Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

OpenAI temporarily relaxes GPT-5.6 Sol usage limits

OpenAI temporarily relaxes GPT-5.6 Sol usage limits

BleepingComputer

Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time

Claude Fable 5 stays free for paid users until July 19 as Anthropic buys more time

BleepingComputer

RedHook Android malware now uses Wireless ADB for shell access

RedHook Android malware now uses Wireless ADB for shell access

BleepingComputer

Compromised jscrambler 8.14.0 npm Release Runs Hidden Platform-Specific Binary During Install

Compromised jscrambler 8.14.0 npm Release Runs Hidden Platform-Specific Binary During Install

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Australia warns of global campaign targeting vulnerable CMS platforms

Australia warns of global campaign targeting vulnerable CMS platforms

BleepingComputer

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

BleepingComputer

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

New U-Boot flaws could enable stealthy firmware attacks

New U-Boot flaws could enable stealthy firmware attacks

BleepingComputer

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

BleepingComputer

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Police suspects Dutch hackers were involved in Odido breach

Police suspects Dutch hackers were involved in Odido breach

BleepingComputer

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

Progress urges ShareFile customers to shut down servers over "credible" threat

Progress urges ShareFile customers to shut down servers over "credible" threat

BleepingComputer

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Hackers exploit critical auth bypass in Gitea Docker image

Hackers exploit critical auth bypass in Gitea Docker image

BleepingComputer

Money launderer accused of stealing seized crypto while in prison

Money launderer accused of stealing seized crypto while in prison

BleepingComputer

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

The Replicant in Your Directory: AI Agents and the Identity Security Gap

The Replicant in Your Directory: AI Agents and the Identity Security Gap

BleepingComputer

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers