Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Russian Hackers Hijack Hotel Wi-Fi Networks to Steal Microsoft 365 Accounts
Microsoft links the CaptiveCrunch campaign targeting hotel Wi-Fi to Midnight Blizzard, using custom Go and PowerShell malware to compromise M365 accounts.
Aug 4, 2026New York Allocates $9M for Water Sector Security Following Multi-State OT Attacks
New York awards $9 million to 153 water and wastewater utilities after a coordinated campaign targeted internet-exposed PLCs across multiple states.
Aug 4, 2026Anthropic Claude Attacks Driven by System Over-Permissioning, Not Model Vulnerabilities
Anthropic reports recent security incidents involving Claude AI models were caused by over-permissioning and network access gaps rather than model flaws.
Aug 3, 2026N-able RMM Vulnerability Exploited to Grant Admin Privileges
Threat actors are actively exploiting a patch bypass flaw (CVE-2026-18577) in N-able RMM servers to gain unauthorized administrative access.
Aug 3, 2026Researchers Launch Tool to Trace AI-Generated Videos Back to Source
Security researchers have introduced a new detection tool aimed at tracing AI-generated video back to its source model and architecture.
Aug 3, 2026N-able RMM Servers Targeted via CVE-2026-18577 Authentication Bypass
Attackers are actively exploiting CVE-2026-18577, an authentication bypass flaw in N-able RMM servers, to gain administrative control.
Aug 3, 2026Fake Roblox Xeno Script Launcher Delivers Multi-Stage Java RAT and Infostealer
Threat actors are distributing a trojanized Roblox Xeno script executor that drops a Java-based RAT capable of webcam spying and credential theft.
Aug 3, 2026DOUBLECUP ClickFix Service Hides Malware in Browser Cache Steganography
The DOUBLECUP ClickFix service uses browser cache steganography to infect Windows and macOS systems with CountLoader and DeviceManager RAT.
Aug 3, 2026Google Password Manager Passkey Flaws Allow Silent Account Hijacking
Unit 42 research details three post-compromise attack paths against Chrome's Google Password Manager passkey authenticator on Windows TPM systems.
Aug 3, 2026Liechtenstein Beneficial Ownership Register Breach Exposes 31,000 Entities
A cyberattack on Liechtenstein's Register of Beneficial Owners compromised data tied to 31,000 entities, triggering a government crisis response.
Aug 3, 2026Inside the Splintered Underground Market of the BTMOB Android RAT
Research into the BTMOB Android RAT reveals how a centralized malware-as-a-service operation fragmented into competing source-code sales and resellers.
Aug 3, 2026ExfilSquad Extorts UK Police Database, Leaking 135,000 Officer Contact Records
A cyberattack on the UK Police National Legal Database exposed contact details for over 100,000 officers and staff, claimed by ExfilSquad.
Aug 3, 2026No news matches your search.