BleepingComputer
The Hacker News
- ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
- Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer
- Microsoft pauses KB5002907 update after Office license deactivations
- GitHub Actions re-enabled with Mini Shai-Hulud payload still active
- OpenAI's AI agents accidentally uploaded user-provided images to third-party sites
- Kiteworks urges 6-hour server shutdown over potential zero-day attacks
- ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
- Elementor WordPress flaw lets attackers create admin accounts
- CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
- Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions
- ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure
- Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
- Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
- U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions
- Zero Trust + AI: Privacy in the Age of Agentic AI
- Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution
- New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks
- Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS
- Have You Turned Off Your Virtual Oven?
- New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits
GovInfoSecurity
Infosecurity Magazine
- US Appeals Court Backs Pentagon Blacklisting of Anthropic
- CISA And FBI Warn OT Operators About Third-Party Hacking
- 7-Year, $11.6B Anthropic Deal Drives Akamai Cloud Buildout
- CISA Unveils US Midterm Election Security Plan
- LabCorp Pays States $2.2M in Settlement Over AMCA Hack
- Stop Waiting for Someone Else to Make AI Safe
- Who Owns OT Vulnerabilities? Defining Security Accountability Across Teams
- Why Enterprises Must Own, Not Rent, Their Intelligence
- Connected Data Alone Won't Make AI a Better Decision-Maker
- Realizing Value From AI Starts With Redesigning the Business
- Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
- CISA Unveils Election Security Plan Ahead of 2026 Midterms
- RemControl Banking Trojan Gives Attackers Remote Control of Android Devices
- Researchers Identify AliExpress Phishing Domains Before Registration
- Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
- CISA Charts New "Quality Era" for Global CVE Program
- UK Government Shifts to Service-Led Cyber Governance After Stinging Audit
- OpenAI Agent Hacks Australian Medicare Portal
- Over 75% of Organizations Experience Microsoft 365 Governance Issues
- Data Overtakes Skills as Top Threat Hunting Challenge, SANS Study Finds
CyberScoop
Krebs on Security
- Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies
- Supreme Court permits states to use SAVE database for citizenship checks
- House and Senate members propose legislation for CISA to step up cyber defenses for biotech
- New bill would create federal investigative body for AI-driven hacks
- Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges
- Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks
- How tax policy can stop threat actors from breaching US water systems
- CISA outlines improvement plan for CVE program
- Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack
- Pentagon cyber chief: The demand far exceeds supply
- U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
- Data Broker Radaris Loses Domains in Privacy Fight
- Microsoft Plugs Nearly 1,000 Security Holes
- FBI Probes Service Selling 153M+ Drivers Licenses
- Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
- Who’s Tracking You? Use This New Service to Find Out
- Microsoft Plugs Nearly 400 Security Holes
- Canadian Man Pleads Guilty in Snowflake Extortions
- Read This Before You Buy That TV Streaming Stick
- LG to Ban Residential Proxies from Smart TV Apps