Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
TP-Link Patches 15 Omada ZTP Vulnerabilities Allowing Network Takeover
TP-Link has fixed 15 zero-touch provisioning flaws in Omada network devices that enable remote code execution and network compromise when chained with…
Aug 4, 2026XCSSET Malware Targets macOS Developers via Poisoned Xcode Projects
A new variant of XCSSET malware infects macOS developers through compromised Xcode repositories, deploying Chrome hijackers and Telegram trojans.
Aug 4, 2026OpenAI Bans ChatGPT Accounts Linked to Cambodian Scam Compounds
OpenAI disrupted ChatGPT accounts used by Poipet-based Cambodian scam centers targeting Indian nationals with investment fraud and pig butchering schemes.
Aug 4, 202677 Open VSX Extensions Caught Exfiltrating Developer and CI Metadata
77 malicious "evil twin" extensions on Open VSX impersonated real tools to perform detailed reconnaissance on developer systems and CI pipelines.
Aug 4, 2026XCSSET Malware Resurfaces with v40 to Target macOS Developers via Xcode Projects
A new XCSSET malware variant targets macOS developers by poisoning Git-hosted Xcode projects, introducing Chrome CDP hijacking and Telegram trojanization.
Aug 4, 2026Black Hat USA 2026: AI Agents, Continuous SecOps, and Exposure Management Take Center…
Vendor announcements at Black Hat USA 2026 focus heavily on agentic AI governance, continuous risk evaluation, scanless exposure management, and cloud security.
Aug 4, 2026Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Hijack Accounts
The Greatness PhaaS platform now includes OAuth device code phishing capabilities, allowing attackers to bypass MFA and hijack corporate cloud accounts.
Aug 4, 2026Russian Businesses Purge Durov-Linked Media After Terrorist Label
Russia's terrorist designation of Telegram founder Pavel Durov triggers commercial purges across Russia while the app remains operational.
Aug 4, 2026CISO Conversation: Ping Identity's Russ Kirby on Leadership, Passion, and Pragmatism
Ping Identity CISO Russ Kirby shares insights on career progression, pragmatic incident response, and hiring enthusiastic security talent over certifications.
Aug 4, 2026Decades-Old IPMI Vulnerability Exposes Over 24,000 BMC Interfaces Online
A 20-year-old flaw in IPMI 2.0 (CVE-2013-4786) allows remote attackers to extract password hashes from internet-exposed server management interfaces.
Aug 4, 2026Google ADK Vulnerabilities Allowed Agent-to-Agent Prompt Injection and RCE
Security researchers discovered agent-to-agent prompt injection flaws in Google’s Agent Development Kit for Python, enabling remote code execution.
Aug 4, 2026Microsoft Bug Bounty Program Payouts Top $20 Million as AI Research Accelerates
Microsoft paid over $20 million to security researchers between July 2025 and June 2026, driven by AI-assisted vulnerability research and supply chain bounties.
Aug 4, 2026No news matches your search.