Loading…

Whats The Hax?

Daily intelligence on threats, breaches, and defenders

Latest
cybersecurityAnyone interview or work with Moxfive?cybersecurityA stealth Firefox version that passes all anti-bot and CAPTCHAcybersecuritymkPIVM - a polymorphic position-independent shellcode virtualizercybersecurityStarted in IT and need a Cybersecurity Roadmap with my Useless Degree!Latest newsThese backyard solar panels saved me $20/mo on my power bill - here's my setupcybersecurityGitHub announces internal data breached.cybersecurityRoadmap to Cybersecurity roleshacking: security in practiceHackers: What age did you start? Where did you start, especially in practicing your skills?SecurityWeekVerizon DBIR 2026: Vulnerability Exploitation Overtakes Credential Theft as Top Breach VectorCyberScoopCISA credential leak raises alarms, and Capitol Hill demands answerscybersecurityMalware installed without literally doing anything?BleepingComputerMax-severity flaw in ChromaDB for AI apps allows server hijackingLatest newsGoogle I/O 2026 live: Our takes on Gemini 3.5, Spark, Android XR, and morecybersecurityCTFsBleepingComputerCybercrime service disrupted for abusing Microsoft platform to sign malwareCyberScoopAttackers hit vulnerabilities hard last year, making exploits the top entry point for breachesBlack HatSecTor 2025 | How a Mobile Drivers License App Became a Boarding PassTechnical Information Security Content & DiscussionSleeping Agent: Silent persistent C2 through Web PushBleepingComputerDiscord rolls out end-to-end encryption on voice, video callsFor [Blue|Purple] Teams in Cyber DefenceEight Leading U.S. Communications Firms Form C2 ISACcybersecurityAnyone interview or work with Moxfive?cybersecurityA stealth Firefox version that passes all anti-bot and CAPTCHAcybersecuritymkPIVM - a polymorphic position-independent shellcode virtualizercybersecurityStarted in IT and need a Cybersecurity Roadmap with my Useless Degree!Latest newsThese backyard solar panels saved me $20/mo on my power bill - here's my setupcybersecurityGitHub announces internal data breached.cybersecurityRoadmap to Cybersecurity roleshacking: security in practiceHackers: What age did you start? Where did you start, especially in practicing your skills?SecurityWeekVerizon DBIR 2026: Vulnerability Exploitation Overtakes Credential Theft as Top Breach VectorCyberScoopCISA credential leak raises alarms, and Capitol Hill demands answerscybersecurityMalware installed without literally doing anything?BleepingComputerMax-severity flaw in ChromaDB for AI apps allows server hijackingLatest newsGoogle I/O 2026 live: Our takes on Gemini 3.5, Spark, Android XR, and morecybersecurityCTFsBleepingComputerCybercrime service disrupted for abusing Microsoft platform to sign malwareCyberScoopAttackers hit vulnerabilities hard last year, making exploits the top entry point for breachesBlack HatSecTor 2025 | How a Mobile Drivers License App Became a Boarding PassTechnical Information Security Content & DiscussionSleeping Agent: Silent persistent C2 through Web PushBleepingComputerDiscord rolls out end-to-end encryption on voice, video callsFor [Blue|Purple] Teams in Cyber DefenceEight Leading U.S. Communications Firms Form C2 ISAC

By Source

Feeds organized so you can skim by site.

Density Sort
CY
cybersecurity
1h ago · 20 items
20 loaded
LN
Latest news
2h ago · 20 items
These backyard solar panels saved me $20/mo on my power bill - here's my setup 2h ago With an 820W solar setup, you can save up to 130kWh a month. I did with Anker's Solix F3800 Plus. Google I/O 2026 live: Our takes on Gemini 3.5, Spark, Android XR, and more 4h ago We're reporting live from Mountain View at Google's annual developer conference today. Stay tuned for the latest updates. Kubuntu vs. Fedora KDE: Which KDE Plasma distro is right for you? 7h ago These two Linux distributions take different approaches to the desktop. One may have an edge for new users. 6 reasons why Firefox is the better browser for most users 8h ago Still using Chrome, Edge, or Safari? Firefox is alive and well - and offering a fast, customizable, bloat-free, private, secure browsing experience from developers who actually listen to their users. OpenAI's new image watermarks make it easier to spot AI fakes - here's how 9h ago Older metadata could be stripped out. OpenAI's new approach hides signals in the pixels themselves. Google's new AI Search box is here - along with agents and 5 more upgrades 9h ago Google now has information agents that work in the background and agentic coding tools that let you build apps directly in Search. Google's new Omni AI tool will let you video clone yourself - I'm intrigued (and concerned) 9h ago Google Gemini Omni aims to do for AI video what Nano Banana did for images - combining realism, style control, avatars, and natural-language editing into one ambitious tool. Google overhauls its AI plans - which one should you now choose? 9h ago The new AI Ultra plan runs $100 a month, while the top-tier Ultra subscription has been cut from $250 to $200. But the AI Plus and Pro plans also get some perks. ZDNET Big Guessing Game: Official contest rules 11h ago Read the full official rules for the 2026 ZDNET Big Guessing Game. I tested Sony's new premium headphones, and they define practical luxury for me 11h ago Sony debuts a special edition pair of 1000X-series headphones, striking a balance between modern style and function.
