Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
292 stories published
Hacked Public Wi-Fi Gateways Exploited to Steal Corporate M365 Credentials
Threat actors are compromising public Wi-Fi gateway appliances to target traveling corporate personnel and steal Microsoft 365 credentials.
Jul 27, 2026TELESHIM Malware Abuses Telegram C2 in Middle East Government Attacks
Cyber-espionage actors linked to East Asia are targeting Middle Eastern government organizations using TELESHIM and custom malware controlled via Telegram.
Jul 27, 2026GitHub and PyPI Add Time-Based Defenses Against Supply Chain Attacks
GitHub Dependabot and PyPI introduce delayed update features to prevent automated pipelines from pulling newly published malicious package versions.
Jul 26, 2026Steam Forum ClickFix Attacks Infect Gamers With XMRig Cryptominers
Attackers are abusing Steam discussion forums with ClickFix social engineering tricks, prompting gamers to execute PowerShell commands that drop XMRig.
Jul 25, 2026ShinyHunters Data Breach Leaks Fuel $2,000 Sextortion Bitcoin Scam
Extortionists are using email addresses exposed in historical ShinyHunters data breaches to send personalized sextortion emails demanding $2,000 in Bitcoin.
Jul 25, 2026Malvertising Campaign Assembles Malware in Browser Memory via JavaScript
A malvertising campaign uses JavaScript on spoofed crypto and trading sites to assemble malware directly inside browser memory to bypass security filters.
Jul 25, 2026Unpatched Fastjson 1.x RCE Vulnerability Under Active Attack
Attackers are actively exploiting an unpatched remote code execution flaw in Fastjson 1.x (CVE-2026-16723) targeting Java Spring Boot deployments.
Jul 25, 2026Rockwell Patches Code Execution Flaws in Arena Simulation Software
Rockwell Automation issued fixes for code execution vulnerabilities in its Arena simulation suite used across industrial environments.
Jul 25, 2026Exploit Released for Unpatched GitLab RCE via Jupyter Notebook Diffs
A newly published PoC exploit allows low-privileged authenticated users to achieve Remote Code Execution as the git user on self-managed GitLab servers.
Jul 25, 2026OnTrac Parcel Delivery Discloses Customer Data Breach Following Network Hack
Regional parcel carrier OnTrac is notifying customers after an unauthorized network intrusion exposed personal delivery details.
Jul 24, 2026Hermes AI Agent Used to Automate Attack on Thai Ministry of Finance
Threat actors deployed the open-source Hermes AI agent in unattended mode to conduct automated post-exploitation activities against Thailand's Ministry of…
Jul 24, 2026BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Prior to Malware Delivery
North Korean threat actor BlueNoroff is using fake Zoom and Teams platforms to profile victim crypto wallets before dropping malware payloads.
Jul 24, 2026No news matches your search.