WHATS U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
Security Affairs ·
WHATS
THE HAX?
Breaches and incident news
Top story
Also in coverage
Northflank security breach leads to abuse of customers' AI API keys
BleepingComputer ·
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
The Hacker News ·
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
Security Latest ·
Article feed
12 sources ↓U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog
$6.3 Billion Stolen from Binance in Attack Attributed to North Korea
How to prioritize remediation after a pentest: a practitioner workflow
Hacker leaks data on more than 40,000 Homeland Security employees
Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion
US Probes Suspected Hack Behind Military Base Freezer Failures
484,142 Exposed Cloud Buckets Contain 18 Billion Files
U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks
Election Website Security: 42% of US County Sites Still Lack .gov Domains
ENGIE Data Breach Exposes Customer Details and Energy Contracts
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog
Three Japan-Focused Cyberattacks Show How Hackers Use AI
Northflank security breach leads to abuse of customers' AI API keys
New Android SMS of Death exploit can remotely crash unpatched phones
Reddit to lock content behind logins to fight scrapers
From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
Chainalysis discloses data breach from "offensive agentic techniques"
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Trezor warns of suspected crypto-theft implant in hardware wallet
Malicious Claude Code extension on Cursor planted SSH backdoors
SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
CISA says max severity GitLab flaw now exploited in the wild
Microsoft finally fixes VPN issues caused by September updates
Drupal warns of critical Commerce Core flaw exploited in attacks
Binance links $6.3 billion crypto theft to compromised DevOps laptop
OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut
Binance probes potential $5.8 billion crypto-theft hack
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Japan Airlines suffers third-party data breach exposing passenger info
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Fake crypto app on Apple App Store linked to $23K wallet theft
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
Why Urgent Security Fixes Aren't Fixed. Observe, Prove, Act, Confirm Gets Them Moving
Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
Webinar: How to Build AI Threat Readiness Into Your Security Operations
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
AI Guardrails Aren’t Stopping Criminal Hackers
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Encryption Is Getting Squeezed From All Sides
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
Passkeys Are Better Than Passwords. But They Are Not Enough.
Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
Fresh WordPress Vulnerability in Attackers’ Crosshairs
Drupal Commerce Core Vulnerability Exploited Against Online Stores
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model
How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI
Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps
Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts
Over 41,000 DHS Employee Records Leaked Online
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Apple notifications alert victims in 99 countries about mercenary spyware infections
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
Defense contractor pleads guilty to aiding North Korean remote worker scheme
Syrian hacker who served Assad regime gets 42 months in US prison
Leaked DHS employee archive, Icepick, faces challenges to stay online
Officials seize domain of top bulletproof hosting provider Virtualine
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
Lawsuit against Ex-Overstock CEO tied to 2020 election film falls apart over question of ‘actual malice’
Researchers uncover Volt Typhoon’s covert, ephemeral network
Prosecutors charge Madagascar scammers in NFT-stealing scheme based on fake online dating profiles
Before you file that AI bug report, OpenAI has some advice
All the security risks Anthropic is worried about before its IPO
Prolific Hive and Nefilim ransomware affiliate sentenced to 70 months in prison
National cyber director rolls out latest pilot in South Carolina, this time for rural hospitals
What happens when security tools go dark before the ransomware
Experts temper emergency-level alarms over critical Brotli defect
Senators, rights groups say Trump administration breaking law by withholding surveillance court opinion
Authorities extradite Chinese national for alleged $37M investment scam
CISA publishes strategy with eye on the next four years
DOJ raises privacy concerns over potential sale of Character.AI chats
Fashion retailer Resolve says hackers stole payment card information
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
Syrian Electronic Army hacker gets prison time for attacks on Western targets
British spy agency cannot account for thousands of data storage devices, watchdog says
Devs Hit by Trojanized Claude Code Extension for Cursor
Behind the Scenes of How Operation Blackout Went Down
L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara
Undead Software Projects Continue to Raise Security Risks
As Russia's Cyberwar Evolves, Belarus Steps Forward
Anthropic-Themed Phishing Emails Bypass Top Security Tools
Rethinking Cybersecurity Awareness in the AI Era
Why CTF Competitions May Be More Important Than Ever
Claude Model Builds Exploits Across Major Browsers & OSes
Threat Modeling With 4 Simple Questions on a White Board
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
AI Takes Root in Hospital Corridors, Raises Security Stakes
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
3 Frameworks to Protect CISOs & Orgs Against AI Liability
External Teams Chats Anchor 15-Minute Malware Delivery
SBOMs Alone Can't Reveal the Scope of a Supply Chain Attack
Beware the Slasher: AI Could Kill Off Cybersecurity Pros' Skills
New Framework Puts Ransomware Resilience for AI Systems in Focus
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
Online Scam Volumes Double to Overtake Phishing
ICO Reprimands Staffordshire Police After Domestic Abuse Breach
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
Japan’s GMO Internet Urges Customers to Disconnect PCs
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
AI Is Turning CISOs Into Business-Risk Translators, Says Nvidia’s Head of Cyber
Energy Giant Engie Notifies Customers of Supply Chain Breach
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
Hackers Infect 953 Online Stores With Scanner-Evading Code
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Copenhagen University Breach Compromises Data on Half a Million People
First ISC2 AI Security Certification Expected for Early 2027
Fake PDF and search tools hijacked searches for 13.4 million Chrome users
Photo ID, bank checks, face scan? The UK’s age-check options
Binance hit by largest-ever crypto theft, with $6.3 billion stolen
Hackers steal and publish data on 41,000 Homeland Security workers
Malicious Firefox extensions impersonate popular crypto wallets
Have an older iPhone or iPad? Apple has a security update for you
Banks are blocking AI agents from customer accounts
Chrome and Firefox updates fix serious security flaws. Install now
Five election scams to watch out for
Artificial Intimacy: Love and lies in the age of AI
The web’s having a rough week. Here’s how to browse safely
Samsung TVs without mics may listen through soundbars, researcher says
Popcorn Time’s forgotten updater left millions of devices exposed to hijacking
AI Halloween videos: Who’s getting your photos?
Patient records exposed in Quest breach: What you need to know
A week in security (October 19 – October 25)
Resident Evil maker Capcom warns of phishing after 11.7 million records exposed
Crime Stoppers chapter freezes tips after breach breaks anonymity promise
Facebook’s misleading privacy claims land Meta a $25 billion penalty
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
Anthropic AI model finds Linux kernel bug that leads to remote root access
Mistral open-sources AI model despite warning it could aid cyberattacks
Everyday channels are available in an incident, but you may not want them
We are not ready for what AI has done to red teaming
Beyond deterministic worms: Preparing the SOC for reasoning adversaries
PHP2Shell plus Fragnesia: A dangerous new route from web server to root
A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructure
New Cisco firewall zero-day being actively exploited
Fake Anthropic AI previews lure in overeager employees
Anthropic and OpenAI diverge on who should pull the plug on risky AI
Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets
Vulnerability exploitation rising as the root cause of many breaches
Securing MCP servers before the AI rollout outpaces security
PHP2Shell will persist in enterprise environments for years
Fake ChatGPT, Claude apps spread malware via signed AI binaries
Gheist turns GitHub Actions into a secret extraction service
Trusting Unsloth’s trust setting could mean executing malicious code
When prevention fails: Why cyber resilience is the next big test of trust
10 ways attackers abuse AI services to hack your business
Attackers compromised 42 GitHub repositories by using files too large to be searched
Widespread PHP Flaw May Cause Many Site Outages Today
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.K. Sanctions Cryptomus for RU Money Laundering
Microsoft Patches More Than 1,400 Security Flaws
FBI Arrests Executive at Ransomware Negotiation Firm
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
Data Broker Radaris Loses Domains in Privacy Fight
Microsoft Plugs Nearly 1,000 Security Holes
Try another search or clear the filters.