Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Norway fines Microsoft ad firm $9.6 million over Grindr data sharing

Norway fines Microsoft ad firm $9.6 million over Grindr data sharing

BleepingComputer

Yandex confirms service outage as users lose access to cloud files

Yandex confirms service outage as users lose access to cloud files

BleepingComputer

Anthropic takes risky AI tests offline after models breach govt sites

Anthropic takes risky AI tests offline after models breach govt sites

BleepingComputer

Ledger confirms hardware wallet spy implant behind crypto thefts

Ledger confirms hardware wallet spy implant behind crypto thefts

BleepingComputer

Cyberattack shuts down refrigerators at French supermarkets

Cyberattack shuts down refrigerators at French supermarkets

BleepingComputer

⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

BleepingComputer

Retail giant Ahold Delhaize takes systems offline after cyberattack

Retail giant Ahold Delhaize takes systems offline after cyberattack

BleepingComputer

GitLab warns of max severity code execution vulnerability

GitLab warns of max severity code execution vulnerability

BleepingComputer

Microsoft: Windows 11 23H2 reaches end of support in 30 days

Microsoft: Windows 11 23H2 reaches end of support in 30 days

BleepingComputer

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

BleepingComputer

Cyber exec arrested in case allegedly tied to ShinyHunters hackers

Cyber exec arrested in case allegedly tied to ShinyHunters hackers

BleepingComputer

Hacker used ARTEX AI and Claude agents to target South Korean banks

Hacker used ARTEX AI and Claude agents to target South Korean banks

BleepingComputer

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

BleepingComputer

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

BleepingComputer

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories