Inside AvisLoader: New Windows Malware Loader Designed to Resist Disruption

CyberXero Uses AI-Powered Attack to Steal Over 628,000 Ukrainian Records

Critical Bricksforge WordPress Flaw Enables Unauthenticated RCE Exploited

Ledger Confirms Spy Chip Implant Behind Crypto Wallet Thefts

Chinese Hacker Uses ARTEX AI and Claude Agents in South Korean Bank Attacks

Nippon Columbia Malware Incident Exposes 8.7 Million Records

How to Keep AI Agents Operating Within Their Permissions

Unpatched AhsayCBS Flaws Exploited to Deploy Webshells and Crypto Miners

Flax Typhoon Exploits Five Flaws Ahead of CISA October 11 Deadline

Anthropic Launches Free AI Vulnerability Scanner for Open-Source

Max severity SonicWall SMA1000 flaw now exploited in attacks

Credential-Stealing GitHub Actions Workflows Found in Thousands of Repos

Hackers Use Google Ads and Bing Redirects to Spread Claude ClickFix Malware

Chinese State-linked Hackers Use Automated Tools and Manual Exploits to Steal Data

FakeGit Malware Campaign Relaunches with Over 17,600 Malicious GitHub Repos

Critical Vulnerabilities Found in Grid Protection Alliance openPDC and openHistorian

UAC-0099 Deploys ASHVEIN RAT Targeting Ukrainian Government Staff

Cisco warns of critical flaws allowing Nexus switch takeover

Eight Malicious npm Packages Delivered Overlord RAT and Stealer

Critical LMCache Flaw Allows Unauthenticated Remote Code Execution

PoeLLM Malware Infects Over 3,400 Servers to Expand Crypto Mining Botnet

Hackers Hijack Google Domains via ccTLD Registry Breaches

ASOS Data Breach Exposes Risks in App Notifications and Cloud Storage

Critical File-Access Flaw Found in Atlassian Jira and Confluence

Phishing Platform Targets Credentials via Fake AI Chatbot Ad Portals

Critical Buffer Overflow Found in Savannah lwIP SMTP Client v2.2.1

Linux Backdoors Evade Detection by Mimicking Email Security Tools in Asia

Realtek Jungle SDK Exploit Attempts Spread Cling Botnet via STUN C2

New NetScaler Zero-Day Targeted Attacks Can Disrupt SAML Deployments

Denmark's Population Registry Data Breach Affects 8.8 Million People

Critical Dell System Update Vulnerability Allows Root Privilege Escalation

China-Aligned TA419 Targets U.S. AI Policy Experts with Microsoft AitM Phishing

Danish University DTU Data Breach Exposes Info of 200,000 Users

Warlock ransomware exploits SharePoint in water and telecom attacks

Dell CSM Flaws Allow Unauthenticated Admin and Root Access on Kubernetes

Critical FortiMail Zero-Day Allows Unauthenticated Arbitrary File Writes

WordPress Backdoor Rebuilds Itself Using Files, Database, and Shared Memory

Critical Vulnerabilities Found in Armatura One Affecting Access Control Systems

CISA Adds New Fortinet FortiMail Vulnerability to Exploited Catalog

China-linked UAT-11587 targets Asian governments with Antino backdoor

Cisco Warns of Critical Authentication Bypass in SD-WAN Manager

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Automated AI Agent Used to Breach Cybersecurity Nonprofit DIVD

Star Blizzard advances phishing and malware with RedFlick technique

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Weeks

CISA Warns of Global Exploitation of Two Critical Citrix NetScaler Flaws

80,000+ Organizations Exposed by Stolen AI Logins and LLMjacking

NeedyMantis: Modular Malware Threat in Targeted Intrusions

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC and Gateway

Attackers Exploit Oracle PeopleSoft Flaw to Deploy Web Shells

Lunex Stealer Exploits AMD Driver to Bypass Security and Steal Credentials

OpenAI AI Agents Accidentally Upload User Images to Third-Party Sites

SOC 2 Must Evolve as AI Agents Blur Security Boundaries

Storm-3168: Agentic Cloud Attacks Using Compromised Service Principals

Elementor WordPress CSRF Flaw Allows Admin Account Creation

CISA Warns of Critical SharePoint, WSO2, Adobe Commerce Flaws Exploited

Bitget Loses $351.6M in Suspected North Korean Hack

Compromised GitHub Actions Resume Mini Shai-Hulud Malware Execution

AI-Driven Secret Leaks Double Compared to Human-Coded Commits

New Carbonato Botnet Uses AI Agents to Hijack Docker Hosts

Critical Vulnerabilities Discovered in Eufy Omni C20 and Omni X10 Pro

Tracking Storm-2570's Consistent Ransomware Tradecraft

MikroTrick Chain Lets Attackers Control MikroTik Routers Without Credentials

Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

FBI & CISA Warn on Risks of Third-Party ICS Integrators in Critical Infrastructure

