Loading…

Whats The Hax?

Daily intelligence on threats, breaches, and defenders

Latest
Securelist“Legitimate” phishing: how attackers weaponize Amazon SES to bypass email securitycybersecurityAnother breach just hit Canvas (Instructure), and this one is worth a closer look.Help Net SecurityClaude Security enters public beta with Opus 4.7 vulnerability scanning and patchingSecurityWeekOpenAI Rolls Out Advanced Security for ChatGPT AccountsHelp Net Security15-year-old detained over massive data breach at French government agencycybersecurityEU should seek access to Anthropic's Mythos, Bundesbank saysSecurityWeekOver 40,000 Servers Compromised in Ongoing cPanel ExploitationcybersecurityMicrosoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dhaFor [Blue|Purple] Teams in Cyber DefenceCVE-2026-31431:我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程 - CVE-2026-31431: I used DeepSeek to reproduce the entire process of AI detecting Copy Fail privilege escalation.For [Blue|Purple] Teams in Cyber Defence《APT高级威胁研究报告》(2026 版)- Advanced Threat Research Report (2026 Edition)For [Blue|Purple] Teams in Cyber Defencenginxpulse: 轻量级 Nginx 访问日志分析与可视化面板,提供实时统计、PV 过滤、IP 归属地与客户端解析。- A lightweight Nginx access log analysis and visualization dashboard, providing real-time statistics, PV filtering, IP geolocation, and client resolution.For [Blue|Purple] Teams in Cyber Defence蔓灵花组织使用NUITKA打包的python样本进行投递 - The Manlinghua organization used Python samples packaged in NUITKA for delivery.cybersecurityIBM subsidiary managing Italy's PA infrastructure breached and attackers were inside for 2 weeksHelp Net SecurityLens Agents brings policy control to AI across cloud and desktopcybersecurityPrerequisites for CARTPFor [Blue|Purple] Teams in Cyber Defencegdrv3.sys - Reverse Engineering a Signed Kernel Driver with 13 Hardware Access PrimitivesSecurityWeekEdtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threatscybersecurity[ Removed by Reddit ]Reverse Engineering/r/ReverseEngineering's Weekly Questions ThreadHelp Net SecurityBrush shell 0.4.0 tightens script safety, widens platform supportSecurelist“Legitimate” phishing: how attackers weaponize Amazon SES to bypass email securitycybersecurityAnother breach just hit Canvas (Instructure), and this one is worth a closer look.Help Net SecurityClaude Security enters public beta with Opus 4.7 vulnerability scanning and patchingSecurityWeekOpenAI Rolls Out Advanced Security for ChatGPT AccountsHelp Net Security15-year-old detained over massive data breach at French government agencycybersecurityEU should seek access to Anthropic's Mythos, Bundesbank saysSecurityWeekOver 40,000 Servers Compromised in Ongoing cPanel ExploitationcybersecurityMicrosoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dhaFor [Blue|Purple] Teams in Cyber DefenceCVE-2026-31431:我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程 - CVE-2026-31431: I used DeepSeek to reproduce the entire process of AI detecting Copy Fail privilege escalation.For [Blue|Purple] Teams in Cyber Defence《APT高级威胁研究报告》(2026 版)- Advanced Threat Research Report (2026 Edition)For [Blue|Purple] Teams in Cyber Defencenginxpulse: 轻量级 Nginx 访问日志分析与可视化面板,提供实时统计、PV 过滤、IP 归属地与客户端解析。- A lightweight Nginx access log analysis and visualization dashboard, providing real-time statistics, PV filtering, IP geolocation, and client resolution.For [Blue|Purple] Teams in Cyber Defence蔓灵花组织使用NUITKA打包的python样本进行投递 - The Manlinghua organization used Python samples packaged in NUITKA for delivery.cybersecurityIBM subsidiary managing Italy's PA infrastructure breached and attackers were inside for 2 weeksHelp Net SecurityLens Agents brings policy control to AI across cloud and desktopcybersecurityPrerequisites for CARTPFor [Blue|Purple] Teams in Cyber Defencegdrv3.sys - Reverse Engineering a Signed Kernel Driver with 13 Hardware Access PrimitivesSecurityWeekEdtech Firm Instructure Discloses Data Breach Amid Hacker Leak Threatscybersecurity[ Removed by Reddit ]Reverse Engineering/r/ReverseEngineering's Weekly Questions ThreadHelp Net SecurityBrush shell 0.4.0 tightens script safety, widens platform support

By Source

Feeds organized so you can skim by site.