20 loaded
HS
hacking: security in practice
2h ago · 20 items
20 loaded
SE
SecurityWeek
3h ago · 10 items
CY
CyberScoop
3h ago · 36 items
CISA credential leak raises alarms, and Capitol Hill demands answers 3h ago Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches 5h ago Mini Shai-Hulud returns, compromising hundreds of npm packages 11h ago Microsoft disrupts cybercrime service that abused software verification systems en masse 12h ago AI might cut false positives, but it won’t stop the slop 1d ago Interpol leads cybercrime crackdown across 13 countries in Middle East, North Africa 1d ago The Canvas breach proved that prevention is no longer enough 1d ago Former CISA nominee Sean Plankey named US CEO of defense startup 1d ago Colorado governor commutes prison sentence for election denier Tina Peters 4d ago Here’s how the FTC plans to enforce the Take It Down Act 4d ago
36 loaded
BL
BleepingComputer
4h ago · 15 items
Max-severity flaw in ChromaDB for AI apps allows server hijacking 4h ago A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. Cybercrime service disrupted for abusing Microsoft platform to sign malware 5h ago Microsoft says it has disrupted a malware-signing-as-a-service (MSaaS) operation that abused the company's Artifact Signing service to generate fraudulent code-signing certificates used by ransomware gangs and other cybercriminals. Discord rolls out end-to-end encryption on voice, video calls 6h ago Discord announced that all voice and video calls through the communication platform are now protected by default with end-to-end encryption (E2EE). FBI: Americans lost over $388 million to scams using crypto ATMs in 2025 7h ago The FBI says Americans have lost over $388 million last year to scams using cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs. Microsoft Self-Service Password Reset abused in Azure data theft attacks 7h ago A threat actor targeting Microsoft 365 and Azure production environments is stealing data in attacks that abuse legitimate applications and administration features. Microsoft plans to improve Windows 11 driver quality in 2026 10h ago Microsoft plans to raise the quality bar of Windows 11 drivers, as drivers Microsoft blames macOS update for undismissible Teams location prompts 10h ago Microsoft has confirmed user reports that the Teams team collaboration app is displaying non-dismissible location prompts on some macOS systems. New Shai-Hulud malware wave compromises 600 npm packages 12h ago Threat actors earlier today published more than 600 malicious packages to the Node Package Manager (npm) index as part of a new Shai-Hulud supply-chain campaign. 7-Eleven confirms data breach claimed by the ShinyHunters gang 12h ago Convenience store chain giant 7-Eleven confirmed that its systems were breached in a cyberattack claimed by the ShinyHunters extortion group last month. Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation 13h ago Microsoft's total vulnerability count stayed steady in 2025, but critical flaws surged year over year. BeyondTrust breaks down why attackers are increasingly focused on privilege escalation and identity abuse.
15 loaded
BH
Black Hat
6h ago · 26 items
SecTor 2025 | How a Mobile Drivers License App Became a Boarding Pass 6h ago SecTor 2025 | When Hackers Meet Burglars 10h ago Black Hat Stories Episode 4 | Yaara Shriki, Threat Researcher at Wiz 12h ago Black Hat Stories | Yaara Shriki, Threat Researcher at Wiz 1d ago Connecting at Black Hat | Hear from the CEO & Founder of FuzzingLabs 2d ago SecTor 2025 | Threat Architecture, Attack Surfaces & Real-World Risk 4d ago Black Hat Stories Episode 3 |  Patrick Ventuzelo, CEO & Founder of FuzzingLabs 5d ago Bridging Research & Reality | Why Academics Attend Black Hat 7d ago Black Hat Stories | Patrick Ventuzelo, CEO and Founder of FuzzingLabs 7d ago Bridging Research & Reality | Why Academics Attend Black Hat 13d ago
26 loaded
Sleeping Agent: Silent persistent C2 through Web Push 6h ago GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security 7h ago How Storm-2949 turned a compromised identity into a cloud-wide breach 12h ago Pathfinding Labs: Deploy, test, and learn from 100+ intentionally vulnerable AWS environments 15h ago CVE-2026-34473: Pre-auth ZTE H-series router DoS via CGILua request-body parsing 15h ago RCE and arbitrary file write in Vitess vtbackup via untrusted MANIFEST fields 17h ago New Age of Collisions: Reading Arbitrary Files Pre-Auth as root in cPanel (CVE-2026-29205) 1d ago AudioHijack: adversarial audio attacks on generative voice models transfer from open weights to Microsoft and Mistral production systems 1d ago The down fall of bug bounties 1d ago Instrumenting QT6 desktop apps with Frida - Part 2: Building the Bypass Chain 2d ago
20 loaded
Eight Leading U.S. Communications Firms Form C2 ISAC 6h ago GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security 7h ago UAC-0184: From HTA to a Signed Network Stack 10h ago New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here 11h ago How Storm-2949 turned a compromised identity into a cloud-wide breach 12h ago Entra ID: PIM for Groups Review 12h ago TeamPCP compromises NPM maintainer with over 540 packages 14h ago Active Supply Chain Attack Compromises @antv Packages on npm... 17h ago When DMCA Comes Knocking - A YouTube Creator Phishing Kit 19h ago [Cloudflare] Project Glasswing: what Mythos showed us 20h ago
20 loaded
DB
David Bombal
7h ago · 21 items
21 loaded
SA
Security - Ars Technica
8h ago · 20 items
In stunning display of stupid, secret CISA credentials found in public GitHub repo 8h ago Bug bounty businesses bombarded with AI slop 1d ago Zero-day exploit completely defeats default Windows 11 BitLocker protections 5d ago Linux bitten by second severe vulnerability in as many weeks 8d ago Chaos erupts as cyberattack disrupts learning platform Canvas amid finals 11d ago Mozilla says 271 vulnerabilities found by Mythos have "almost no false positives" 12d ago Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack 14d ago Ubuntu infrastructure has been down for more than a day 18d ago GPT-5.5 matches heavily hyped Mythos Preview in new cybersecurity tests 18d ago The most severe Linux threat to surface in years catches the world flat-footed 19d ago
20 loaded
CS
Cisco Security Advisory
9h ago · 20 items
Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense 9h ago On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptiv... Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability 5d ago May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability was disclosed in February 2026. This ... Cisco Catalyst SD-WAN Manager Vulnerabilities 5d ago Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application. For more informat... Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory 5d ago Following the initial publication of the Security Advisory about a denial of service (DoS) condition in Cisco Crosswork Network Controller and Cisco Network Services Orchestrator (NSO), additional information has been made available to the ... Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities 13d ago Multiple vulnerabilities in Cisco Unity Connection could allow a remote attacker to execute arbitrary code on or conduct server-side request forgery (SSRF) attacks through an affected device. For more information about these vulnerabilities... Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability 13d ago A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this vulnerability, the attacker must have valid credentials for a... Cisco Identity Services Engine Authentication Bypass Vulnerabilities 13d ago Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to bypass authorization mechanisms or examine error messages to gain access to sensitive information on an affected device. For more information ... Cisco Prime Infrastructure Information Disclosure Vulnerability 13d ago A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization chec... Cisco Slido Insecure Direct Object Reference Vulnerability 13d ago A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and ... Cisco IoT Field Network Director Vulnerabilities 13d ago Multiple vulnerabilities in the web-based management interface of Cisco IoT Field Network Director Software could allow an authenticated, remote attacker to access files, execute commands, and cause denial of service (DoS) conditions on man...
20 loaded
TH
The Hacker News
10h ago · 20 items
Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps 10h ago DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability 12h ago The New Phishing Click: How OAuth Consent Bypasses MFA 15h ago Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare 16h ago SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access 17h ago Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer 19h ago Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials 21h ago Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account 22h ago INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests 1d ago ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More 1d ago
20 loaded
RE
Reverse Engineering
10h ago · 20 items
20 loaded
MS
Microsoft Security Blog
12h ago · 10 items
Exposing Fox Tempest: A malware-signing service operation 12h ago Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cybercriminals, including Vanilla Tempest and Storm groups, to more effectively distribute malicious code, including ransomwa... How Storm-2949 turned a compromised identity into a cloud-wide breach 1d ago Storm-2949 turned stolen credentials into a cloud-wide breach, moving from identity compromise to large-scale data theft without using malware. This incident shows how threat actors can exploit trusted systems to operate undetected. How to better protect your growing business in an AI-powered world 1d ago Read how built-in security helps keep small and medium businesses running, protect customer trust, and support growth in a new Microsoft whitepaper. Defense in depth for autonomous AI agents 5d ago As AI agents gain autonomy, defense in depth must evolve, with application-layer design, identity, and human oversight at the center. Kazuar: Anatomy of a nation-state botnet 5d ago Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of espionage-focused operations. Over time, Kazuar has expanded f... When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps 5d ago Exposed UIs, weak authentication, and risky defaults could turn cloud-native AI apps on Kubernetes into potential targets by threat actors. Learn how exploitable misconfigurations lead to RCE and data leaks. Accelerating detection engineering using AI-assisted synthetic attack logs generation 7d ago What if you could generate realistic attack telemetry on demand? Explore research methods that translate attacker behaviors (TTPs) into synthetic logs that can trigger detections at scale and without sensitive data. Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark 7d ago Today Microsoft is announcing a major step forward in AI-powered cyber defense: a new multi-model agentic scanning harness (codenamed MDASH). Defending consumer web properties against modern DDoS attacks 7d ago Learn how to protect consumer websites and defend against modern DDoS attacks with layered security, resilient architecture, and graceful service degradation. Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise 7d ago Microsoft Incident Response investigated an attack operated through legitimate and trusted administrative mechanisms to blend seamlessly into routine operations and remain undetected demonstrating that intrusions have increasingly avoided u...