Malicious Terraform Providers Distribute Go Malware via HashiCorp Registry

Check Point Warns of Active Exploitation in Security Gateway VPN RCE Flaw

ShinyHunters exploits zero-day to breach FBI, steal sensitive data

WordPress Patches Critical Flaw Allowing Remote Code Execution

Check Point Fixes Critical Management Server Zero-Day Exploited in Attacks

Critical Bifrost AI Gateway Flaw Allows Credentialless Command Execution

EvilTokens PhaaS Disrupted After Compromising 12,000 Microsoft Accounts

BigCommerce Alerts Merchants of Data Breach via Ribon Apps

Contagious Interview Campaign Hits 30K Devices, Steals $10.7M Crypto

CISA Adds Zyxel Switch Buffer Overflow to Known Exploited Vulnerabilities Catalog

CISA Warns of Active Exploitation of Three Linux Kernel Flaws

BragJack Exploits AI Browser Agents via Malicious Extensions

Malicious npm Packages Evade Install-Script Defenses at Runtime

Critical Pre-Auth RCE Found and Exploited in Orkes Conductor Platform

CISA Flags Three Actively Exploited Linux Kernel Vulnerabilities

CrowdSec Private Repos Exposed via TanStack npm Supply Chain Attack

North Korean WaterPlum Hackers Infiltrate 30,000 Devices Worldwide

Fake LastPass Authenticator GitHub Repos Spread New Rapuncel Infostealer

Transparent Tribe Deploys New Rust Backdoor Targeting South Asia

RatHat Android Malware Exploits ADB to Maintain Shell Access

CISA Adds Two Actively Exploited Linux Kernel Vulnerabilities to KEV Catalog

Gyazo Server Vulnerability Leads to Theft of 23.6 Million User Records

Critical Check Point Flaw Allows Root Privilege Code Execution

New RatHat Android Malware Uses AI for Automated Device Control

Critical Authentication Flaw in Mitsubishi Electric GX Works3 and Motion Control

Brevo Supply-Chain Attack Injected Malicious Scripts on Customer Sites

Critical RCE Flaw in Unbound DNSSEC Validator Fixed in 1.26.1

Critical Vulnerabilities Discovered in Hitachi Energy FACTS Control Systems

CISA Guidance on Using Cyber Decoys to Enhance Detection and Response

Iranian Hackers Deploy CHOSEN BRICK Malware to Target Activists

Critical Issabel Framework Flaw Enables Unauthenticated OS Command Execution

Attacker Hijacks AI Coding Assistant, Spreads Malware Across 100 Repos

Critical ScreenConnect Flaw Now Actively Exploited in Real Attacks

CenterPoint Energy Confirms Customer Data Stolen in Cyberattack

Critical Vulnerabilities Discovered in mySCADA myPRO Manager

CISA Alerts on Ransomware Exploiting Critical VMware vCenter Flaw

Iranian Hackers Deploy Telegram-Controlled Malware Against Dissidents

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials

CISA Adds Cisco Secure Email Gateway SQLi to Exploited Vulnerabilities Catalog

Hackers Target Exposed Vite Servers to Steal AWS and Azure Secrets

Microsoft Issues Emergency Windows Updates for RDS Failures

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Globally

3BB Attacker Leveraged MeshCentral Backdoor for Root Access

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts

Hackers Exploit Tencent App Flaw to Deploy GrayRabbit Malware

Florida DMV Database Breached via Stolen Police Credentials

Russian Hackers Use AI to Rebuild Malware Faster After Detection

Dutch NCSC Warns of Imminent Exploitation of Critical Check Point VPN Flaws

China-Linked UNC3569 Exploits Sogou Input Method Flaw for GRAYRABBIT Backdoor

Critical Artifactory Flaws Exploited to Deploy Rust Backdoor Malware

Hackers Exploited Claude AI to Extract Secrets from 1.8M Android Apps

GitLab CVSS 10 File-Read Flaw Faces In-the-Wild Probes

AI Agent Exploits and Aggregates Stolen LLM Access via Insecure Gateways

Cisco FMC Flaws Exploited by Ransomware and State Hackers

Microsoft Flags AI-Driven Executive Impersonation and Invoice Fraud

AI-driven attack exploits PaperCut flaws to breach 395 organizations

IDScan Confirms Breach Affecting 153 Million Driver’s License Records

CISA Adds Two Actively Exploited MikroTik Vulnerabilities to KEV Catalog

Four Spy Groups Deploy BlueMoon Exploit Kit Targeting Chrome and Windows

Passkey-themed Social Engineering Enables Identity and Cloud Compromise

U.S. Agencies Accuse China AI Firms of Distilling Major AI Models

AdaptHealth Confirms Data Exposure of 4.1 Million in July Cyberattack

Liquid Hackers Return Most of 3,400 BTC Stolen via Elements Bug

Microsoft September 2026 Patch Tuesday fixes 966 flaws and 2 zero-days

China-Based AI Firms Conduct Industrial-Scale Distillation of US AI Models

Hackers Deploy Linux Rootkit on F5 BIG-IP APM Devices