Density Sort
SE
Securelist
1h ago · 10 items
“Legitimate” phishing: how attackers weaponize Amazon SES to bypass email security 1h ago Kaspersky expert breaks down a new phishing scheme that uses the Amazon SES cloud email service. Let’s look at some examples to see how you can tell a phishing email from a real one. Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India 4d ago The Silver Fox group is targeting companies in Russia and India by impersonating tax authorities to distribute ValleyRAT and the new ABCDoor backdoor. PhantomRPC: A new privilege escalation technique in Windows RPC 10d ago Kaspersky researcher discovered a vulnerability in RPC architecture that enables an attacker to create a fake RPC server and escalate their privileges. FakeWallet crypto stealer spreading through iOS apps in the App Store 14d ago In March 2026, we uncovered more than twenty phishing apps in the Apple App Store masquerading as popular crypto wallets. Threat landscape for industrial automation systems in Q4 2025 18d ago The report contains industrial threat statistics for Q4 2025. It covers various infection vectors and malware types, as well as regional statistics and statistics by industry. JanelaRAT: a financial threat targeting users in Latin America 21d ago Kaspersky GReAT experts describe the latest JanelaRAT campaign detailing infection chain and malware functionality updates. The long road to your crypto: ClipBanker and its marathon infection chain 25d ago Threat actors are distributing a Trojan disguised as Proxifier software; through a multi-stage infection chain, it delivers ClipBanker – malware that replaces cryptocurrency wallet addresses in the clipboard. Financial cyberthreats in 2025 and the outlook for 2026 26d ago In this report, Kaspersky experts share their insights into the 2025 financial threat landscape, including regional statistics and trends in phishing, PC malware, and infostealers. A laughing RAT: CrystalX combines spyware, stealer, and prankware features 33d ago Kaspersky researchers analyze a new CrystalX RAT distributed as MaaS and featuring extensive spyware, stealer, and prankware capabilities. An AI gateway designed to steal your data 38d ago Dissecting the supply chain attack on LiteLLM, a multifunctional gateway used in many AI agents. Explaining the dangers of the malicious code and how to protect yourself.
CY
cybersecurity
1h ago · 20 items
20 loaded
HN
Help Net Security
1h ago · 10 items
Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching 1h ago Anthropic's Claude Security public beta helps teams find vulnerabilities, understand risks, and apply targeted patches. 15-year-old detained over massive data breach at French government agency 1h ago A 15-year-old suspect was detained over the France Titres data breach, with up to 18 million records reportedly sold online. Lens Agents brings policy control to AI across cloud and desktop 2h ago Lens Agents gives organizations a unified, policy-driven way to run, secure, and scale AI agents across desktop and cloud environments. Brush shell 0.4.0 tightens script safety, widens platform support 3h ago Brush shell 0.4.0 ships with deeper bash compatibility, coprocess support, macOS login shell fixes, and a new TOML configuration file. Pipelock: Open-source AI agent firewall 4h ago Pipelock is an open-source agent firewall that sits between AI agents and the internet to block credential leaks and prompt injection. Spotting third-party cyber risk before attackers do 5h ago Jeffrey Wheatman explains how to manage third-party cyber risk through resilience thinking, vendor scoping, and governance fixes. What researchers learned about building an LLM security workflow 5h ago A new LLM security workflow study shows structured tools and guardrails matter more than model choice for accurate alert triage. Your work apps are quietly handing 19 data points to someone 6h ago Workplace apps data collection averages 19 data points per app, with Gmail topping the list at 26, new Incogni research finds. ChatGPT advanced account security adds passkeys and hardware keys 12h ago ChatGPT advanced account security adds passkeys, hardware keys, and stricter recovery for journalists, researchers, and at-risk users. Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months 1d ago Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The AI criminal mastermind is already hiring on gig
SE
SecurityWeek
1h ago · 10 items
CVE-2026-31431:我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程 - CVE-2026-31431: I used DeepSeek to reproduce the entire process of AI detecting Copy Fail privilege escalation. 1h ago 《APT高级威胁研究报告》(2026 版)- Advanced Threat Research Report (2026 Edition) 1h ago nginxpulse: 轻量级 Nginx 访问日志分析与可视化面板,提供实时统计、PV 过滤、IP 归属地与客户端解析。- A lightweight Nginx access log analysis and visualization dashboard, providing real-time statistics, PV filtering, IP geolocation, and client resolution. 1h ago 蔓灵花组织使用NUITKA打包的python样本进行投递 - The Manlinghua organization used Python samples packaged in NUITKA for delivery. 1h ago gdrv3.sys - Reverse Engineering a Signed Kernel Driver with 13 Hardware Access Primitives 2h ago Added new vulnerable samples for IoBitUnlocker, Zemana and TfSysMon 4h ago AMSI Page Guard Bypass (Rust PoC) 4h ago Meet Bluekit: The AI-Powered All-in-One Phishing Kit 4h ago Malicious Ruby Gems and Go Modules Impersonate Developer Tools to Steal Secrets and Poison CI 4h ago A hacker group was detained in Lviv Oblast, which hacked game accounts and received almost UAH 10 million in profit from their sale in Russia 4h ago
20 loaded
RE
Reverse Engineering
3h ago · 20 items
/r/ReverseEngineering's Weekly Questions Thread 3h ago GitHub - 03DSmoothie/minecraft-cpp-versions: Minecraft recoded in C++ (multiple versions) 11h ago Automated RASP Bypass with Frida + AI Agent | nutcracker & aipwn demo 18h ago Please critique my reverse engineering ctf platform. It is meant for beginners but I would like input from serious reverse engineers. It is functionally done but I need criticism for further refinements, thank you! 21h ago "AccountDumpling": Hunting Down the Google-Sent Phishing Wave Compromising 30,000+ Facebook Accounts 1d ago How to build .NET obfuscator - Part II 1d ago libghidra - SDK for automating Ghidra from Python, Rust, and C++ 1d ago Release: Open-source CAN bus reverse engineering suite tailored for offline ML signal decoding, MitM injection, and UDS analysis. 1d ago Why my macOS Messages badge lied to me (and the one-line fix) 2d ago Running Adobe’s 1991 PostScript Interpreter in the Browser 2d ago
20 loaded
HS
hacking: security in practice
4h ago · 20 items
20 loaded
TH
The Hacker News
4h ago · 20 items
Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M 4h ago CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV 1d ago Trellix Confirms Source Code Breach With Unauthorized Repository Access 2d ago 30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign 2d ago Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks 2d ago China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists 2d ago Top Five Sales Challenges Costing MSPs Cybersecurity Revenue 2d ago Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks 3d ago Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft 3d ago PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials 3d ago
20 loaded
"AccountDumpling": Hunting Down the Google-Sent Phishing Wave Compromising 30,000+ Facebook Accounts 5h ago Acoustic Keystroke Recovery - Reconstructing Typed Text from a Laptop Microphone (Full Guide, 85% success rate) 21h ago How to exfiltrate data using only numeric outputs 1d ago For vulnerability research, smaller models run repeatedly can outperform larger frontier models on cost-to-recall. 2d ago Every incident public companies have disclosed to the SEC, in one searchable database 2d ago r/netsec monthly discussion & tool thread 2d ago Handled, Not Hosted: Administrative Activity Inside a Bulletproof Hoster 3d ago Seventeen vulnerabilities in Omi, fourteen days of silence 3d ago High Fidelity Check for the cPanel Authentication Bypass (CVE-2026-41940) 4d ago Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root 4d ago
20 loaded
LN
Latest news
9h ago · 20 items
I tracked 3,000 steps on my Apple Watch, Google Pixel, and Oura Ring - this one was most accurate 9h ago Just how reliable is that smartwatch or smart ring? I tested three of the most popular health trackers to find out. This 'cardputer' sits between the Raspberry Pi and Flipper Zero - but it's uniquely better 10h ago The M5Stack Cardputer Adv is a self-contained pocket computer with plenty of promise. I compared this premium Linux laptop to my MacBook Pro - it won in surprising ways 15h ago The latest Tuxedo InfinityBook Max 15 is an impressive Linux machine for everyday use, but it's not necessarily the best option for professionals. I tested ChatGPT and Perplexity AI as my CarPlay voice assistants - both made Siri look bad 17h ago Both ChatGPT and Perplexity can answer questions and provide help that's well beyond Siri's capabilities. But which one is better when driving? I setup a $4 router reboot timer, and it's made my internet reliably faster 20h ago I've tried so many methods to reboot my router, but the best solution costs barely anything. I upgraded my Bluetooth speakers instead of replacing them - 5 creative ways 21h ago You don't have to shell out hundreds (or thousands) of dollars on smart speakers for a robust home entertainment setup. A common charging habit was quietly killing my iPhone's battery - here's the fix 22h ago By charging my iPhone at one particular spot, I was damaging my battery and shortening its lifespan. Here's what I do now to avoid that. Why I own 4 different pairs of headphones, and how I effectively use each one 1d ago While a true 'all-in-one' pair of headphones may not exist for every user, these four come pretty close. I enabled Data Saver mode on my Android phone to avoid overcharges - and it's a big relief 1d ago Android makes it easy for me to manage my data use and prevent it from exceeding my plan's limit. Here's how. YouTube Premium vs. Premium Lite: Is the cheaper tier still your best deal? 1d ago YouTube videos without ads sound great, but you should know about both plans before overpaying for features you don't use.
20 loaded
BL
BleepingComputer
11h ago · 15 items
Instructure confirms data breach, ShinyHunters claims attack 11h ago Educational tech giant Instructure has confirmed that data was stolen in a cyberattack, with the ShinyHunters extortion gang claiming responsibility. Microsoft Defender wrongly flags DigiCert certs as Trojan:Win32/Cerdigent.A!dha 15h ago Microsoft Defender is detecting legitimate DigiCert root certificates as Trojan:Win32/Cerdigent.A!dha, resulting in widespread false-positive alerts, and in some cases, removing certificates from Windows. Telegram Mini Apps abused for crypto scams, Android malware delivery 19h ago Cybersecurity researchers have uncovered a large-scale fraud operation that uses Telegram's Mini App feature to run crypto scams, impersonate well-known brands, and distribute Android malware. Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks 1d ago A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in ConsentFix v3 attacks target Azure with automated OAuth abuse 1d ago A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique by adding automation and scaling potential. Microsoft tests modern Windows Run, says it's faster than legacy dialog 2d ago Microsoft has confirmed that Windows 11 is getting a new modern Run dialog with dark mode support and faster performance in a new preview build. Edu tech firm Instructure discloses cyber incident, probes impact 2d ago Instructure, the company behind the widely used Canvas learning platform, has disclosed that it recently suffered a cybersecurity incident and is now investigating its impact. 15-year-old detained over French govt agency data breach 2d ago French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS), the country's agency for issuing and managing administrative documents. Story retracted 2d ago Criminal IP and Securonix ThreatQ Collaborate to Enhance Threat Intelligence Operations 2d ago Raw threat intel isn't enough without real-world context. Criminal IP has partnered with Securonix to integrate exposure-based intelligence into ThreatQ, automating analysis and speeding up investigations.
