Loading…

Whats The Hax?

Daily intelligence on threats, breaches, and defenders

What's New

Top 5 Across All Sources

  1. CVE-2026-31431 (Copy Fail) detection toolkit — auditd, eBPF, Sigma, YARA

    For [Blue|Purple] Teams in Cyber Defence · 1h ago
Latest
For [Blue|Purple] Teams in Cyber DefenceCVE-2026-31431 (Copy Fail) detection toolkit — auditd, eBPF, Sigma, YARASecurity LatestExposed Data Illustrates the Nightmare Scenario for a Stalkerware VictimcybersecurityOpen source package with 1 million monthly downloads stole user credentialscybersecurityAnyone heard of ZeroHook? Found it while drowning in NIS2 prepcybersecurityDoes sos Linux command is a tool you use?The Hacker NewsNew Linux 'Copy Fail' Vulnerability Enables Root Access on Major DistributionsFor [Blue|Purple] Teams in Cyber DefenceDoes sos Linux command is a tool you use?Latest newsThe best cloud phone systems of 2026: Expert tested and reviewedLatest newsThe case against an imminent software developer apocalypseMSRC Security Update GuideCVE-2026-6019 BaseCookie.js_output() does not neutralize embedded charactersMSRC Security Update GuideCVE-2026-41898 rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peerMSRC Security Update GuideCVE-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated documentMSRC Security Update GuideCVE-2026-2708 Libsoup: libsoup: http request smuggling via duplicate content-length headersMSRC Security Update GuideCVE-2019-1547 ECDSA remote timing attackMSRC Security Update GuideCVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.MSRC Security Update GuideCVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSLMSRC Security Update GuideCVE-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OIDMSRC Security Update GuideCVE-2026-5503 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicNameMSRC Security Update GuideCVE-2019-1563 Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkeyMSRC Security Update GuideCVE-2026-5507 Session Cache Restore — Arbitrary Free via Deserialized PointerFor [Blue|Purple] Teams in Cyber DefenceCVE-2026-31431 (Copy Fail) detection toolkit — auditd, eBPF, Sigma, YARASecurity LatestExposed Data Illustrates the Nightmare Scenario for a Stalkerware VictimcybersecurityOpen source package with 1 million monthly downloads stole user credentialscybersecurityAnyone heard of ZeroHook? Found it while drowning in NIS2 prepcybersecurityDoes sos Linux command is a tool you use?The Hacker NewsNew Linux 'Copy Fail' Vulnerability Enables Root Access on Major DistributionsFor [Blue|Purple] Teams in Cyber DefenceDoes sos Linux command is a tool you use?Latest newsThe best cloud phone systems of 2026: Expert tested and reviewedLatest newsThe case against an imminent software developer apocalypseMSRC Security Update GuideCVE-2026-6019 BaseCookie.js_output() does not neutralize embedded charactersMSRC Security Update GuideCVE-2026-41898 rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peerMSRC Security Update GuideCVE-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated documentMSRC Security Update GuideCVE-2026-2708 Libsoup: libsoup: http request smuggling via duplicate content-length headersMSRC Security Update GuideCVE-2019-1547 ECDSA remote timing attackMSRC Security Update GuideCVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.MSRC Security Update GuideCVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSLMSRC Security Update GuideCVE-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OIDMSRC Security Update GuideCVE-2026-5503 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicNameMSRC Security Update GuideCVE-2019-1563 Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkeyMSRC Security Update GuideCVE-2026-5507 Session Cache Restore — Arbitrary Free via Deserialized Pointer

By Source

Feeds organized so you can skim by site.