BigBear Phishing Service Bypasses MFA at 258 Organizations

Cloud Security Risks Vary Significantly Across Providers, New Data Shows

N-able patches critical RCE flaw in N-central amid active exploitation

JSCeal Malware Can Bypass Google Auth Using Stolen Session Cookies

Attackers Use Invisible Unicode Characters to Bypass Email Filters

REVSTEALER Modules Disable Windows Defender to Run Crypto Miner

Critical MikroTik SSH Bypass Exploited - Patch Immediately

Securing Edge AI in Customer-Owned Environments

5,400+ hacked sites deliver ClickFix malware via blockchain storage

Attackers Breach JetBrains Cadence via Unpatched TeamCity

Critical VMware Flaw Could Allow Host Code Execution by VM Admins

IDScan sued over breach exposing 153 million driver’s licenses

Critical Citrix NetScaler Auth Bypass Flaw Exploited in Attacks

New 'Ted' Backdoor Hides in HAProxy to Intercept Web Traffic

CISA Adds Critical Chromium V8 Vulnerability to Exploited Catalog

Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Run Code as Root

BraZetsu Malware Turns Windows Hosts Into Underground Marketplace Assets

Coder’s Registry Breach Distributes Malicious Terraform Modules

ASCII Smuggling Technique Evolves from AI Prompt Injection to Phishing Evasion

Critical Elementor Pro Flaw Enables Takeover of WordPress Sites

Attackers Exploit Two SonicWall SMA 1000 Zero-Days

US Charges Russian for Malware Campaign Targeting 80,000 Freelancers

BGP Hijack Delivers Malicious Virtualizor Update with Root Access

Iranian Hackers Use Coding Tests to Deliver Cross-Platform RATs

Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys

Critical JFrog Artifactory Flaw Exploited Days After Patch

Guildma (Astaroth) Malware Infection via Brazilian Portuguese Email

Aesto Health Data Breach Exposes Over 9.5 Million Patients

Microsoft alerts on TerminalFix attacks using reverse tunnels

China-Linked Fire Ant Targets Cisco Routers to Steal Credentials

Berlin Confirms Data Theft After Rhysida Ransomware Attack

The Coding-Agent Trap: Malicious Use of Free LLM Endpoints Exposed

Anthropic Warns of Infostealer Malware Hijacking Claude AI Sessions

McKesson Breach Exposes 284M Patient Records, Claimed by ShinyHunters

TerminalFix Campaign Uses Reverse Tunnel & DLL Sideloading in Complex Intrusion

GiveWP WordPress Plugin Flaw Lets Hackers Execute Server Commands

19 Chrome and Edge Extensions Found Stealing Crypto Wallets

Critical cPanel Flaw Lets Single Hosting Customer Gain Root Access

PaperCut issues second emergency patch for exploited NG and MF flaws

Critical ownCloud Flaw Exploited to Steal Nuclear Records in Philippines

Three CVSS 10.0 ServiceNow Flaws Enable Code Execution and SQL Injection

Critical Vulnerabilities Found in Xiiaozet LK100W Devices

PaperCut NG and MF Zero-Day Flaw Actively Exploited in Attacks

Australia Arrests Suspected TeamPCP Hackers Behind Supply Chain Attacks

296K IoT Botnet, Water Systems Attacked & New SharePoint RCE Exploit

OpenAI: Reward Hacking Led AI Agents to Breach Hugging Face

Securing AI Infrastructure: Protecting Gateways and Control Points

FBI Disrupts China-Linked QTFY Platforms Targeting U.S. Infrastructure

Nimbus Manticore Expands Toolset With New Backdoor and SSH Tunneler

Critical Gitea Vulnerability Exploited in Active Code Injection Attacks

Critical Avada WordPress Theme Flaw Enables Zero-Click Remote Code Execution

Malicious Webpage Can Poison Local AI Models via NVIDIA NemoClaw

US Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

Hackers Breached 270+ Zimbra Servers via Critical RCE Vulnerability

Critical Vulnerabilities Found in Ebyte NE2-D11 Firmware

CISA Red Team Tests Expose Critical SOC and Cloud Security Gaps

CISA Adds Oracle HTTP Server Vulnerability to Known Exploited Catalog

Critical Keycloak Password Reset Flaw Could Let Attackers Hijack Any Account

UAT-10147 Uses AI to Scale Server Attacks and Deploys Advanced Linux Rootkit

ToxicPanda Malware Exploits VPN Permissions to Block Google Play

SynkLoader Malware Spreads via Microsoft Teams Phishing Campaign

GitLab CVE-2026-19478 Exploited Days After Disclosure

Thousands of Active Leaked AWS Keys Expose Corporate Accounts

Microsoft patches critical Entra ID flaw exploited in active attacks

Wazuh Integrates AI to Enhance SOC Workflows

Trojanized npm Packages Deploy AI-Powered RedC2 4.0 Linux Backdoor

CISA Adds Critical Zimbra OS Command Injection to Known Exploited Vulnerabilities

Critical NetScaler Flaw Can Bypass Authentication on Gateway Servers

CISA Warns of Active Exploitation of Critical MLflow Vulnerability