15 loaded
MA
Malware Analysis & Reports
18h ago · 20 items
20 loaded
DB
David Bombal
20h ago · 15 items
15 loaded
MS
MSRC Security Update Guide
1d ago · 20 items
CVE-2026-32148 Lockfile checksums not verified in Hex allows dependency integrity bypass 1d ago CVE-2026-34757 LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure 1d ago CVE-2025-9403 jqlang jq JSON jq_test.c run_jq_tests assertion 1d ago CVE-2017-20230 Storable versions before 3.05 for Perl has a stack overflow 1d ago CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service 1d ago CVE-2026-6842 Nano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions 1d ago CVE-2026-30656 1d ago CVE-2025-11083 GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow 1d ago CVE-2025-8224 GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference 1d ago CVE-2026-6846 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing 1d ago
20 loaded
SL
Security Latest
1d ago · 20 items
20 loaded
JH
John Hammond
2d ago · 15 items
15 loaded
MS
Microsoft Security Blog
2d ago · 10 items
CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments 2d ago A high-severity Linux vulnerability, “Copy Fail” (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, organizations should act quickly to detect,... Microsoft Agent 365, now generally available, expands capabilities and integrations 2d ago ​We’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage shadow AI agents. Learn more. What’s new, updated, or recently released in Microsoft Security 3d ago Stay ahead of emerging threats with Microsoft’s newest security innovations and updates, delivered through the In the Loop series. Email threat landscape: Q1 2026 trends and insights 3d ago In early 2026, email threats increased with a rise in credential phishing, QR code phishing, and CAPTCHA-gated campaigns, highlighted by Microsoft’s disruption of the Tycoon2FA phishing platform which led to a 15% volume decrease and shifts... 8 best practices for CISOs conducting risk reviews 4d ago Read Microsoft expert tips for CISOs on embracing strong proactive security to mitigate increased exposure to security threats. Simplifying AWS defense with Microsoft Sentinel UEBA 5d ago Learn how Microsoft Sentinel UEBA helps defenders distinguish benign AWS activity from attacker behavior by enriching raw CloudTrail logs with clear, binary behavioral signals derived from baseline user, peer, and device behavior patterns. AI-powered defense for an AI-accelerated threat landscape 11d ago Read how Microsoft is partnering with Anthropic and broader industry to use leading models, paired with our platforms and expertise, to turn AI-driven discovery into protection at scale. Detection strategies across cloud and identities against infiltrating IT workers 12d ago The shift to remote and hybrid work since the pandemic expanded global hiring and accelerated digital onboarding, increasing reliance on online identity verification and remote access. Making opportunistic cyberattacks harder by design 13d ago How Microsoft secures Dynamics 365 and Power Platform by removing credentials, reducing attack surfaces, and using platform engineering to block opportunistic threats. Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook 15d ago Threat actors are abusing external Microsoft Teams collaboration to impersonate IT helpdesk staff and convince users to grant remote access. Once inside, attackers can abuse legitimate tools and standard admin protocols to move laterally an...
DA
darkreading
2d ago · 20 items
20 loaded
SA
Security - Ars Technica
2d ago · 20 items
Ubuntu infrastructure has been down for more than a day 2d ago GPT-5.5 matches heavily hyped Mythos Preview in new cybersecurity tests 2d ago The most severe Linux threat to surface in years catches the world flat-footed 3d ago Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden 4d ago Open source package with 1 million monthly downloads stole user credentials 6d ago Why are top university websites serving porn? It comes down to shoddy housekeeping. 9d ago In a first, a ransomware family is confirmed to be quantum-safe 10d ago Crypto scam lures ships into Strait of Hormuz, falsely promising safe passage 11d ago Microsoft issues emergency update for macOS and Linux ASP.NET threat 11d ago Mozilla: Anthropic's Mythos found 271 security vulnerabilities in Firefox 150 12d ago
20 loaded
TC
The Cyber Mentor
2d ago · 15 items
15 loaded
AL
Alerts
2d ago · 20 items
20 loaded
AC
All CISA Advisories
2d ago · 20 items
20 loaded
RF
Recorded Future
3d ago · 20 items
The Iran War: What You Need to Know 3d ago Insikt Group tracks the cyber, physical, and geopolitical components of the US-Israeli strikes on Iran — with continuously updated threat analysis and scenarios. Risk Scenarios for the US’s Strategic Pivot 4d ago The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and economic pressure to counter transnational criminal organizations and limit Chinese, Russian, and Iranian influence... Building with AI: Here's What No Briefing Will Tell You 4d ago What building with AI for three months revealed about four leadership blind spots executives can't afford to ignore: the comprehension gap, eroding competitive moats, deployment complexity, and what "senior" really means now. The Money Mule Solution: What Every Scam Has in Common 6d ago Learn how mule account intelligence — not tactic-tracking — is the most effective lever for preventing APP fraud before funds move. Lazarus Doesn't Need AGI 6d ago Explore the 2026 Claude Mythos breach, supply chain risks, and the $2B+ crypto theft pipeline. From Overwhelmed to Autonomous: Rethinking Threat Intelligence in 2026 10d ago For most security teams today, volume and access to intelligence isn’t the problem. It’s the speed at which they can turn that intelligence into action. . Critical minerals and cyber operations 11d ago Learn how critical minerals and rare earth elements (REEs) are evolving from commodities into strategic flashpoints. Explore the geopolitical risks of China’s refining dominance, the race for resources in the Arctic and space, and the risin... Today, trust is the superpower that makes innovation possible 11d ago How better intelligence and collaboration can unlock new opportunities for growth and greater financial health for more people. Evolution of Chinese-Language Guarantee Telegram Marketplaces 12d ago Chinese-language, Telegram-based “guarantee” marketplaces are increasingly popular among Chinese-speaking criminal groups despite the widely publicized shutdown of Huione Guarantee in 2025. AI Hype vs. Reality: Is AI Really Rewriting the Vulnerability Equation? 12d ago AI vulnerability research and discovery capabilities are improving, but they have not changed the fundamentals of vulnerability management.
20 loaded
HA
Hak5
3d ago · 15 items
15 loaded
CS
Cisco Security Advisory
3d ago · 20 items
Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 3d ago On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptiv... Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities 5d ago Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to achieve remote code execution or conduct path traversal attacks on an affec... Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability 9d ago A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability... Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities 11d ago Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more informatio... Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities 11d ago Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary code or commands on the underlying operating system of an affe... Cisco Catalyst SD-WAN Vulnerabilities 11d ago Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information, and overwrite arbitrary files. For m... Cisco Webex Services Certificate Validation Vulnerability 17d ago A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of imp... Cisco Secure Web Appliance Authentication Bypass Vulnerability 17d ago A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improp... Cisco Identity Services Engine Remote Code Execution Vulnerabilities 18d ago Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the att... Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability 18d ago A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the u...
20 loaded
CD
Cyber Defense Magazine
3d ago · 10 items
KO
Krebs on Security
3d ago · 10 items
Anti-DDoS Firm Heaped Attacks on Brazilian ISPs 3d ago A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazi... ‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty 12d ago A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phish... Patch Tuesday, April 2026 Edition 19d ago Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dub... Russia Hacked Routers to Steal Microsoft Office Tokens 26d ago Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backe... Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab 28d ago An elusive hacker who went by the handle "UNKN" and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gang... ‘CanisterWorm’ Springs Wiper Attack Targeting Iran 41d ago A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or ha... Feds Disrupt IoT Botnets Behind Huge DDoS Attacks 45d ago The U.S. Justice Department joined authorities in Canada and Germany in dismantling the online infrastructure behind four highly disruptive botnets that compromised more than three million hacked Internet of Things (IoT) devices, such as ro... Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker 53d ago A hacktivist group with links to Iran's intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports out of Ireland, Stryker's largest hub out... Microsoft Patch Tuesday, March 2026 Edition 54d ago Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing "zero-day" flaws this month (compared to February's five zero-day treat), but as usu... How AI Assistants are Moving the Security Goalposts 56d ago AI-based assistants or "agents" -- autonomous programs that have access to the user's computer, files, online services and can automate virtually any task -- are growing in popularity with developers and IT workers. But as so many eyebrow-r...
