Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

Scattered Spider members plead guilty to hacking Transport for London

Scattered Spider members plead guilty to hacking Transport for London

BleepingComputer

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

The Exploit Doesn't Exist. You Can Still Prove It Works Against You

The Exploit Doesn't Exist. You Can Still Prove It Works Against You

BleepingComputer

LastPass confirms data breach in Klue supply chain attack

LastPass confirms data breach in Klue supply chain attack

BleepingComputer

Webinar: Why email security teams are drowning in alerts

Webinar: Why email security teams are drowning in alerts

BleepingComputer

Agentic AI: The Weapon That No Longer Needs a Warrior

Agentic AI: The Weapon That No Longer Needs a Warrior

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

WhatsApp phishing attack uses fake business docs to hack PCs

WhatsApp phishing attack uses fake business docs to hack PCs

BleepingComputer

JaredFromSubway MEV bot hacked in $15 million crypto theft

JaredFromSubway MEV bot hacked in $15 million crypto theft

BleepingComputer

FFmpeg fixes PixelSmash flaw in widely used video decoder

FFmpeg fixes PixelSmash flaw in widely used video decoder

BleepingComputer

FortiBleed campaign used custom FortiGate sniffer to steal credentials

FortiBleed campaign used custom FortiGate sniffer to steal credentials

BleepingComputer

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

Microsoft says Windows 11 26H2 is coming soon, details upgrade process

Microsoft says Windows 11 26H2 is coming soon, details upgrade process

BleepingComputer

Microsoft fixes AutoGen Studio flaw that enabled code execution

Microsoft fixes AutoGen Studio flaw that enabled code execution

BleepingComputer

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

A Glimpse into the “Search Your Target” Market for Stolen Credentials

A Glimpse into the “Search Your Target” Market for Stolen Credentials

BleepingComputer

New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries

Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More