two: Can Your SOC Actually See the Attack?