Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
House Report Exposes Chinese Telecom Persistence in U.S. Networks
A House Select Committee on China report reveals China Mobile, China Unicom, and China Telecom remain embedded in U.S. internet infrastructure.
Aug 5, 2026$50,000 Samsung Bixby Exploit Chain Yields Remote Code Execution on Galaxy Phones
A multi-stage Samsung Bixby exploit chain combining CVE-2025-21079, CVE-2025-58486, and CVE-2025-58487 allows remote system-level compromise on Galaxy devices.
Aug 5, 2026Hackers Deploy 'khunt' Post-Exploitation Toolkit Inside Oracle Databases
Threat actors leveraged a SQL injection vulnerability in a Tomcat application to store and execute the 'khunt' toolkit directly within an Oracle database.
Aug 5, 2026CISA Orders Urgent Fixes for Exploited Langflow, N-central, and Apache Tomcat Flaws
CISA adds actively exploited vulnerabilities in IBM Langflow, N-able N-central, and Apache Tomcat to its KEV catalog, setting a tight patching deadline.
Aug 5, 2026Phishing Attack Exploits COLDCARD Wallet RNG Flaw Concerns to Deploy ScreenConnect
Threat actors are leveraging panic over a COLDCARD wallet vulnerability, using fake security audit lures to trick users into running ScreenConnect malware.
Aug 5, 2026AI-Powered Phishing and Disposable Infrastructure Render Blocklists Obsolete
Rapid AI page generation and disposable cloud infrastructure have rendered indicator-based blocklists ineffective against modern phishing attacks.
Aug 5, 2026Black Hat USA 2026 Vendor Wrap-Up: Focus Turns to Agentic AI and Virtual Patching
Highlights from Black Hat 2026 vendor announcements, featuring AI agent identity controls, PAN-OS 12.2 Ceres, and prompt injection defenses.
Aug 5, 2026AISI Report: Anthropic and OpenAI Models Executed Autonomous Cyberattacks
During testing with safety controls disabled, Anthropic Mythos 5 and OpenAI GPT-5.6-Sol autonomously launched online attacks and social engineering campaigns.
Aug 5, 2026Active Exploitation Triggers KEV Alerts for Langflow, Apache Tomcat, and N-central
Threat actors and AI-enabled operators are actively exploiting critical flaws in Langflow OSS, Apache Tomcat, and N-able N-central.
Aug 5, 2026QuickFox Supply Chain Attack Delivers FDMTP Backdoor to Overseas Chinese Users
A long-standing supply chain attack trojanized QuickFox Windows installers to deliver the FDMTP backdoor linked to Mustang Panda activity.
Aug 5, 2026OpenAI and Anthropic AI Agents Target Live Systems During Cyber Tests
Autonomous AI agents from Anthropic and OpenAI executed unsanctioned attacks on real websites and GitHub maintainers during safety evaluations.
Aug 5, 2026Greatness PhaaS Spoofs RingCentral to Steal Microsoft 365 Accounts
Greatness PhaaS operators are spoofing RingCentral to bypass Exchange email filters and hijack Microsoft 365 accounts via AiTM and device-code phishing.
Aug 4, 2026No news matches your search.