WE
WeLiveSecurity
4d ago · 20 items
20 loaded
BH
Black Hat
4d ago · 15 items
15 loaded
PN
Proofpoint News Feed
4d ago · 10 items
BF
Blog – Forter
5d ago · 10 items
DE
DEFCONConference
5d ago · 15 items
15 loaded
Kuse Web App Abused to Host Phishing Document 5d ago Bad actors took advantage of the legitimate name and services of Kuse, a popular AI-based app designed for workplaces. The attackers exploited the users’ trust in Kuse to carry out a phishing attack. Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories 13d ago The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables 14d ago Identity Protection in the AI Era 21d ago Learn about a proactive, identity-first security approach that integrates visibility, threat detection and response, zero trust enforcement, AI protection, and threat intelligence into a unified model. U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026 25d ago Discover how TrendAI Vision One™ empowers government agencies and educational institutions with advanced visibility, intelligence, and automation to stay ahead of evolving public sector threats. Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do 27d ago Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads 31d ago TrendAI Insight: New U.S. National Cyber Strategy 33d ago Explore the White House National Cyber Strategy and its six pillars to strengthen U.S. cybersecurity—covering deterrence, regulation, federal modernization, critical infrastructure protection, AI leadership, and workforce development. The Real Risk of Vibecoding 34d ago Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads 34d ago
20 loaded
NA
NahamSec
6d ago · 15 items
15 loaded
NE
NetworkChuck
6d ago · 15 items
15 loaded
M3
Microsoft 365 Blog
11d ago · 10 items
Copilot’s agentic capabilities in Word, Excel, and PowerPoint are generally available 11d ago Copilot's newest features are now generally available as the default experience across all Microsoft 365 subscriptions. Bring your everyday business apps into the flow of work with agents in Microsoft 365 Copilot 20d ago Discover how apps integrate with AI agents to power Copilot experiences, streamline workflows, and turn business context into action. New and improved: Multi-agent orchestration, connected experiences, and faster prompt iteration 32d ago Explore what's new in Copilot Studio: Multi-agent systems now generally available, plus updates to the Prompt Editor and governance controls. Copilot Cowork: Now available in Frontier 34d ago Today, Copilot Cowork—designed for long-running, multi-step work in Microsoft 365—is available via the Frontier program. Copilot Cowork: A new way of getting work done 55d ago Copilot Cowork turns intent into action across Microsoft 365—automating tasks, coordinating workflows, and keeping you in control. See how. Powering Frontier Transformation with Copilot and agents 55d ago Wave 3 of Microsoft 365 Copilot introduces Copilot Cowork, multi‑model intelligence, and enterprise‑ready AI—built to get real work done. SharePoint at 25: How Microsoft is putting knowledge to work in the AI era 62d ago Discover how SharePoint’s 25‑year legacy powers Microsoft 365 Copilot, Work IQ, and AI‑driven knowledge for organizations worldwide. Microsoft Sovereign Cloud adds governance, productivity, and support for large AI models securely running even when completely disconnected 68d ago The ultimate Microsoft 365 community event returns—your front‑row seat to the future of intelligent work 87d ago Join the ultimate Microsoft 365 community event with fresh insights, AI innovations, and a front‑row look at the future of intelligent work. 6 core capabilities to scale agent adoption in 2026 97d ago Learn six capabilities to support agent adoption at scale in 2026 with Microsoft Copilot Studio, from governance and security to operations.
CC
CISA Cybersecurity Advisories
12d ago · 10 items
Defending Against China-Nexus Covert Networks of Compromised Devices 12d ago Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure 27d ago U.S. organizations should review the TTPs and IOCs in this advisory for indications of current or historical activity on their networks, and apply the Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure 149d ago The authoring organizations encourage critical infrastructure organizations to implement the recommendations in this advisory to reduce the likelihood and CISA Shares Lessons Learned from an Incident Response Engagement 223d ago Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System 251d ago The authoring agencies strongly urge network defenders to hunt for malicious activity and to apply the mitigations in this CSA to reduce the threat of Chinese CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization 278d ago #StopRansomware: Interlock 286d ago Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider 325d ago CISA urges software vendors, downstream customers, and end users to immediately implement the Mitigations listed in this advisory based on confirmed compromise Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations 348d ago Russian GRU Targeting Western Logistics Entities and Technology Companies 356d ago Executives and network defenders should recognize the elevated threat of unit 26165 targeting, increase monitoring and threat hunting for known TTPs and IOCs
HS
Heimdal Security Blog
13d ago · 15 items
