WHATS Cursor confirms security breach led to malicious Claude Code extension
BleepingComputer ·
WHATS
THE HAX?
Top story
Also in coverage
Upcoming Speaking Engagements
Schneier on Security ·
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records
Security Affairs ·
Is AI Making Us Worse at Cybersecurity?
SecurityWeek ·
Article feed
59 sources ↓Cursor confirms security breach led to malicious Claude Code extension
US disrupts North Korean campaign behind $400 million crypto theft
Trezor confirms crypto-stealing implants in three wallets, releases fix
German military drone operations disrupted by cyberattack
Upcoming Speaking Engagements
Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters
AI Doesn’t Have to Go Rogue to Break the World
Another Way Police Are Locating People from Their Smartphones
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog
North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure
Gootloader Malware Disrupted After Infecting 25,000 Computers
Ruohang Feng: PostgreSQL Just Patched 52 CVEs in a Single Minor Release
Helping Developers Writing Code Analyzer Queries
Sharing ARTEX detection signature pack - from IOC w/playbook process
Massive ‘wfx-loot’ Campaign Probes Over 60,000 GitHub Repositories to Steal CI and Cloud Secrets
HackTheBox - Nimbus
HackTheBox - Garfield
HackTheBox - MakeSense
HackTheBox - Checkpoint
Is AI Making Us Worse at Cybersecurity?
Apple Reveals How Secure Exclaves Shield Camera and Microphone Data
No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update
FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’
Beware the New AI-Fueled Ransomware Boom
Microsoft 365 Crawls Back to Life After a 24-Hour Outage
The Microsoft Outage Is a Warning for the World
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
Cilium Tetragon TracingPolicy for container binary allowlisting and host egress lock (mitigating GSocket-style C2)
WFX Phantom: The GitHub Actions Secret Stealer That Deletes Its Tracks
CTO at NCSC Summary: week ending November 15th
Anonymous website
Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors
How do you all handle notes
The firewall becomes the foothold: Attackers turn Check Point gateways against customers
Thousands of GitHub repos hit with secret-stealing malware
How AI is changing the nature of cyberattacks
Black Hat USA 2026 | AI and the Future of Cyber Defense Panel
Black Hat USA 2026 | ChatMate: Remote Prompt Execution on AI Assistants through Sandbox Escaping
Fromage-Gate: Old-School Hacking Tactics vs. French Supermarkets
FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents
NYC to bar surveillance pricing as momentum for bans grows nationwide
SCKit abuses ScreenConnect to deploy remote access and target technician sessions
Trained to betray: How post-training supply chain attacks hijack coding agents
The global socket: how threat actors are weaponizing GSocket for stealthy C2
Researchers continue to find serious vulnerabilities in internet connected refrigerators
Industry guidelines for offensive cyber tools unveiled through international Pall Mall Process
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
Attackers in Binance Breach Targeted Known Weakness, Missing Controls
Getting Past the Post-Quantum Cryptography Discovery Phase
Estoy buscando colaborar con desarrolladores que tengan problemas técnicos concretos y necesiten una mano.Tengo experiencia trabajando con Linux, Python, C/C++, ingeniería inversa, análisis de binarios, debugging, automatización y validación técnica.Me interesa ayudar a resolver problemas reales
Rebuilt Super Mario Forever 2012 from GM8.1 bytecode to run natively on the web (WebGL + TypeScript)
Updated dnspy
ClickFix Data Staging
Payload Podcast 013 - Catchup
ClickFix Cache Trick
DEF CON CTF Walkthrough: Web Exploitation
Veterans Day Cybersecurity Livestream | PowerShell Course Preview
Why Your Company Needs an AI Policy (Ask a CISO)
Microsoft Outage Could Lead to $7B in Losses
Social Security Numbers, Medical Data Compromised in Amplifon Breach
How to Navigating Continuous Cyber Warfare: Panel Discussion
Windows 0-day dropped by disgruntled researcher hands hackers System rights
Google DeepMind just mathematically verified key parts of Signal
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
ChatGPT Wallet lets agents pay without seeing your card number
Fake GTA 6 download goes after Steam logins and crypto wallet data
