Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

Microsoft: October Windows Server updates break Exchange sign-in, mail flow

Microsoft: October Windows Server updates break Exchange sign-in, mail flow

BleepingComputer

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

BleepingComputer

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

BleepingComputer

Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal patches critical RCE flaws, warns exploits may emerge soon

BleepingComputer

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Critical BlockStrap flaw lets hackers run code on Magento servers

Critical BlockStrap flaw lets hackers run code on Magento servers

BleepingComputer

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Zero-click attacks used targeted ads to deliver Candiru spyware

Zero-click attacks used targeted ads to deliver Candiru spyware

BleepingComputer

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

Employees using personal ChatGPT at work? Here's what IT admins need to do

Employees using personal ChatGPT at work? Here's what IT admins need to do

BleepingComputer

Burger King Japan data breach exposes 11 million customer records

Burger King Japan data breach exposes 11 million customer records

BleepingComputer

AI Decision Models and Their Impact on AI SOC Platforms

AI Decision Models and Their Impact on AI SOC Platforms

Microsoft: October Windows update may break Smart App Control

Microsoft: October Windows update may break Smart App Control

BleepingComputer

BAE Systems cyberattack disrupts US federal court operations

BAE Systems cyberattack disrupts US federal court operations

BleepingComputer

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

China-Linked Hackers Exploited BeyondTrust Zero-Day to Deploy SAWFLY and BARECLAW Malware

China-Linked Hackers Exploited BeyondTrust Zero-Day to Deploy SAWFLY and BARECLAW Malware

BeyondTrust patches zero-day exploited in attacks since August

BeyondTrust patches zero-day exploited in attacks since August

BleepingComputer

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions