Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
OpenAI Restricts New GPT 5.6 Cyber Model to Vetted Security Partners
OpenAI releases GPT 5.6 Cyber for vulnerability research and incident response, offering Daybreak Blue and Red variants strictly to approved partners.
Aug 10, 2026Sherlock Holmes and the Timeless Mechanics of Social Engineering
Arthur Conan Doyle’s fictional detective demonstrated pretexting, OSINT, and human intelligence tactics that mirror modern social engineering attacks.
Aug 10, 2026Outdated Cybercrime Laws Put Good-Faith Security Researchers at Risk
A new five-point policy framework addresses how outdated global cybercrime laws create severe legal liability for good-faith security researchers.
Aug 10, 2026SonicWall SMA1000 Flaws CVE-2026-15409, CVE-2026-15410 Used in Ransomware
CISA confirms active ransomware exploitation of SonicWall SMA1000 vulnerabilities CVE-2026-15409 and CVE-2026-15410. Immediate patching required.
Aug 10, 2026Sandworm Hackers Impersonate IT Recruiters to Target Ukrainian Admins
Russian GRU unit Sandworm is posing as IT recruiters on job sites, tricking Ukrainian system administrators into installing malicious SopraVPN software.
Aug 10, 2026'Ghostjacking' Attacks Poison Security Logs to Hijack Autonomous AI Agents
Tenet security researchers demonstrate Ghostjacking, abusing logs in Cloudflare, Datadog, and Sentry to trick AI agents into running arbitrary commands.
Aug 10, 2026Storm-1175 Exploits N-able N-central Flaw to Deploy StormEncryptor Ransomware
China-linked threat actor Storm-1175 is exploiting CVE-2026-18577 in N-able N-central RMM tools to deploy custom StormEncryptor ransomware.
Aug 10, 2026Sandworm Hackers Pivot via Private APN to Sabotage Second Polish Energy Facility
Russian threat actor Sandworm leveraged a private cellular APN to pivot from a wind farm into a Polish combined heat and power plant's OT network.
Aug 10, 2026Metabase Patches Critical Zero-Day SQL Injection Vulnerability
Metabase has released urgent patches for an unauthenticated SQL injection vulnerability exploited as a zero-day to gain administrative control.
Aug 10, 2026CISA Mandates Immediate Patch for Actively Exploited Progress LoadMaster RCE Flaw
CISA has added CVE-2026-8037, a critical root-level RCE vulnerability in Progress Kemp LoadMaster, to its Known Exploited Vulnerabilities catalog.
Aug 10, 2026CISA Warns of Actively Exploited Progress Kemp LoadMaster Flaw CVE-2026-8037
Active exploitation of a critical Progress Kemp LoadMaster command injection vulnerability (CVE-2026-8037) prompts urgent federal patching mandates.
Aug 10, 2026OpenAI Pauses Internal Astra Work Over Advanced Autonomous Cyber Capabilities
OpenAI has paused internal work on its upcoming Astra model after evaluations revealed potential Critical-level autonomous cyber capabilities.
Aug 10, 2026No news matches your search.