Density Sort
FB
CVE-2026-31431 (Copy Fail) detection toolkit — auditd, eBPF, Sigma, YARA 1h ago Does sos Linux command is a tool you use? 1h ago SQL injection in Proxy API key verification - in LiteLLM 3h ago Security: CVE-2026-41940 - cPanel & WHM / WP2 Security Update 04/28/2026 3h ago Living off the cloud 3h ago Three Bugs Walk Into a PDF: Prototype Pollution, Served Cold 3h ago Prolific Chinese state-sponsored contract hacker extradited from Italy 3h ago Copy Fail — 732 Bytes to Root 4h ago SAP Cloud Build Tool Packaged A Mini Shai-Hulud Malicious Dependency That Uses Bun 13h ago The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) - watchTowr Labs 15h ago
20 loaded
SL
Security Latest
1h ago · 20 items
Exposed Data Illustrates the Nightmare Scenario for a Stalkerware Victim 1h ago Why Sharing a Screenshot Can Get You Jailed in the UAE 1d ago The Race Is on to Keep AI Agents From Running Wild With Your Credit Cards 1d ago Cole Allen Charged With Attempting to Assassinate Trump 2d ago California Engineer Identified in Suspected Shooting at White House Correspondents’ Dinner 4d ago Discord Sleuths Gained Unauthorized Access to Anthropic’s Mythos 4d ago The Latest Push to Extend Key US Spy Powers Is Still a Mess 5d ago Newly Deciphered Sabotage Malware May Have Targeted Iran’s Nuclear Program—and Predates Stuxnet 6d ago AI Tools Are Helping Mediocre North Korean Hackers Steal Millions 7d ago Mozilla Used Anthropic’s Mythos to Find and Fix 271 Bugs in Firefox 8d ago
20 loaded
CY
cybersecurity
1h ago · 20 items
Open source package with 1 million monthly downloads stole user credentials 1h ago Anyone heard of ZeroHook? Found it while drowning in NIS2 prep 1h ago Does sos Linux command is a tool you use? 1h ago Should governments be allowed to censor websites ? 1h ago CISA orders feds to patch Windows flaw exploited as zero-day 1h ago Hackers arrested for hijacking and selling 610,000 Roblox accounts 1h ago Official SAP npm packages compromised to steal credentials 1h ago Need to find professional speakers for an event 1h ago Australian banks warned frontier AI could create larger, faster cyber attacks 3h ago Session Hacking? is it a thing? 5h ago
20 loaded
TH
The Hacker News
1h ago · 20 items
New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions 1h ago Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution 2h ago SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack 17h ago New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs 19h ago Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks 22h ago What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong) 22h ago Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately 1d ago CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV 1d ago LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure 1d ago Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push 1d ago
20 loaded
LN
Latest news
1h ago · 20 items
The best cloud phone systems of 2026: Expert tested and reviewed 1h ago I tested the best cloud phone systems hands-on, compared pricing, AI features, and real user feedback to help you pick the right one for your team. The case against an imminent software developer apocalypse 1h ago Since the advent of ChatGPT, the software developer population has grown between 18% and 50%, depending on the measure. Privacy in the AI era is possible, says Proton's CEO, but one thing keeps him up at night 8h ago At Semafor World Economy, I spoke with Andy Yen about mass surveillance, protecting children, local AI, and the one thing Proton can't save users from. This simple Linux tweak fixes crashes automatically - and it costs me nothing 9h ago If your Linux PC becomes unresponsive, you might want to consider a 'Watchdog' that can monitor it and reboot when problems arise. Windows changes are coming: Here's how to get a sneak peek at what's next 9h ago Microsoft is finally making its Windows Insider Program less complicated. Here's everything that's being fixed - and what you have to do to see the changes for yourself. Eero Signal keeps your business online during internet outages 12h ago A cellular backup device that connects to your Eero mesh Wi-Fi system, Eero Signal provides backup internet when your primary wired connection goes down, saving you time and money. Motorola Razr Ultra (2026) vs. Samsung Galaxy Z Flip 7: I tried both, and there's a clear winner 14h ago Samsung focuses on durability and AI, while the new Motorola phone is all about the hardware. Here's which one I think is better. Forget Samsung Galaxy S26 Ultra: I found alternatives that are nearly as good for less money 15h ago After reviewing the latest Google, Samsung, and Motorola phones, I have a newfound appreciation for last year's models. HP vs. Dell: I've tested dozens of laptops from both brands, and here's my advice 16h ago Dell and HP both sell excellent laptops, but their models stand out in different ways. Let's break down the biggest differences. Our readers can't stop buying these 10 gadgets - and No. 4 really surprised us 17h ago These gadgets and gizmos are the most popular among ZDNET readers so far this year.