Apple details Secure Exclaves, isolated runtimes for camera and microphone data
CVE-2026-108401 Remote Desktop Services Remote Code Execution Vulnerability
CVE-2026-109473 Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-112765 Windows Print Spooler Components Elevation of Privilege Vulnerability
Working with OpenAI on Trusted Agent Checkout
Site Traffic Recommendations: 4 Steps to Reduce Agentic Risk
AI Agent Order Data: Agentic Commerce on Forter’s Network
Cloud security statistics for 2026
Certified for what? How to read a vendor’s ISO 27001 certificate
MDR vs SOC: How to choose the right option for your organisation
Hackers' Overreliance on AI Can Result in Weaker Cyber-Attacks, Proofpoint Researcher Says
Microsoft 365 Outage Set to Ramp up Security Risks to Organizations
Phishing Rises Three Times Faster in Europe Than Globally, Proofpoint Finds
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Siemens Building Automation and Energy Products
Siemens Desigo, Gridscale
GTA VI isn’t out yet – and the scams are already in full swing
Exchange for breakfast: Turla’s Cereal tricks are not for kids
Scammers Use Stolen Cards to Fulfill Fake Dumpster Rental Ads
42% of Scam Victims Who Report to Banks Recover Every Dollar
How Banks Can Spot Scams That Pass Authentication
Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes
Transcending the trust boundaries: how a cloud pentest works
Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
A hijacked discord invite within the Metis foundation community is being used to spread malware to the community + full analysis
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
[Vorfallsbericht] Nextcloud LXC-Kompromittierung durch RichDocumentsCode (RCE) – Erkenntnisse und Behebung
Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more
LEGO’s BrickLink taken offline: What users should know
Why scammers want you to allow push notifications
ZDI-CAN-35257: e2fsprogs
Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)
ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)
OWASP Top 10 Neocloud and AI Data Center Security Risks project released
The Adversary v0.9.0-alpha for Cardputer/ADV is out!
Poisoned TanStack packages stole an Nx developer’s GitHub token. A trojaned Nx Console release then hit GitHub and Grafana. One poisoned npm install led to ~3,800 stolen internal repos (CVE-2026-45321, CVE-2026-48027)
What AMLR Means For Your Existing Customer Book
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
20 petaflops under your desk
Ban AI, Lose Google SEARCH?
He Invented the USB Rubber Ducky to Fix Printers!
WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk
Smashing Security podcast #492: How hackers turned Russian cars into pumpkins
Iranian hackers turned up the heat on French supermarket freezers, says France
Claude Code Extension Hid an SSH Backdoor | Threat
Chinese AI Tried to Phone Home. Nobody Knows Why | Threat Wire
Introducing Theme Studio Pro
Five Findings From the 2027 State of Threat Intelligence
AI Is Both Target and Tool for Threat Actors
DoppelCart Fraud Network Grows to More Than 250,000 Domains
Who Runs the Ransomware Group Qilin?
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Want to Rent an Internet Address at the White House?
News alert: TENEX.ai previews three new security tools built from a live 26,000-agent AI attack test
LW ROUNDTABLE: Binance heist shows AI multiplies trust chains while handoffs go unguarded
News alert: One Identity updates Safeguard to strengthen privileged access management
i wired my toilet to a Raspberry Pi
you need to use Herdr RIGHT NOW!!
this WiFi GPU is wild.....
18 Outdated Identity And Access Management Assumptions To Retire
French officials blame Iran for refrigerator hacks, vow retaliation
Proofpoint CEO Sumit Dhawan Speaks to $6.3 Billion Varonis Systems Acquisition
I Almost Missed This Kubernetes Vulnerability
Meta paid a $300,000 bounty for this
OpenAI paid $5000 for this account takeover vulnerability that could also leak your private chats
DEF CON 34 - Main - How Dealer Installed AntiTheft System Exposes 1M+ Cars - A Schulman, J Yu, Y Wei
DEF CON 34 - Main - Bird Hunting Season The Final Flight - Jon Gaines
DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong
How an Image Causes a Heap Buffer Overflow // libheif
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
Try another search or clear the filters.
Showing 180 of 1020 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.