MS
MSRC Security Update Guide
13h ago · 20 items
CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability 13h ago CVE-2026-8328 FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address 18h ago CVE-2026-7246 Pallets Click contains a command injection via Unsanitized Filename "click.edit()" 18h ago CVE-2026-43443 ASoC: amd: acp-mach-common: Add missing error check for clock acquisition 18h ago CVE-2026-44662 rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 18h ago CVE-2026-43352 i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue 18h ago CVE-2026-31717 ksmbd: validate owner of durable handle on reconnect 18h ago CVE-2026-41673 xmldom: Denial of service via uncontrolled recursion in XML serialization 18h ago CVE-2026-41675 xmldom: XML node injection through unvalidated processing instruction serialization 18h ago CVE-2026-41674 xmldom: XML injection through unvalidated DocumentType serialization 18h ago
20 loaded
HN
Help Net Security
13h ago · 10 items
PureLogs infostealer is stealing credentials worldwide 13h ago A phishing campaign is smuggling the PureLogs information stealer onto targets' machines by hiding malicious payloads inside cat photos. Selector extends AI-driven observability into multi-cloud environments 14h ago Selector expands AI-driven observability capabilities with multi-cloud telemetry correlation and root-cause analysis. LaunchDarkly adds real-time controls for AI agents in production 14h ago LaunchDarkly launches AgentControl, giving teams real-time control over AI agents without redeploying apps. Canonical ships Ubuntu Core 26 with 15 years of security maintenance 14h ago Ubuntu Core 26 launches with 90% smaller OTA updates, Chisel-based builds, ARM TrustZone key protection, and Livepatch on ARM64. New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chain 14h ago A new SHub Reaper macOS infostealer uses fake Apple, Google, and Microsoft branding to steal credentials and target crypto wallets. The end of unencrypted Discord calls is here 14h ago Discord voice and video calls now use DAVE by default, expanding call encryption support across all platforms. Babel Street targets AI-driven threats with new agentic investigation capabilities 19h ago Babel Street Insights Investigator uses AI agents to speed investigations while keeping analysts in control and boosts precision. iProov brings identity verification to video meetings to reduce fraud risks 19h ago iProov Verified Meetings secures video calls with identity verification to block deepfakes and reduce fraud risks. Egnyte unveils Email Capture and AI features to unify fragmented data 19h ago Egnyte’s new Email Capture and AI-driven AEC tools unify siloed data, improving governance and searchability for AI-ready systems. Public Instagram posts provide raw material for AI phishing campaigns 21h ago Public Instagram posts and other social media activity can give attackers enough context to generate highly personalized AI phishing emails.
AC
All CISA Advisories
15h ago · 20 items
20 loaded
SL
Security Latest
17h ago · 20 items
20 loaded
RF
Recorded Future
1d ago · 20 items
At Mythos Speed: A Defender's Playbook for the AI Vulnerability Surge in 2026 1d ago Frontier AI models like Mythos are making vulnerability discovery fast and cheap. Here's how defenders use threat intelligence and agentic processing to prioritize and act at the same speed. April 2026 CVE Landscape 5d ago In April 2026, Insikt Group® identified 37 high-impact vulnerabilities that should be prioritized for remediation, 35 of which had a Very Critical Recorded Future Risk Score. This represents a 19% increase from last month. NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior Signals 6d ago NVD enrichment now covers only 15–20% of CVEs. Learn how Recorded Future Vulnerability Intelligence prioritizes risk using real attacker behavior signals. Beyond Acceleration and Automation: How AI + Intelligence Changes Cyber Defense 6d ago The real question in modern cyber defense isn't who has more technology. It's who uses their resources more efficiently. Here's how AI fused with threat intelligence tips that balance. Working in London at the World’s Largest Intelligence Company 12d ago See what it is like to work at the Recorded Future London office. Quantum Risk Explained 13d ago Learn how the "Harvest Now, Decrypt Later" (HNDL) risk exposes long-lived sensitive data today, regardless of when Cryptographically Relevant Quantum Computers (CRQCs) arrive. Recorded Future Named a Leader in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies. And there’s more. 14d ago Recorded Future shares exciting developments since being named a leader. Threat Activity Enablers: The Backbone of Today’s Threat Landscape 14d ago Behind every ransomware demand, botnet, or threat activity group is a server sitting in a data center. Hacking Embodied AI 15d ago Embodied AI, intelligent systems in physical forms such as humanoid and quadruped robots, is moving from spectacle to staffing plans. The Iran War: What You Need to Know 19d ago Insikt Group tracks the cyber, physical, and geopolitical components of the US-Israeli strikes on Iran — with continuously updated threat analysis and scenarios.
20 loaded
Inside SHADOW-WATER-063’s Banana RAT: From Build Server to Banking Fraud 1d ago Agentic Governance: Why It Matters Now 2d ago AI agents now act inside the trust boundary with real credentials, and agentic governance is what keeps them from quietly breaking things at machine speed. Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft 7d ago Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America 9d ago Supporting the National Cyber Strategy: How TrendAI™ Helps 14d ago InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise 15d ago Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities 16d ago Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia 20d ago Kuse Web App Abused to Host Phishing Document 21d ago Bad actors took advantage of the legitimate name and services of Kuse, a popular AI-based app designed for workplaces. The attackers exploited the users’ trust in Kuse to carry out a phishing attack. Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories 29d ago
20 loaded
KO
Krebs on Security
1d ago · 10 items
CISA Admin Leaked AWS GovCloud Keys on Github 1d ago Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of inte... Patch Tuesday, May 2026 Edition 7d ago Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this m... Canvas Breach Disrupts Schools & Colleges Nationwide 12d ago An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework at school districts and universities across the United States today, after a cybercrime group defaced the servi... Anti-DDoS Firm Heaped Attacks on Brazilian ISPs 19d ago A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazi... ‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty 28d ago A 24-year-old British national and senior member of the cybercrime group "Scattered Spider" has pleaded guilty to wire fraud conspiracy and aggravated identity theft. Tyler Robert Buchanan admitted his role in a series of text-message phish... Patch Tuesday, April 2026 Edition 35d ago Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dub... Russia Hacked Routers to Steal Microsoft Office Tokens 42d ago Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backe... Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab 44d ago An elusive hacker who went by the handle "UNKN" and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gang... ‘CanisterWorm’ Springs Wiper Attack Targeting Iran 57d ago A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or ha... Feds Disrupt IoT Botnets Behind Huge DDoS Attacks 61d ago The U.S. Justice Department joined authorities in Canada and Germany in dismantling the online infrastructure behind four highly disruptive botnets that compromised more than three million hacked Internet of Things (IoT) devices, such as ro...
MA
Malware Analysis & Reports
1d ago · 20 items
20 loaded
JH
John Hammond
1d ago · 19 items
19 loaded
DA
darkreading
1d ago · 45 items
The Boring Stuff is Dangerous Now 1d ago Can Laws Stop Deepfakes? South Korea Aims to Find Out 2d ago Congress Puts Heat on Instructure After Canvas Outage 4d ago Cyber Pioneers Ponder Past as Prologue 4d ago Taiwan Bullet Train Hack Highlights Cybersecurity Gaps in Rail Systems 5d ago SecurityScorecard Snags Driftnet to Level Up Threat Intelligence 5d ago Maximum Severity Cisco SD-WAN Bug Exploited in the Wild 5d ago 'FrostyNeighbor' APT Carefully Targets Govt Orgs in Poland, Ukraine 5d ago AI Drives Cybersecurity Investments, Widening 'Valley of Death' 5d ago Foxconn Attack Highlights Manufacturing's Cyber Crisis 5d ago
45 loaded
NA
NahamSec
1d ago · 21 items
21 loaded
SE
Securelist
1d ago · 10 items
IT threat evolution in Q1 2026. Mobile statistics 1d ago This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada. IT threat evolution in Q1 2026. Non-mobile statistics 1d ago The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026. Kimsuky targets organizations with PebbleDash-based tools 5d ago Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster. State of ransomware in 2026 7d ago Kaspersky researchers are sharing insights into the main ransomware trends for 2026: EDR killers on the rise, switching from data encryption to data leaks, and more. CVE-2025-68670: discovering an RCE vulnerability in xrdp 11d ago During a security assessment of Kaspersky USB Redirector, we discovered CVE-2025-68670: a pre-auth RCE in the xrdp server component. Project maintainers promptly patched the vulnerability. Exploits and vulnerabilities in Q1 2026 12d ago This report provides statistical data on published vulnerabilities and exploits we researched during Q1 2026. It also includes summary data on the use of C2 frameworks in APT attacks. OceanLotus suspected of using PyPI to deliver ZiChatBot malware 13d ago Kaspersky researchers uncovered malicious wheel packages in PyPI that targeted both Windows and Linux and contained a dropper delivering malware dubbed ZiChatBot. We attribute this activity to OceanLotus APT. Websites with an undefined trust level: avoiding the trap 13d ago We explain what suspicious websites are and how to distinguish a safe site from a fraudulent one. A new category in Kaspersky solutions: we’re sharing global statistics on untrusted site detection. “Legitimate” phishing: how attackers weaponize Amazon SES to bypass email security 15d ago Kaspersky expert breaks down a new phishing scheme that uses the Amazon SES cloud email service. Let’s look at some examples to see how you can tell a phishing email from a real one. Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India 19d ago The Silver Fox group is targeting companies in Russia and India by impersonating tax authorities to distribute ValleyRAT and the new ABCDoor backdoor.
CD
Cyber Defense Magazine
2d ago · 35 items
Why Is Cybersecurity Now A Business Priority, Not Just An IT Function? 2d ago The Security Mistakes Being Repeated With Ai 3d ago The Hidden Risk For IT Subcontractors: When Insurance, Not Security, Costs You The Contract 4d ago Innovator Spotlight: Klever Compliance 5d ago Innovator Spotlight: Radware 5d ago Innovator Spotlight: JScrambler 5d ago Innovators Spotlight: OPSWAT 6d ago The Board Is Asking The Wrong Security Question 6d ago Synthetic Identity Fraud Requires An Equal Focus On Biometrics And Document Verification 7d ago Innovator Spotlight: Iru 8d ago
35 loaded
IP
IppSec
3d ago · 17 items
17 loaded
AL
Alerts
4d ago · 20 items
20 loaded
WE
WeLiveSecurity
4d ago · 20 items
20 loaded
BF
Blog – Forter
5d ago · 10 items
HA
Hak5
6d ago · 21 items
21 loaded
TC
The Cyber Mentor
6d ago · 17 items
17 loaded
PN
Proofpoint News Feed
7d ago · 10 items
Proofpoint Launches Dedicated MSP Business Unit and Introduces 365 Total Protection for North America 7d ago New MSP Platform business unit, AI-powered all-in-one Microsoft 365 protection, and Marketplace partnership with Pax8 strengthen Proofpoint’s commitment to channel and small and mid-size The spy who logged me in. 10d ago ⁠Mark Kelly⁠, Staff Threat Researcher at ⁠Proofpoint⁠, is discussing their work on "I’d come running back to EU again: TA416 resumes European government espionage campaigns." China-linked threat group TA416 has resumed large-scale phishing ... Proofpoint Establishes Innovation Precedent for Source-Agnostic Modern Enterprise Investigations 13d ago Proofpoint Prism Investigator positioned as first fully autonomous Agentic AI solution to significantly streamline investigations for highly regulated and highly AI and the New Threat Landscape | Sumit Dhawan with NightDragon | RSAC 2026 14d ago The Most Powerful Women Of The Channel 2026: Power 100 15d ago The Power 100 is culled from the ranks of CRN’s 2026 Women of the Channel and spotlights the female executives at vendors and distributors whose insight and influence help drive channel success. AI Security Gaps Create New MSSP Opportunity: Proofpoint 19d ago Claude Mythos Fears Startle Japan's Financial Services Sector 20d ago AI-Era Threats Spread Beyond Email Into SaaS, Collaboration Apps, and AI Assistants 21d ago Proofpoint Research Reveals Half of Global Organizations Experienced AI Incidents Despite Having AI Security Controls in Place 21d ago Inaugural global study finds more than half of organizations are not fully confident their AI security controls would detect compromised AI Clear market trend for software providers to help with AI: Proofpoint CEO 26d ago Sumit Dhawan, Proofpoint CEO, joins 'Closing Bell' to discuss ServiceNow's quarterly earnings results, if Anthropic's Mythos makes incumbent players more important and much more.
HS
Heimdal Security Blog
7d ago · 15 items
AI Will Absorb 99.98% of SOC Triage Within a Year, as 79% of IT teams brace for AI-driven workload shift 7d ago Morten Kjaersgaard expects fewer than 500 of three million monthly alerts to need a human analyst in the year ahead. The role is being rebuilt around cases that warrant judgement. Top 10 Cybersecurity Companies in Europe 14d ago Over the last 10-15 years, the cybersecurity scene has gotten increasingly complex, as organizations adopt new technology and hackers evolve more innovative ways to target them. At the same time, data protection and compliance have become m... Heimdal Expands AI Strategy with AI Wingman and Third-Party AI Containment 28d ago Heimdal today unveiled the next phase of its AI strategy, expanding AI Wingman with three new layers - Assist, Triage and SOC - alongside the introduction of Third-Party AI Containment. You Only Know What You’ve Got When Its Gone 53d ago Prepare for the expected. Rehearse an action plan in case of technology failure or cyberattacks. We all know they can happen. Nordic MSPs Can Now Access Heimdal’s Unified Security and Compliance Platform Through Elovade 62d ago Heimdal has appointed Elovade as its official distributor in the Nordic region. The move gives MSPs and resellers across Sweden, Norway, Denmark, Iceland, and Finland direct access to Heimdal's consolidated cybersecurity platform through a ... OpenClaw Incidents Show Why AI Adoption Pressure Puts Companies at Risk 75d ago The OpenClaw security failures show how hasty AI adoption can expose businesses and supply chains to major cyber risk. Heimdal Claims Industry First With a Cyber Essentials Control Mapping for PEDM to Help Organisations Prove Least Privilege 99d ago Heimdal is the first vendor to publish a dedicated Cyber Essentials control mapping for PEDM, setting out how privilege management supports Cyber Essentials requirements and what evidence can be produced to support assessment and assurance. Five Predictions for Cyber Security Trends in 2026 104d ago Morten Kjaersgaard, Heimdal’s Founder, and Adam Pilton, a former cybercrime investigator, predict five cyber security trends for 2026. Heimdal Achieves OPSWAT Gold Certification for Anti-Malware 124d ago Heimdal today announced that its Next-Gen Antivirus (NGAV) with Extended Threat Protection (XTP) has achieved OPSWAT Gold Certification for Anti-Malware, validating its compatibility and effectiveness within OPSWAT’s industry-leading Access... How to Avoid Holiday Shopping Scams (From a Former Cyber Detective) 159d ago Worried about holiday scams? Ex-cybercrime detective Adam Pilton breaks down the biggest threats and how to shop safely this festive season.
15 loaded
M3
Microsoft 365 Blog
8d ago · 10 items
New and improved: Agent governance, intelligent workflows, and connected app experiences 8d ago See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator. Copilot Cowork: From conversation to action across skills, integrations, and devices 14d ago Today, we’re announcing additional capabilities in Cowork to expand on what it can make possible for you. Microsoft 365 Copilot, human agency, and the opportunity for every organization 14d ago Empower your organization with Microsoft 365 Copilot—AI that bridges human potential and business outcomes for the future of work. Microsoft Agent 365, now generally available, expands capabilities and integrations 18d ago ​We’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage shadow AI agents. Learn more. Copilot’s agentic capabilities in Word, Excel, and PowerPoint are generally available 27d ago Copilot's newest features are now generally available as the default experience across all Microsoft 365 subscriptions. Bring your everyday business apps into the flow of work with agents in Microsoft 365 Copilot 36d ago Discover how apps integrate with AI agents to power Copilot experiences, streamline workflows, and turn business context into action. New and improved: Multi-agent orchestration, connected experiences, and faster prompt iteration 48d ago Explore what's new in Copilot Studio: Multi-agent systems now generally available, plus updates to the Prompt Editor and governance controls. Copilot Cowork: Now available in Frontier 50d ago Today, Copilot Cowork—designed for long-running, multi-step work in Microsoft 365—is available via the Frontier program. Copilot Cowork: A new way of getting work done 71d ago Copilot Cowork turns intent into action across Microsoft 365—automating tasks, coordinating workflows, and keeping you in control. See how. Powering Frontier Transformation with Copilot and agents 71d ago Wave 3 of Microsoft 365 Copilot introduces Copilot Cowork, multi‑model intelligence, and enterprise‑ready AI—built to get real work done.
NE
NetworkChuck
13d ago · 15 items
15 loaded
TL
The Last Watchdog
14d ago · 10 items
News alert: LuxSci launches HIPAA-compliant email platform for mid-size healthcare market 14d ago CAMBRIDGE, Mass., May 5, 2026, CyberNewswireŌĆöLuxSci, a leading provider of HIPAA compliant secure healthcare communications, today announced the launch of LuxSci Secure High Volume Email for mid-sized healthcare organizations, the industr... SHARED INTEL Q&A: PKI’s unfinished business—’digital passports’ for content, models and agents 19d ago As if keeping track of machine identities wasnŌĆÖt hard enough. AI agents are now arriving by the thousands ŌĆö and most enterprises are just handing them borrowed credentials and hoping for the best. Meanwhile, the cryptographic infrastruc... GUEST ESSAY: How augmented reality (AR) can turn building images into ad space with no control 21d ago Every major building in America has three things: a physical address, a legal owner, and an unmonitored attack surface. Related: Sam Altman's quest to usurp the browswer That surface extends from the ground up through every floor, every fac... FIRESIDE CHAT: Leaked secrets are now the go-to attack vector — and AI is accelerating exposures 22d ago A consequential shift is underway in how enterprise breaches begin. The leaked credential ‚Äî once treated as a hygiene problem ‚Äî has become the primary on-ramp. Related: No easy fixes for AI risk Last August‚Äôs Salesloft campaign was th... News alert: BreachLock’s integrated attack validation platform debuts in Gartner AEV category 27d ago NEW YORK, Apr. 21, 2026, CyberNewswire—BreachLock, a global leader in offensive security, today announced it has been named a representative vendor in the 2026 Gartner Market Guide for Adversarial Exposure Validation. This recognition mar... Fireside Chat: PKI has carried digital trust through every tech advance—now comes the hardest one 29d ago Public key infrastructure -- the authentication and encryption framework that has held digital commerce together through every chaotic leap forward in technology -- is facing a double whammy. Related: Achieveing AI security won't be easy Au... News Alert: NTT Research launches SaltGrain—advanced Attribute-Based Encryption security 34d ago SUNNYVALE, Calif., Apr. 15, 2026 ŌĆō NTT Research, Inc., a division of NTT (TYO:9432), today announced the launch of Scale Academy, a startup incubator responsible for bringing to market products and services based upon technologies studied... GUEST ESSAY: Google’s 2029 deadline exposes readiness gap as move to quantum-safe crypto lags 35d ago For years, quantum risk was easy for most institutions to treat as premature: real in theory, urgent someday, but not yet an operational problem. That is no longer tenable. Related: AI spawns semantic attacks Two developments this month bro... News alert: Mallory launches AI-native platform to cut through alert noise and surface real risk 39d ago AUSTIN, Texas, Apr. 9, 2026, CyberNewswire—Mallory is launching a AI-native threat intelligence platform, purpose-built to answer the questions CISOs and their teams are asking every day: •What are the real threat vectors for our organi... FIRESIDE CHAT: Geopolitical turmoil, rising AI risk add a new layer to enterprise cyber defense 42d ago As if securing the enterprise against a tidal wave of AI tools wasn't hard enough, it turns out the geopolitical instability of the moment is making things worse. That wasn't the headline at RSAC 2026 last week -- agentic AI dominated the a...
WE
WeLiveSecurity
14d ago · 20 items
20 loaded
Azure IaaS: Defense in depth built on secure-by-design principles 15d ago Explore how Azure IaaS uses defense in depth and secure-by-design principles to deliver layered, scalable cloud security across compute, network, and data. Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM 19d ago Learn how Microsoft Azure Integrated HSM delivers hardware‑enforced key protection in the cloud, combining FIPS Level 3 assurances with transparency and open‑source collaboration. Azure IaaS: Keep critical applications running with built-in resiliency at scale 48d ago Learn how Azure IaaS helps organizations start from a resilient platform foundation with availability, continuity, and recovery capabilities. Azure IaaS: Explore new resources for building a stronger, more efficient infrastructure 76d ago Learn how Azure IaaS helps you modernize infrastructure, improve performance and resilience, optimize costs, and prepare for AI workloads. Read more. Azure reliability, resiliency, and recoverability: Build continuity by design 91d ago Learn how Azure reliability, resiliency, and recovery capabilities work together to improve cloud continuity. Read more. Microsoft strengthens sovereign cloud capabilities with new services 195d ago Discover new Microsoft digital sovereignty capabilities and upcoming features across AI, security, and productivity, to address sovereign cloud needs. Enhancing software supply chain security with Microsoft’s Signing Transparency 197d ago Microsoft Signing Transparency delivers verifiable code integrity and tamper-evident software releases for stronger supply chain security. Oracle Database@Azure offers new features, regions, and programs to unlock data and AI innovation 217d ago Migrate Oracle solutions to the cloud with a trusted, enterprise-ready platform from Microsoft and Oracle. Learn more. Building secure, scalable AI in the cloud with Microsoft Azure 322d ago Forrester Research shows how Azure helps enterprises scale generative AI securely, unlocking real business value. Learn more. Enhance AI security with Azure Prompt Shields and Azure AI Content Safety 348d ago Learn how Prompt Shields and Azure AI Content Safety can help guard against direct and indirect threats to your LLM-based solution.
DE
DEFCONConference
21d ago · 15 items
15 loaded
CC
CISA Cybersecurity Advisories
28d ago · 10 items
Defending Against China-Nexus Covert Networks of Compromised Devices 28d ago Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure 43d ago U.S. organizations should review the TTPs and IOCs in this advisory for indications of current or historical activity on their networks, and apply the Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure 165d ago The authoring organizations encourage critical infrastructure organizations to implement the recommendations in this advisory to reduce the likelihood and CISA Shares Lessons Learned from an Incident Response Engagement 239d ago Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System 267d ago The authoring agencies strongly urge network defenders to hunt for malicious activity and to apply the mitigations in this CSA to reduce the threat of Chinese CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization 294d ago #StopRansomware: Interlock 302d ago Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider 341d ago CISA urges software vendors, downstream customers, and end users to immediately implement the Mitigations listed in this advisory based on confirmed compromise Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations 364d ago Russian GRU Targeting Western Logistics Entities and Technology Companies 372d ago Executives and network defenders should recognize the elevated threat of unit 26165 targeting, increase monitoring and threat hunting for known TTPs and IOCs
13 loaded
LI
LiveOverflow
76d ago · 15 items
15 loaded
SK
STÖK
268d ago · 15 items
15 loaded
TH
Threatpost
1357d ago · 10 items
Student Loan Breach Exposes 2.5M Records 1357d ago 2.5 million people were affected, in a breach that could spell more trouble down the line. Watering Hole Attacks Push ScanBox Keylogger 1358d ago Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms 1359d ago Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. Ransomware Attacks are on the Rise 1362d ago Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. Cybercriminals Are Selling Access to Chinese Surveillance Cameras 1363d ago Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. Twitter Whistleblower Complaint: The TL;DR Version 1364d ago Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Firewall Bug Under Active Attack Triggers CISA Warning 1365d ago CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Fake Reservation Links Prey on Weary Travelers 1366d ago Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. iPhone Users Urged to Update to Patch 2 Zero-Days 1369d ago Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. Google Patches Chrome’s Fifth Zero-Day of the Year 1370d ago An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.

No matching sources found.