20 loaded
MS
MSRC Security Update Guide
1h ago · 20 items
CVE-2026-6019 BaseCookie.js_output() does not neutralize embedded characters 1h ago CVE-2026-41898 rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 1h ago CVE-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated document 1h ago CVE-2026-2708 Libsoup: libsoup: http request smuggling via duplicate content-length headers 1h ago CVE-2019-1547 ECDSA remote timing attack 1h ago CVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path. 1h ago CVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL 1h ago CVE-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID 1h ago CVE-2026-5503 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName 1h ago CVE-2019-1563 Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey 1h ago
20 loaded
SE
SecurityWeek
1h ago · 10 items
Sandhills Medical Says Ransomware Breach Affects 170,000 1h ago Fresh LiteLLM Vulnerability Exploited Shortly After Disclosure 21h ago Hundreds of Internet-Facing VNC Servers Expose ICS/OT 22h ago Checkmarx Confirms Data Stolen in Supply Chain Attack 23h ago Iranian Cyber Group Handala Targets US Troops in Bahrain 23h ago 38 Vulnerabilities Found in OpenEMR Medical Software 1d ago Chrome 147, Firefox 150 Security Updates Rolling Out 1d ago Critical GitHub Vulnerability Exposed Millions of Repositories 1d ago Cyber Insurance Data Gives CISOs New Ammo for Budget Talks 1d ago Vimeo Confirms User and Customer Data Breach 1d ago
RE
Reverse Engineering
2h ago · 20 items
HexDig 1.0.0 a lightweight binwalk alternative working both on Windows and Linux, written in C++, give it a try! 2h ago GitHub - iss4cf0ng/CVE-2026-31431-Linux-Copy-Fail: Rust implementation Exploit/PoC of CVE-2026-31431-Linux-Copy-Fail, allow executing customized shellcode (such as Meterpreter). 2h ago I built a free open-source CAN bus reverse engineering workstation in Python — 15 tabs, offline ML, dual AI engines, MitM gateway 21h ago I'm not an expert but a beginner. So using guides I've tried an app in everyway for intercepting network traffic.Frida didn't worked even. The app doesn't even work in a rooted I tried decompiling and change network config. But doesn't work as after installed the app redirects play store for update. 22h ago Building a perfect clone of 1993 game SimTower (via RE) 1d ago How I reverse-engineered a SQLite WAL database inside a VS Code extension - custom merge engine, header byte patching, and protobuf decoding without a schema 1d ago AI solved our CTF in 6min 1d ago Example structure for evidence-based vulnerability reports 2d ago DeepZero - Automated Vulnerability Research 2d ago rfcat-py3 2d ago
20 loaded
SE
Securelist
3h ago · 10 items
Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India 3h ago The Silver Fox group is targeting companies in Russia and India by impersonating tax authorities to distribute ValleyRAT and the new ABCDoor backdoor. PhantomRPC: A new privilege escalation technique in Windows RPC 6d ago Kaspersky researcher discovered a vulnerability in RPC architecture that enables an attacker to create a fake RPC server and escalate their privileges. FakeWallet crypto stealer spreading through iOS apps in the App Store 10d ago In March 2026, we uncovered more than twenty phishing apps in the Apple App Store masquerading as popular crypto wallets. Threat landscape for industrial automation systems in Q4 2025 14d ago The report contains industrial threat statistics for Q4 2025. It covers various infection vectors and malware types, as well as regional statistics and statistics by industry. JanelaRAT: a financial threat targeting users in Latin America 17d ago Kaspersky GReAT experts describe the latest JanelaRAT campaign detailing infection chain and malware functionality updates. The long road to your crypto: ClipBanker and its marathon infection chain 21d ago Threat actors are distributing a Trojan disguised as Proxifier software; through a multi-stage infection chain, it delivers ClipBanker – malware that replaces cryptocurrency wallet addresses in the clipboard. Financial cyberthreats in 2025 and the outlook for 2026 22d ago In this report, Kaspersky experts share their insights into the 2025 financial threat landscape, including regional statistics and trends in phishing, PC malware, and infostealers. A laughing RAT: CrystalX combines spyware, stealer, and prankware features 29d ago Kaspersky researchers analyze a new CrystalX RAT distributed as MaaS and featuring extensive spyware, stealer, and prankware capabilities. An AI gateway designed to steal your data 34d ago Dissecting the supply chain attack on LiteLLM, a multifunctional gateway used in many AI agents. Explaining the dangers of the malicious code and how to protect yourself. Coruna: the framework used in Operation Triangulation 35d ago Kaspersky GReAT experts look into the Coruna exploit kit targeting iPhones. We discovered that the kernel exploit for CVE-2023-32434 and CVE-2023-38606 is an updated version of the Operation Triangulation exploit.
HS
hacking: security in practice
3h ago · 20 items
Copy Fail — 732 Bytes to Root 3h ago GitHub fixes RCE flaw that gave access to millions of private repos 19h ago How to download Kaggle dataset safely...? 23h ago VECT Ransomware Is Actually a Wiper 1d ago Flipper Blackhat April Roundup! 1d ago [VulnPath Update] Automated Email Alerting & CISA KEV Feed 1d ago Ikeja Electric Distribution Ransomware 1d ago VoiceGoat – A vulnerable voice agent for practicing LLM attack techniques 1d ago HTB Forest Machine Walkthrough | CPTS Preparation 1d ago Microsoft's AI Agent Role Had a Scoping Bug 2d ago
20 loaded
BL
BleepingComputer
11h ago · 15 items
Official SAP npm packages compromised to steal credentials 11h ago Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication tokens from developers' systems. Popular WordPress redirect plugin hid dormant backdoor for years 11h ago The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago that allows injecting arbitrary code into users' sites. Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining 13h ago Hackers are exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy cryptominers on developers' servers. Hackers arrested for hijacking and selling 610,000 Roblox accounts 15h ago The Ukrainian police have arrested three individuals who hacked more than 610,000 Roblox gaming accounts and sold them for a profit of $225,000. cPanel, WHM emergency update fixes critical auth bypass bug 18h ago A critical vulnerability affecting all but the latest versions of cPanel and the WebHost Manager (WHM) dashboard could be exploited to obtain access to the control panel without authentication. European police dismantles €50 million crypto investment fraud ring 19h ago Austrian and Albanian authorities dismantled a criminal ring accused of running a large-scale cryptocurrency investment fraud operation that caused estimated losses of over €50 million ($58.5 million) to victims worldwide. Learning from the Vercel breach: Shadow AI & OAuth sprawl 21h ago A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel breach shows a compromised OAuth app can lead to widespread impact across downstream customers. GitHub fixes RCE flaw that gave access to millions of private repos 21h ago In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed attackers to access millions of private repositories. CISA orders feds to patch Windows flaw exploited as zero-day 23h ago The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. Microsoft says backend change broke Teams Free chat and calls 1d ago Microsoft is working to resolve a known issue that prevents some Microsoft Teams Free users from chatting and calling others.
