Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
A blockchain infrastructure provider was breached, exposing customer data and password hashes, highlighting the vulnerability of critical infrastructure to soph
Stay informed
Cyber Security News
The threats, breaches, and patches that matter — curated and distilled into fast, plain-English briefings for busy security professionals.
Last updated 5m ago
Threats & Breaches 11
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
A security tool's update channel was hijacked, allowing attackers to install a backdoor on Linux servers and steal sensitive data, compromising customers' secur
3AM Affiliate Embraces AI-Like Loops in European School Attack
This story matters because it suggests AI-like capabilities may be being used in high-profile cyberattacks, blurring the line between human and machine threat a
The 4 Elements of Exposure Prioritization and How to Operationalize Them
Understanding exposure prioritization helps security teams focus on the most critical vulnerabilities that attackers will actually target, reducing wasted remed
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware
Russian-aligned hackers exploiting a WinRAR flaw to steal data from Ukrainian organizations via malware deployment.
Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot Wallets
BTCPay Server users running outdated software are vulnerable to hacking, resulting in theft of Bitcoin and Litecoin from hot wallets.
⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
This week's attacks highlight the importance of vigilance against seemingly minor security threats that can have major consequences.
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
A major Android botnet was disrupted, highlighting a new threat vector: compromised devices from a single manufacturer can spread malware to millions.
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
This malware uses AI-powered ranking to prioritize victims with high-value financial data, making targeted attacks more efficient and effective.
NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
A highly sophisticated malware, NetamLoader, is targeting Windows 10 systems in Asian government organizations, exploiting .NET vulnerabilities for potential es
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Chainalysis, a blockchain analysis firm, suffered a cybersecurity incident that exposed customer identity data, but not sensitive investigation content.
Patches & CVEs 5
CISA Adds One Known Exploited Vulnerability to Catalog
A newly added vulnerability in WordPress is being actively exploited, so patching it is now a priority for all WordPress users.
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
A high-severity Linux TCP RCE flaw has been patched, affecting multiple distributions, including Red Hat and Ubuntu.
Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw
Synology NAS devices are being targeted by ransomware attacks using a previously patched vulnerability, highlighting the importance of timely software updates.
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
A critical flaw in Siemens' SIMATIC IoT2050 devices is being actively exploited, allowing attackers to remotely plant command backdoors.
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
Unpatched CryptoPayment Gateway flaw exposes wallet credentials, putting users of the WordPress plugin at high risk of financial loss and identity theft.
AI Security 8
[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI
This virtual event will help enterprises understand the unique security risks associated with cloud assets and AI, and provide strategies for mitigating those r
Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
A sophisticated phishing campaign and AI tool abuse led to a record-breaking $6.43 billion theft from Binance, highlighting the evolving threat landscape in cyb
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Enterprises are being targeted with LLMjacking attacks, allowing threat actors to abuse expensive AI services and incur up to $1 million in cloud charges.
LLMJacking Emerges as Thriving Cybercriminal Enterprise
Cybercriminals are now reselling access to large language models, exploiting AI's compute power for profit, with some victims paying up to $1 million in resourc
Microsoft's AI Risk Report Misses This Key Detail
Microsoft's AI risk report fails to disclose that government agencies are being targeted through unpatched Microsoft vulnerabilities.
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Critical Langflow flaws allow unauthenticated attackers to run code on servers, potentially leading to full system compromise.
Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
As AI adoption in security operations increases, teams must assess their readiness to effectively integrate and manage AI agents to avoid potential security ris
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Government Linux servers targeted with sophisticated malware and AI-generated scripts, potentially compromising sensitive data and infrastructure.
General 16
[Virtual Event] Cybersecurity Outlook 2027
This virtual event will provide insights into emerging cybersecurity trends and threats for the upcoming year, helping professionals stay ahead of evolving thre
Fresh European Fridge Attacks Put Cold-Chain Security in Focus
European fridge attacks highlight the vulnerability of critical infrastructure to cyber threats through remote access and inadequate security.
Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
A global crime-as-a-service operation has been dismantled, highlighting the growing threat of pre-packaged cybercrime tools for financial scams.
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
mSecure users must change passwords, reset 2FA, and remove passkeys due to suspicious activity that may have compromised their sensitive data.
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Two Barracuda vulnerabilities can be chained to grant root access, compromising security controls.
9 Cyber Awareness Tips That Actually Match Today’s Maze of Threats
This article provides actionable advice on real-world cybersecurity threats and mitigation strategies for busy professionals to protect their organizations.
Subnet Solutions PowerSYSTEM Center
A critical vulnerability in Subnet Solutions PowerSYSTEM Center could allow attackers to execute unauthorized SQL commands and access sensitive resources.
New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food
European supermarkets are facing a wave of refrigeration cyberattacks, disrupting food storage and potentially causing spoilage.
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
A massive botnet made up of compromised Android TV boxes is being dismantled, highlighting the growing threat of IoT devices being used for malicious purposes.
$6.3B Binance Hack Shows the Need to Test Attack Paths
A massive Binance hack highlights the importance of simulating attack paths to anticipate and prevent lateral movement within a network.
DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment
A sophisticated Iranian threat actor compromised Israeli and Iraqi Kurdish government cloud environments, highlighting potential vulnerabilities in cloud securi
PapRAT Cyber Espionage Campaign Leaves a 'BITTER' Taste in South Asia
A known India-linked threat group is targeting organizations in South Asia with sophisticated attacks that exploit Windows functionality.
Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data
Attackers exploited Microsoft Teams and AD CS vulnerabilities to gain remote access and steal sensitive company data, highlighting the importance of secure IT s
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
A critical flaw in LXD and MicroCloud allows attackers to impersonate trusted clients without a private key, compromising sensitive data and systems.
Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
Hackers exploited a hijacked script on Polymarket's site to steal $2.7 million from traders, highlighting the risk of third-party code vulnerabilities in web ap
FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
A $6.43 billion cryptocurrency heist linked to North Korea's elite hacking group TraderTraitor poses significant security concerns for exchanges and users world