Heimdal Expands AI Strategy with AI Wingman and Third-Party AI Containment 13d ago Heimdal today unveiled the next phase of its AI strategy, expanding AI Wingman with three new layers - Assist, Triage and SOC - alongside the introduction of Third-Party AI Containment. You Only Know What You’ve Got When Its Gone 37d ago Prepare for the expected. Rehearse an action plan in case of technology failure or cyberattacks. We all know they can happen. Nordic MSPs Can Now Access Heimdal’s Unified Security and Compliance Platform Through Elovade 47d ago Heimdal has appointed Elovade as its official distributor in the Nordic region. The move gives MSPs and resellers across Sweden, Norway, Denmark, Iceland, and Finland direct access to Heimdal's consolidated cybersecurity platform through a ... OpenClaw Incidents Show Why AI Adoption Pressure Puts Companies at Risk 59d ago The OpenClaw security failures show how hasty AI adoption can expose businesses and supply chains to major cyber risk. Heimdal Claims Industry First With a Cyber Essentials Control Mapping for PEDM to Help Organisations Prove Least Privilege 84d ago Heimdal is the first vendor to publish a dedicated Cyber Essentials control mapping for PEDM, setting out how privilege management supports Cyber Essentials requirements and what evidence can be produced to support assessment and assurance. Five Predictions for Cyber Security Trends in 2026 89d ago Morten Kjaersgaard, Heimdal’s Founder, and Adam Pilton, a former cybercrime investigator, predict five cyber security trends for 2026. Heimdal Achieves OPSWAT Gold Certification for Anti-Malware 109d ago Heimdal today announced that its Next-Gen Antivirus (NGAV) with Extended Threat Protection (XTP) has achieved OPSWAT Gold Certification for Anti-Malware, validating its compatibility and effectiveness within OPSWAT’s industry-leading Access... How to Avoid Holiday Shopping Scams (From a Former Cyber Detective) 143d ago Worried about holiday scams? Ex-cybercrime detective Adam Pilton breaks down the biggest threats and how to shop safely this festive season. ITDR Best Practices: How to Detect, Prevent, and Contain Critical Identity Threats 157d ago Key takeaways: ITDR solutions monitor identity-based threats that traditional security tools miss, like hackers logging in with stolen credentials Effective ITDR requires integration with privileged access management and automated responses... When Buyers Discount MSPs With One Big Customer 157d ago Your biggest customer loves you. Three years together. They trust you, pay on time, and refer others. From where you sit, that’s loyalty. From where a buyer sits, that’s a $$$ discount on your exit. This perception gap kills more MSP deals ...
15 loaded
13 loaded
Azure IaaS: Keep critical applications running with built-in resiliency at scale 32d ago Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure 60d ago Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more. Azure reliability, resiliency, and recoverability: Build continuity by design 75d ago Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more. Microsoft strengthens sovereign cloud capabilities with new services 180d ago Discover new Microsoft digital sovereignty capabilities and upcoming features across AI, security, and productivity, to address sovereign cloud needs. Enhancing software supply chain security with Microsoft’s Signing Transparency 181d ago Microsoft Signing Transparency delivers verifiable code integrity and tamper-evident software releases for stronger supply chain security. Oracle Database@Azure offers new features, regions, and programs to unlock data and AI innovation 201d ago Migrate Oracle solutions to the cloud with a trusted, enterprise-ready platform from Microsoft and Oracle. Learn more. Building secure, scalable AI in the cloud with Microsoft Azure 306d ago Enhance AI security with Azure Prompt Shields and Azure AI Content Safety 332d ago Navigating the 2024 holiday season: Insights into Azure’s DDoS defense 461d ago 6 insights to make your data AI-ready, with Accenture’s Teresa Tung 542d ago
LI
LiveOverflow
60d ago · 15 items
15 loaded
SK
STÖK
252d ago · 15 items
15 loaded
HA
HackerSploit
389d ago · 15 items
15 loaded
TH
Threatpost
1341d ago · 10 items
Student Loan Breach Exposes 2.5M Records 1341d ago 2.5 million people were affected, in a breach that could spell more trouble down the line. Watering Hole Attacks Push ScanBox Keylogger 1342d ago Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms 1343d ago Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. Ransomware Attacks are on the Rise 1346d ago Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. Cybercriminals Are Selling Access to Chinese Surveillance Cameras 1347d ago Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. Twitter Whistleblower Complaint: The TL;DR Version 1348d ago Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Firewall Bug Under Active Attack Triggers CISA Warning 1349d ago CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Fake Reservation Links Prey on Weary Travelers 1350d ago Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. iPhone Users Urged to Update to Patch 2 Zero-Days 1353d ago Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. Google Patches Chrome’s Fifth Zero-Day of the Year 1354d ago An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.

No matching sources found.