15 loaded
TI
Copy Fail exploit lets 732 bytes hijack Linux systems and quietly grab root 11h ago The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) - watchTowr Labs 16h ago The Thymeleaf Template Injection That Only Hurts If You Let It 17h ago Set up automated dependency scanning after the recent npm/PyPI supply chain attacks 20h ago A Route to Root in a 4G Industrial Router 1d ago [Research] Full-chain RCE in Microsoft Semantic Kernel & Agent Framework 1.0 (6 Bypasses) 1d ago The Bot Left a Fingerprint: Detecting and Attributing LLM-Generated Passwords 1d ago 89 vulnerabilities in XAPI / Citrix XenServer 2d ago [ Removed by Reddit ] 2d ago Kaspersky recently disclosed PhantomRPC, a privilege escalation technique affecting all Windows versions (tested on Server 2022/2025) 2d ago
20 loaded
MS
Microsoft Security Blog
18h ago · 10 items
8 best practices for CISOs conducting risk reviews 18h ago Read Microsoft expert tips for CISOs on embracing strong proactive security to mitigate increased exposure to security threats. Simplifying AWS defense with Microsoft Sentinel UEBA 1d ago Learn how Microsoft Sentinel UEBA helps defenders distinguish benign AWS activity from attacker behavior by enriching raw CloudTrail logs with clear, binary behavioral signals derived from baseline user, peer, and device behavior patterns. AI-powered defense for an AI-accelerated threat landscape 7d ago Read how Microsoft is partnering with Anthropic and broader industry to use leading models, paired with our platforms and expertise, to turn AI-driven discovery into protection at scale. Detection strategies across cloud and identities against infiltrating IT workers 8d ago The shift to remote and hybrid work since the pandemic expanded global hiring and accelerated digital onboarding, increasing reliance on online identity verification and remote access. Making opportunistic cyberattacks harder by design 9d ago How Microsoft secures Dynamics 365 and Power Platform by removing credentials, reducing attack surfaces, and using platform engineering to block opportunistic threats. Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook 11d ago Threat actors are abusing external Microsoft Teams collaboration to impersonate IT helpdesk staff and convince users to grant remote access. Once inside, attackers can abuse legitimate tools and standard admin protocols to move laterally an... Containing a domain compromise: How predictive shielding shut down lateral movement 12d ago Domain compromise accelerates fast. Predictive shielding slowed it down. This real-world attack shows how exposure-based containment stopped credential abuse and broke the threat actor's momentum. Building your cryptographic inventory: A customer strategy for cryptographic posture management 13d ago Learn how to build a comprehensive cryptographic inventory and strengthen quantum‑safe readiness using Microsoft Security tools, best‑practice lifecycle models, and partner solutions. Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise 13d ago The Microsoft Defender Security Research Team uncovered a sophisticated macOS intrusion campaign attributed to the North Korean threat actor Sapphire Sleet that abuses user driven execution and social engineering to bypass macOS security pr... Incident response for AI: Same fire, different fuel 14d ago AI changes how incidents unfold and how we respond. Learn which IR practices still apply and where new telemetry, tools, and skills are needed.
MA
Malware Analysis & Reports
20h ago · 20 items
Minirat malware deployed via NPM targeting macOS machines 20h ago VECT Ransomware Is Actually a Wiper 1d ago The Malware Factory: GLASSWORM Forensics in Open VSX 1d ago Phishing-to-RMM Attacks: The Remote Access Blind Spot Businesses Can't Ignore 1d ago [ Removed by Reddit ] 1d ago Ikeja Electric Distribution Ransomware 1d ago Recently updated a authentic minecraft mod launcher called Modrinth 2d ago This appeared on scan today no downloads Vulnerabledriver:WinNT/Winring0 2d ago Ransomware is getting uglier as cybercriminals fake leaks and skip encryption entirely 2d ago New Lazarus APT Campaign: “Mach-O Man” macOS Malware Kit Hits Businesses 4d ago
20 loaded
AC
All CISA Advisories
22h ago · 20 items
Adapting Zero Trust Principles to Operational Technology 22h ago NSA GRASSMARLIN 1d ago CISA Adds Two Known Exploited Vulnerabilities to Catalog 1d ago CISA Adds Four Known Exploited Vulnerabilities to Catalog 5d ago Milesight Cameras 6d ago Defending Against China-Nexus Covert Networks of Compromised Devices 6d ago SpiceJet Online Booking System 6d ago Yadea T5 Electric Bicycle 6d ago FIRESTARTER Backdoor 6d ago CISA Adds One Known Exploited Vulnerability to Catalog 6d ago
20 loaded
SA
Security - Ars Technica
23h ago · 20 items
Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden 23h ago Open source package with 1 million monthly downloads stole user credentials 2d ago Why are top university websites serving porn? It comes down to shoddy housekeeping. 5d ago In a first, a ransomware family is confirmed to be quantum-safe 6d ago Crypto scam lures ships into Strait of Hormuz, falsely promising safe passage 7d ago Microsoft issues emergency update for macOS and Linux ASP.NET threat 7d ago Mozilla: Anthropic's Mythos found 271 security vulnerabilities in Firefox 150 8d ago Contrary to popular superstition, AES 128 is just fine in a post-quantum world 8d ago US-sanctioned currency exchange says $15 million heist done by "unfriendly states" 12d ago Recent advances push Big Tech closer to the Q-Day danger zone 12d ago
20 loaded
BF
Blog – Forter
1d ago · 10 items
Toys“R”Us Japan Implements Forter’s Fraud Management and Payment Optimization Solutions 1d ago More of What Matters: Forter’s April Product Release 2d ago If AI Agents Can’t Find You, Do You Even Exist? 2d ago Return Policy Abuse Is Theft. It’s Time to Treat It That Way. 14d ago What Is Return Abuse and Why Is It Getting Harder to Stop? 15d ago Return Abuse Prevention Starts with the Person, Not the Policy 15d ago Shoptalk 2026: Retail in the Age of AI 23d ago Visa’s Updated VAMP Program: What Merchants Need to Know 35d ago New at Forter: Go Live in Days, Not Months 43d ago Forter and VGS Expand Partnership to Power Trusted Agentic Commerce 62d ago
ZU
ZDI: Upcoming Advisories
1d ago · 20 items
ZDI-CAN-29268: Luxion 1d ago ZDI-CAN-29373: KDE 1d ago ZDI-CAN-29459: GIMP 1d ago ZDI-CAN-29611: GIMP 1d ago ZDI-CAN-29612: GIMP 1d ago ZDI-CAN-29493: GIMP 1d ago ZDI-CAN-29400: GIMP 1d ago ZDI-CAN-29944: GIMP 1d ago ZDI-CAN-29143: Apple 7d ago ZDI-CAN-28744: Quest 7d ago
20 loaded
TM
Kuse Web App Abused to Host Phishing Document 1d ago Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories 9d ago Identity Protection in the AI Era 17d ago U.S. Public Sector Under Siege: Threat Intelligence for Q1 2026 21d ago Claude Code Packaging Error Remains a Lure in an Active Campaign: What Defenders Should Do 23d ago Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads 27d ago TrendAI Insight: New U.S. National Cyber Strategy 29d ago The Real Risk of Vibecoding 30d ago Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads 30d ago TrendAI™ Research at RSAC 2026: Advancing Defense Across AI‑Driven and Cyber‑Physical Threats 30d ago
20 loaded
CS
Cisco Security Advisory
1d ago · 20 items
Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities 1d ago Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to achieve remote code execution or conduct path traversal attacks on an affec... Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 5d ago On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptiv... Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability 5d ago A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability... Cisco Integrated Management Controller Cross-Site Scripting Vulnerabilities 7d ago Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow a remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. For more informatio... Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities 7d ago Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary code or commands on the underlying operating system of an affe... Cisco Catalyst SD-WAN Vulnerabilities 7d ago Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information, and overwrite arbitrary files. For m... Cisco Webex Services Certificate Validation Vulnerability 13d ago A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of imp... Cisco Secure Web Appliance Authentication Bypass Vulnerability 13d ago A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improp... Cisco Identity Services Engine Remote Code Execution Vulnerabilities 14d ago Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the att... Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability 14d ago A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the u...
20 loaded
AL
Alerts
1d ago · 20 items
CISA Adds Two Known Exploited Vulnerabilities to Catalog 1d ago CISA Adds Four Known Exploited Vulnerabilities to Catalog 5d ago CISA Adds One Known Exploited Vulnerability to Catalog 6d ago CISA Adds One Known Exploited Vulnerability to Catalog 7d ago ​​Supply Chain Compromise Impacts Axios Node Package Manager​ 9d ago CISA Adds Eight Known Exploited Vulnerabilities to Catalog 9d ago CISA Adds One Known Exploited Vulnerability to Catalog 13d ago CISA Adds Two Known Exploited Vulnerabilities to Catalog 15d ago CISA Adds Seven Known Exploited Vulnerabilities to Catalog 16d ago CISA Adds One Known Exploited Vulnerability to Catalog 21d ago
20 loaded
PN
Proofpoint News Feed
2d ago · 10 items
Proofpoint Research Reveals Half of Global Organizations Experienced AI Incidents Despite Having AI Security Controls in Place 2d ago Inaugural global study finds more than half of organizations are not fully confident their AI security controls would detect compromised AI Clear market trend for software providers to help with AI: Proofpoint CEO 6d ago Sumit Dhawan, Proofpoint CEO, joins 'Closing Bell' to discuss ServiceNow's quarterly earnings results, if Anthropic's Mythos makes incumbent players more important and much more. Proofpoint CEO on AI Security Innovations | Nasdaq at RSAC 2026 7d ago Cargo thieving hackers running sophisticated remote access campaigns, researchers find 13d ago Freight Hacker Wields Code-Signing Service to Evade Defenses 13d ago Sumit Dhawan on NYSE Floor Talk | Proofpoint AI Security 14d ago FIFA World Cup 2026: More than One-Third of Official Partners Expose the Public to the Risk of Email Fraud 16d ago Analysis by cybersecurity company Proofpoint reveals that while most partners have implemented baseline email authentication, many are still not proactively blocking fraudulent emails that Microsoft 365 mailbox rules abused for exfiltration, persistence 16d ago How AI is getting better at finding security holes 18d ago Anthropic announced this week that its new model found security flaws in "every major operating system and web browser." Even before the news, AI models had gotten dramatically better at finding bugs. AI Security Risks: Proofpoint CSO Ryan Kalember, Live at RSAC 2026 28d ago Watch the Fireside Below, or Click HERE: Tech Edge hosted a fireside chat on March 25 at RSA Conference 2026 in San Francisco with Ryan Kalember, Chief Strategy Officer at Proofpoint. The in-person interview was joined by Editor-in-Chief Jo...
RF
Recorded Future
2d ago · 20 items
The Money Mule Solution: What Every Scam Has in Common 2d ago Learn how mule account intelligence — not tactic-tracking — is the most effective lever for preventing APP fraud before funds move. Lazarus Doesn't Need AGI 2d ago Explore the 2026 Claude Mythos breach, supply chain risks, and the $2B+ crypto theft pipeline. From Overwhelmed to Autonomous: Rethinking Threat Intelligence in 2026 6d ago For most security teams today, volume and access to intelligence isn’t the problem. It’s the speed at which they can turn that intelligence into action. . The Iran War: What You Need to Know 6d ago Insikt Group tracks the cyber, physical, and geopolitical components of the US-Israeli strikes on Iran — with continuously updated threat analysis and scenarios. Critical minerals and cyber operations 7d ago Learn how critical minerals and rare earth elements (REEs) are evolving from commodities into strategic flashpoints. Explore the geopolitical risks of China’s refining dominance, the race for resources in the Arctic and space, and the risin... Today, trust is the superpower that makes innovation possible 7d ago How better intelligence and collaboration can unlock new opportunities for growth and greater financial health for more people. Evolution of Chinese-Language Guarantee Telegram Marketplaces 8d ago Chinese-language, Telegram-based “guarantee” marketplaces are increasingly popular among Chinese-speaking criminal groups despite the widely publicized shutdown of Huione Guarantee in 2025. AI Hype vs. Reality: Is AI Really Rewriting the Vulnerability Equation? 8d ago AI vulnerability research and discovery capabilities are improving, but they have not changed the fundamentals of vulnerability management. Emerging Enterprise Security Risks of AI 9d ago Agentic AI adoption is accelerating rapidly as enterprise software and applications increasingly incorporate task-specific AI agents, enabling autonomous execution of complex tasks at machine speed. 4 Essential Integration Workflows for Operationalizing Threat Intelligence Recorded Future 13d ago Learn how to integrate threat intelligence into your existing security stack with Recorded Future. Explore four stages of cyber maturity, four key integration workflows, and practical steps to move your program from reactive to autonomous.
