Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
China-Linked APT Group Exploits Roundcube Flaws in Cyberespionage Campaign
Proofpoint warns of UNK_MassTraction, a China-linked threat actor, actively exploiting multiple vulnerabilities in Roundcube email servers for cyberespionage…
Jul 15, 2026Microsoft July 2026 Patch Tuesday Addresses Critical Zero-Days and Information Leaks
Microsoft's latest Patch Tuesday delivers crucial security updates, including fixes for the actively exploited "RoguePlanet" flaw and a Windows Cryptographic…
Jul 15, 2026Critical Backdoor (CVE-2026-11405) Found in Multiple Tenda Router Models
An undocumented authentication backdoor (CVE-2026-11405) has been discovered in several Tenda router models, granting unauthorized administrative access.
Jul 14, 2026DHS Homeland Security Network Intrusion Dismissed Twice Before Confirmation
The U.S. Department of Homeland Security's Homeland Security Information Network (HSIN) was breached after personnel twice dismissed signs of intruders as…
Jul 14, 2026Nihon Kotsu Suffers Major Cyberattack, Disrupting Japan's Largest Taxi Operations
Japan's largest taxi and chauffeur operator, Nihon Kotsu, experienced a significant malware infection, leading to a shutdown of critical IT systems.
Jul 14, 2026JadePuffer: Autonomous LLM-Driven Ransomware Operation Exploits Langflow CVE
Researchers have profiled JadePuffer, an autonomous ransomware operation leveraging Large Language Models to conduct intrusions and exploit CVE-2025-3248 in…
Jul 14, 2026U.S. Treasury Sanctions 1VPNS and Individuals for Enabling Ransomware Attacks
The U.S. Treasury Department has sanctioned 1VPNS and two individuals for providing infrastructure and tools that enable ransomware operations against…
Jul 14, 2026New OAuth Client ID Spoofing Technique Exploited to Target Microsoft Entra User Data
Threat actors are employing a novel OAuth client ID spoofing technique to collect Microsoft Entra user data without triggering typical security alerts.
Jul 14, 2026CISA Adds Actively Exploited Cisco IOS CSRF Vulnerability to KEV Catalog
CISA has added an old Cisco IOS Cross-Site Request Forgery vulnerability (CVE-2008-4128) to its KEV catalog due to active exploitation.
Jul 14, 2026Inter-Con Security Systems Under Investigation Following ShinyHunters Data Breach Claim
Inter-Con Security Systems, a multinational private security company, is under investigation following claims by ShinyHunters of breaching 2.7 million records.
Jul 14, 2026Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation, Forg365, is actively targeting Microsoft 365 tenants with device code phishing and adversary-in-the-middle…
Jul 14, 2026NSA and Partners Warn of Russian State-Sponsored Router Targeting
NSA, CISA, and international partners issued a joint advisory detailing ongoing Russian FSB exploitation of poorly configured routers targeting critical…
Jul 14, 2026No news matches your search.