BleepingComputer
The Hacker News
- Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root
- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
- Drupal patches critical RCE flaws, warns exploits may emerge soon
- Critical BlockStrap flaw lets hackers run code on Magento servers
- Zero-click attacks used targeted ads to deliver Candiru spyware
- Employees using personal ChatGPT at work? Here's what IT admins need to do
- Burger King Japan data breach exposes 11 million customer records
- Microsoft: October Windows update may break Smart App Control
- BAE Systems cyberattack disrupts US federal court operations
- BeyondTrust patches zero-day exploited in attacks since August
- ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure
- Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
- Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
- U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions
- Zero Trust + AI: Privacy in the Age of Agentic AI
- Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution
- New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks
- Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS
- Have You Turned Off Your Virtual Oven?
- New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits
GovInfoSecurity
Infosecurity Magazine
- Prove Claims Former Employees Fueled KYXStart Infringement
- Anthropic Gives AI Safety Evaluators Insider Access
- Before Scaling AI Defense: What Security Teams Need in Place First
- ISMG Editors: French Supermarket Hack Weaponized Food
- Cardiac Monitoring Firm iRhythm's Hack Affects 8.2 Million
- Zero-Day in BeyondTrust Remote Support Appliances Exploited
- Proofpoint to Buy Data Security Stalwart Varonis for $6.3B
- AI Risks Put Enterprise Resilience to the Test in 2027
- DARPA Nudges Quantum Computing From Planning to Proof
- Breach Roundup: French Supermarket Hacks a 'Wake-Up Call'
- Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
- China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
- Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
- France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
- New Aoki Infostealer Targets AI Coding Assistant Credentials
- Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
- Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
- ICO Reprimands Met Over Third-Party Data Leak
- ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads
- Passkey Authentications Double but Adoption Remains Slow
CyberScoop
Krebs on Security
- Federal agencies recommend cyber controls, independent testing for frontier AI systems
- Prolific Chinese espionage group exploits BeyondTrust zero-day
- Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
- Proofpoint to buy Varonis for $6.3 billion
- The next election influence campaign will target your AI chatbot
- AdFection: How mercenary spyware invades victims’ devices through targeted advertising
- Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
- Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
- Senators press Trump admin to rally federal government around AI safety, security
- Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
- U.K. Sanctions Cryptomus for RU Money Laundering
- Microsoft Patches More Than 1,400 Security Flaws
- FBI Arrests Founder of Ransomware Negotiation Firm
- ShinyHunters Extorted Boeing Spin-off Prior to Arrests
- Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
- U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
- Data Broker Radaris Loses Domains in Privacy Fight
- Microsoft Plugs Nearly 1,000 Security Holes
- FBI Probes Service Selling 153M+ Drivers Licenses
- Two Alleged ‘TeamPCP’ Hackers Arrested in Australia