20 loaded
WE
WeLiveSecurity
6d ago · 20 items
The calm before the ransom: What you see is not all there is 6d ago GopherWhisper: A burrow full of malware 7d ago New NGate variant hides in a trojanized NFC payment app 9d ago What the ransom note won’t say 10d ago That data breach alert might be a trap 13d ago Supply chain dependencies: Have you checked your blind spot? 13d ago Recovery scammers hit you when you’re down: Here’s how to avoid a second strike 20d ago As breakout time accelerates, prevention-first cybersecurity takes center stage 23d ago Digital assets after death: Managing risks to your loved one’s digital estate 29d ago This month in security with Tony Anscombe – March 2026 edition 30d ago
20 loaded
M3
Microsoft 365 Blog
7d ago · 10 items
Copilot’s agentic capabilities in Word, Excel, and PowerPoint are generally available 7d ago Copilot's newest features are now generally available as the default experience across all Microsoft 365 subscriptions. Bring your everyday business apps into the flow of work with agents in Microsoft 365 Copilot 16d ago Discover how apps integrate with AI agents to power Copilot experiences, streamline workflows, and turn business context into action. New and improved: Multi-agent orchestration, connected experiences, and faster prompt iteration 28d ago Explore what's new in Copilot Studio: Multi-agent systems now generally available, plus updates to the Prompt Editor and governance controls. Copilot Cowork: Now available in Frontier 30d ago Today, Copilot Cowork—designed for long-running, multi-step work in Microsoft 365—is available via the Frontier program. Copilot Cowork: A new way of getting work done 51d ago Copilot Cowork turns intent into action across Microsoft 365—automating tasks, coordinating workflows, and keeping you in control. See how. Powering Frontier Transformation with Copilot and agents 51d ago Wave 3 of Microsoft 365 Copilot introduces Copilot Cowork, multi‑model intelligence, and enterprise‑ready AI—built to get real work done. SharePoint at 25: How Microsoft is putting knowledge to work in the AI era 58d ago Discover how SharePoint’s 25‑year legacy powers Microsoft 365 Copilot, Work IQ, and AI‑driven knowledge for organizations worldwide. Microsoft Sovereign Cloud adds governance, productivity, and support for large AI models securely running even when completely disconnected 64d ago The ultimate Microsoft 365 community event returns—your front‑row seat to the future of intelligent work 83d ago Join the ultimate Microsoft 365 community event with fresh insights, AI innovations, and a front‑row look at the future of intelligent work. 6 core capabilities to scale agent adoption in 2026 93d ago Learn six capabilities to support agent adoption at scale in 2026 with Microsoft Copilot Studio, from governance and security to operations.
CC
CISA Cybersecurity Advisories
8d ago · 10 items
Defending Against China-Nexus Covert Networks of Compromised Devices 8d ago Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure 23d ago Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure 145d ago CISA Shares Lessons Learned from an Incident Response Engagement 219d ago Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System 247d ago CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization 274d ago #StopRansomware: Interlock 282d ago Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider 321d ago Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations 344d ago Russian GRU Targeting Western Logistics Entities and Technology Companies 352d ago
KO
Krebs on Security
8d ago · 10 items
‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty 8d ago A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phish... Patch Tuesday, April 2026 Edition 15d ago Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dub... Russia Hacked Routers to Steal Microsoft Office Tokens 22d ago Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backe... Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab 24d ago An elusive hacker who went by the handle "UNKN" and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gang... ‘CanisterWorm’ Springs Wiper Attack Targeting Iran 37d ago A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or ha... Feds Disrupt IoT Botnets Behind Huge DDoS Attacks 41d ago The U.S. Justice Department joined authorities in Canada and Germany in dismantling the online infrastructure behind four highly disruptive botnets that compromised more than three million hacked Internet of Things (IoT) devices, such as ro... Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker 49d ago A hacktivist group with links to Iran's intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports out of Ireland, Stryker's largest hub out... Microsoft Patch Tuesday, March 2026 Edition 50d ago Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing "zero-day" flaws this month (compared to February's five zero-day treat), but as usu... How AI Assistants are Moving the Security Goalposts 52d ago AI-based assistants or "agents" -- autonomous programs that have access to the user's computer, files, online services and can automate virtually any task -- are growing in popularity with developers and IT workers. But as so many eyebrow-r... Who is the Kimwolf Botmaster “Dort”? 60d ago In early January 2026, KrebsOnSecurity revealed how a security researcher disclosed a vulnerability that was used to assemble Kimwolf, the world's largest and most disruptive botnet. Since then, the person in control of Kimwolf -- who goes ...
HS
Heimdal Security Blog
9d ago · 15 items
Heimdal Expands AI Strategy with AI Wingman and Third-Party AI Containment 9d ago Heimdal today unveiled the next phase of its AI strategy, expanding AI Wingman with three new layers - Assist, Triage and SOC - alongside the introduction of Third-Party AI Containment. You Only Know What You’ve Got When Its Gone 33d ago Prepare for the expected. Rehearse an action plan in case of technology failure or cyberattacks. We all know they can happen. Nordic MSPs Can Now Access Heimdal’s Unified Security and Compliance Platform Through Elovade 43d ago Heimdal has appointed Elovade as its official distributor in the Nordic region. The move gives MSPs and resellers across Sweden, Norway, Denmark, Iceland, and Finland direct access to Heimdal's consolidated cybersecurity platform through a ... OpenClaw Incidents Show Why AI Adoption Pressure Puts Companies at Risk 55d ago The OpenClaw security failures show how hasty AI adoption can expose businesses and supply chains to major cyber risk. Heimdal Claims Industry First With a Cyber Essentials Control Mapping for PEDM to Help Organisations Prove Least Privilege 80d ago Heimdal is the first vendor to publish a dedicated Cyber Essentials control mapping for PEDM, setting out how privilege management supports Cyber Essentials requirements and what evidence can be produced to support assessment and assurance. Five Predictions for Cyber Security Trends in 2026 85d ago Morten Kjaersgaard, Heimdal’s Founder, and Adam Pilton, a former cybercrime investigator, predict five cyber security trends for 2026. Heimdal Achieves OPSWAT Gold Certification for Anti-Malware 105d ago Heimdal today announced that its Next-Gen Antivirus (NGAV) with Extended Threat Protection (XTP) has achieved OPSWAT Gold Certification for Anti-Malware, validating its compatibility and effectiveness within OPSWAT’s industry-leading Access... How to Avoid Holiday Shopping Scams (From a Former Cyber Detective) 139d ago Worried about holiday scams? Ex-cybercrime detective Adam Pilton breaks down the biggest threats and how to shop safely this festive season. ITDR Best Practices: How to Detect, Prevent, and Contain Critical Identity Threats 153d ago Key takeaways: ITDR solutions monitor identity-based threats that traditional security tools miss, like hackers logging in with stolen credentials Effective ITDR requires integration with privileged access management and automated responses... When Buyers Discount MSPs With One Big Customer 153d ago Your biggest customer loves you. Three years together. They trust you, pay on time, and refer others. From where you sit, that’s loyalty. From where a buyer sits, that’s a $$$ discount on your exit. This perception gap kills more MSP deals ...
15 loaded
BA
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business 13d ago What is Customer Due Diligence (CDD) 37d ago Why Legacy Identity Verification Can’t Stop AI-Enabled Fraud 40d ago AML, KYC and Identity Verification in Australia 49d ago When Fraud Becomes Background Noise: The Industrialization of Digital Deception 114d ago The Efficiency Era of KYC: Reverification and Reusable Identity Take Center Stage 114d ago The End of Static KYB: Business Identity in Constant Motion 114d ago Know Your Agent: The Next Chapter in Digital Trust 114d ago When Rules Move Faster Than Readiness: Regulatory Adaptability as a Competitive Advantage 114d ago Digital Identity Trends 2026: AI Fraud, Compliance, and Orchestration 133d ago
13 loaded
SM
Azure IaaS: Keep critical applications running with built-in resiliency at scale 28d ago Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities. Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure 56d ago Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more. Azure reliability, resiliency, and recoverability: Build continuity by design 71d ago Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more. Microsoft strengthens sovereign cloud capabilities with new services 176d ago Discover new Microsoft digital sovereignty capabilities and upcoming features across AI, security, and productivity, to address sovereign cloud needs. Enhancing software supply chain security with Microsoft’s Signing Transparency 177d ago Microsoft Signing Transparency delivers verifiable code integrity and tamper-evident software releases for stronger supply chain security. Oracle Database@Azure offers new features, regions, and programs to unlock data and AI innovation 197d ago Migrate Oracle solutions to the cloud with a trusted, enterprise-ready platform from Microsoft and Oracle. Learn more. Building secure, scalable AI in the cloud with Microsoft Azure 302d ago Forrester Research shows how Azure helps enterprises scale generative AI securely, unlocking real business value. Learn more. Enhance AI security with Azure Prompt Shields and Azure AI Content Safety 328d ago Learn how Prompt Shields and Azure AI Content Safety can help guard against direct and indirect threats to your LLM-based solution. Navigating the 2024 holiday season: Insights into Azure’s DDoS defense 457d ago Learn more on how Azure DDoS is keeping you prepared for this years trends in advanced attack tactics to keep your data secure. 6 insights to make your data AI-ready, with Accenture’s Teresa Tung 538d ago Learn more about the changing nature of data and its value to an AI strategy with Teresa Tung.
TH
Threatpost
1337d ago · 10 items
Student Loan Breach Exposes 2.5M Records 1337d ago 2.5 million people were affected, in a breach that could spell more trouble down the line. Watering Hole Attacks Push ScanBox Keylogger 1338d ago Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms 1339d ago Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. Ransomware Attacks are on the Rise 1342d ago Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. Cybercriminals Are Selling Access to Chinese Surveillance Cameras 1343d ago Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. Twitter Whistleblower Complaint: The TL;DR Version 1344d ago Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Firewall Bug Under Active Attack Triggers CISA Warning 1345d ago CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Fake Reservation Links Prey on Weary Travelers 1346d ago Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. iPhone Users Urged to Update to Patch 2 Zero-Days 1349d ago Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. Google Patches Chrome’s Fifth Zero-Day of the Year 1350d ago An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.

No matching sources found.