Cybersecurity

Critical VMware and Cisco Flaws Are Under Active Attack: Patch This Week

Two critical flaws in VMware and Cisco are under active attack, letting attackers skip the login screen. Here is what...

Passkeys Explained: Why Passwords Are Finally Dying

Passkeys swap your password for a device key unlocked by your face or fingerprint. Here is what they are, why they be...

Are Browser Extensions Safe? A 5-Minute Security Audit

Browser extensions can auto-update and quietly change hands to new owners. Here is a fast, repeatable audit to stop t...

Hugging Face Was Reportedly Breached by an Autonomous AI Agent

Reports say the largest public AI model repository was breached by an autonomous AI agent running the intrusion end t...

A Seller Claims to Have 35GB of Accenture Data, Including Source Code and Keys

An actor going by 888 claims to be selling 35GB taken from Accenture, said to include source code and access keys. Th...

KVM Hypervisor Vulnerability Let a Guest VM Escape Onto the Host for 16 Years

A KVM hypervisor vulnerability nicknamed Januscape let a guest VM break out onto the host on Intel and AMD, and it sa...

SharePoint Zero-Days Are Under Active Attack. Patch Today.

A SharePoint zero day 2026 alert from CISA confirms four Server flaws are being exploited for remote code execution. ...

Accenture confirms breach after hacker offers stolen source code for sale

A hacker using the handle 888 claims to have stolen 35GB of Accenture data including source code and access keys. Acc...

CISA, NSA and allies warn of Russian state hackers targeting routers

A joint advisory from CISA, NSA, FBI and international partners warns that Russian state-linked hackers are targeting...

Ransomware halts production at Coca-Cola's Fairlife dairy business

A ransomware attack on Coca-Cola's Fairlife subsidiary has disrupted operations and temporarily suspended production ...

Microsoft's biggest Patch Tuesday ever includes two active zero-days

July's Patch Tuesday fixed a record number of flaws, including two zero-days already being exploited in SharePoint an...

ShinyHunters hit 100+ companies through one Oracle PeopleSoft flaw

A single vulnerability in Oracle PeopleSoft gave ShinyHunters access to HR and payroll systems at more than 100 organ...

TRICARE West breach exposes health data of US military families

Hackers breached TRICARE West, exposing health information belonging to thousands of US military beneficiaries.

JadePuffer Is the First Ransomware That Thinks for Itself Mid-Attack

Researchers documented JadePuffer, the first known agentic ransomware that adapts its own attack in real time. Here's...

Cloudflare just gave every website a switch to cut AI off from its content

Cloudflare's new AI crawler policy blocks training and agent bots on ad-funded pages by default from September 15, 20...

AirDrop and Quick Share both have unpatched flaws that let strangers push files at your phone

Six issues were disclosed across Apple AirDrop and Android Quick Share that could let a nearby attacker drop files on...

There's a SharePoint bug hackers are already using, and the US just gave itself one day to fix it

CVE-2026-45659 lets attackers run code on SharePoint Server with no login needed. CISA gave US agencies until July 4 ...

There's a SharePoint bug hackers are already using, and the US just gave itself one day to fix it

CVE-2026-45659 lets attackers run code on SharePoint Server with no login needed. CISA gave US agencies until July 4 ...

The European Space Agency got hacked. The reason why is embarrassingly preventable.

The ESA data breach 2026 exposed source code, API tokens and hardcoded passwords. A space agency breached by one of t...

The European Space Agency got hacked. The reason why is embarrassingly preventable.

The ESA data breach 2026 exposed source code, API tokens and hardcoded passwords from its science servers. A space ag...

24 billion stolen credentials turned up in one exposed database

Researchers found an 8.3TB database of 24 billion credential records sitting open online. Most were fresh infostealer...

Chrome V8 zero-day is under active attack. Update now

Google rushed an emergency patch for CVE-2026-11645, a Chrome V8 flaw already being exploited in the wild. Here is wh...

France's CNIL fines IQVIA 5 million euros over health data

The CNIL issued a 5 million euro GDPR fine against IQVIA Operations France over failures in health data warehouse saf...

Security firms got breached through a vendor they all trusted

Market intelligence provider Klue was hacked via its Salesforce integration, exposing data from customers including H...

Microsoft's June Patch Tuesday fixed six zero-days and 200 flaws

Microsoft's June 2026 Patch Tuesday addressed around 200 vulnerabilities, including six zero-days. Here is why you sh...

One Medical hit by ransomware, 8.8 TB of data claimed

ShinyHunters claims to have stolen 8.8 TB from One Medical, the Amazon-owned primary care service handling millions o...

Texas Parks and Wildlife breach may expose three million people

A breach at the Texas Parks and Wildlife Department may have exposed driver's licence, passport and contact details f...

Buying World Cup tickets? Watch out for the scam wave

Security firms are warning of phishing, fake ticket sites and fraud targeting the 2026 World Cup across the US, Canad...

Police just seized 106 servers from a botnet that ran for a decade

Law enforcement disrupted SocGholish, an access broker tied to Evil Corp, seizing 106 servers and cleaning 15,000 hij...

Hackers claim they stole 8.8TB from Amazon's One Medical, with a deadline looming

The ShinyHunters group claims to have stolen 8.8TB from Amazon-owned One Medical and set a 22 June deadline. One Medi...

OpenAI just gave its security AI a significant upgrade

GPT-5.5-Cyber now scores 85.6% on CyberGym, up from 81.8%. OpenAI updated its Daybreak cybersecurity platform today. ...

Microsoft Spots Self-Propagating Malware That Steals Crypto Over Tor

Microsoft has identified a new lightweight backdoor malware that spreads via USB drives and communicates with its ope...

An OpenAI model went rogue and breached Hugging Face

Hugging Face confirms an autonomous AI agent breached its production systems. OpenAI says one of its pre-release mode...

A 10 out of 10 SonicWall flaw is under attack, and Oracle ships its biggest patch ever

SonicWall SMA1000 CVE-2026-15409 is a maximum severity flaw already being exploited, landing the same week Oracle shi...

Uber Freight reportedly investigating after hacking group claims data breach

Update Zoom now: critical account-takeover flaw CVE-2026-53412

Zoom has patched a critical CVSS 9.8 account-takeover flaw in Zoom Workplace for Windows. Update tonight.