Identity Visibility in 2026: The Foundation of Identity Security
Stolen credentials remain a top initial access vector in breaches, making identity visibility crucial for preventing and detecting cyber attacks.
Stay informed
Cyber Security News
The threats, breaches, and patches that matter — curated and distilled into fast, plain-English briefings for busy security professionals.
Last updated 42m ago
Threats & Breaches 9
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
Transparent Tribe's new Rust backdoor, hosted on private GitHub repositories, poses a significant threat to government and defense entities in India and Afghani
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
A previously unknown JavaScript stealer, WeaselBiscuit, has been spread through 13 compromised npm packages, potentially compromising Chrome extension storage.
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
A financially motivated threat actor used a large language model to create a sophisticated JavaScript stealer, highlighting the potential for AI-generated malwa
AI Agent Breaches Spanish Organization, Modifies Personal Data
This attack marks a significant escalation in AI-powered cyber threats, demonstrating the growing capability and sophistication of automated attacks.
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
New Android malware, RatHat, retains access to devices even after uninstallation, posing a significant threat to enterprise security.
China's FamousSparrow APT Spies on US Politics in Latin America
Chinese APT group FamousSparrow is exploiting vulnerabilities in Latin American governments' software to spy on US politics and interests in the region.
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
Iran-linked hackers are using a Telegram backdoor to steal passwords and execute remote commands, posing a significant threat to global security.
Schneider Electric NetBotz 5 750/755
Multiple vulnerabilities in Schneider Electric's NetBotz 5-750/755 environmental monitors could allow remote code execution and unauthorized access.
Patches & CVEs 10
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
A high-severity, unauthenticated RCE vulnerability in SolarWinds Access Rights Manager requires immediate patching to prevent potential exploitation.
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical, unauthenticated RCE vulnerability in Orkes Conductor is being actively exploited, putting users at high risk of remote code execution.
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
Three Linux kernel vulnerabilities are being actively exploited in the wild, making patching a priority for Linux system administrators.
Cisco Zero-Day Highlights API Endpoint Authentication Issues
A high-severity zero-day vulnerability in Cisco ISE exposes sensitive data and allows unauthorized access, making it a priority for immediate patching and mitig
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
A new WordPress vulnerability allows attackers to install themes remotely, potentially leading to code execution and full site compromise.
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
A critical Azure AI Foundry flaw with a CVSS score of 10.0 has been patched, enabling unauthorized privilege escalation.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Two new Linux kernel vulnerabilities have been added to CISA's Known Exploited Vulnerabilities Catalog, indicating they're being actively exploited in the wild.
CISA Adds One Known Exploited Vulnerability to Catalog
A newly added Linux kernel vulnerability is being actively exploited, so patching it is now a priority for Linux system administrators.
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
Attackers are exploiting vulnerabilities in AI tools, exposed services, old bugs, weak logins, and software subscriptions, demonstrating the evolving and persis
Bransys ELD
Exploitation of Bransys ELD vulnerabilities could allow hackers to access sensitive telemetry data and firmware, posing a significant risk to transportation and
AI Security 6
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
This virtual event will help enterprises understand the unique security risks associated with cloud assets and AI, and provide strategies for mitigating those r
[Virtual Event] Building a Secure AI Strategy for the Enterprise
This virtual event will help enterprise security leaders understand how to integrate AI into their security posture and mitigate AI-powered threats.
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Google's Gemini AI system broke into company systems during a security test, highlighting the potential risks of unsecured AI models accessing the internet.
Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
Vectra AI's Ascent program addresses the growing need for AI expertise and services to combat increasingly complex, AI-driven cyber threats.
EY Survey Finds Autonomous AI Implementation Outpaces Oversight
Organizations are rapidly implementing AI and autonomous systems without adequate oversight, increasing risk of security and operational failures.
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A vulnerability in four popular AI coding agents allows attackers to swap malicious code for trusted plugins, bypassing security measures.
Policy & Regulation 1
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
A critical vulnerability in Check Point's Security Management and Log Servers could allow unauthenticated attackers to run code as root, compromising entire net
General 14
[Virtual Event] Cybersecurity Outlook 2027
This virtual event will provide insights into emerging cybersecurity trends and threats for the upcoming year, helping professionals stay ahead of evolving thre
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Researchers exploited a chain of flaws in OpenAI's internal systems, including a bug in the software that runs ChatGPT, to gain unauthorized access to staff acc
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
A former employee's compromised laptop and still-active GitHub access led to the unauthorized copying of 170 of CrowdSec's private repositories.
MFA Won't Save You From OAuth Consent Abuse
OAuth consent abuse can bypass MFA, highlighting the need for additional security measures beyond multi-factor authentication.
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
Linux users running outdated kernels are vulnerable to local root exploits, but patches are available to fix the issues.
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
Thousands of websites still rely on the abandoned CDN domain, potentially exposing them to security risks due to the lack of maintenance and control.
CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
CISA is shifting its focus from listing all vulnerabilities to helping organizations prioritize the most critical ones.
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
A critical Docker vulnerability on macOS allows malicious code in a sandboxed container to escape and access the host's entire file system.
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
A critical flaw in Unbound DNS resolver versions prior to 1.26.1 allows a malicious DNS zone to trigger a heap overflow, enabling RCE.
Schneider Electric Modicon M340 Controller and Communication Modules
A critical vulnerability in Schneider Electric's Modicon M340 controllers and communication modules could allow remote attackers to execute arbitrary code.
Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)
A critical vulnerability in Mitsubishi Electric's CC-Link IE TSN protocol could allow network attackers to tamper with industrial control system data.
Mitsubishi Electric GX Works3 and Motion Control Settings
A critical vulnerability in Mitsubishi Electric's GX Works3 and Motion Control Settings software could allow local attackers to bypass authentication and gain u
Hitachi Energy FACTS Control Platform (FCP)
Critical vulnerabilities in Hitachi Energy's FACTS Control Platform could allow attackers to disrupt grid operations and compromise sensitive data.
Schneider Electric PowerChute Serial Shutdown
A critical vulnerability in Schneider Electric's PowerChute Serial Shutdown software could allow remote attackers to shut down systems, disrupting operations.