Latest from todayOracle’s new database security tool is free — for six monthsThe company is looking to address security threats posed by AI models.By Maxwell CooterAug 14, 20261 minSecuritySecurity Software Akira ransomware reboots into Windows Safe Mode to knock EDR offlineBy Shweta SharmaAug 14, 20264 minsCybercrimeMalwareRansomware 5 key takeaways from Black Hat USA 2026By John LeydenAug 13, 20265 minsBlack HatEventsVulnerabilitiesAttackers target zero-day vulnerability in geospatial data platform GeoServerBy Lucian Constantin Aug 13, 20262 minsSecurityVulnerabilitiesZero-Day Vulnerabilities AI agents wage near-autonomous cyberattack on Asian government networksBy Gyana Swain Aug 13, 20265 minsArtificial IntelligenceCyberattacksCybercrime Trump administration opens door to private-sector cyber offensivesBy Prasanth Aby Thomas Aug 13, 20264 minsCybercrimeGovernmentLaws and Regulations It took $58 to break Microsoft’s SCCM, but a patch made it harderBy Shweta Sharma Aug 13, 20264 minsSecurityVulnerabilities Microsoft wants you to rethink your approach to cyber defenseBy John Leyden Aug 13, 20267 minsSecuritySecurity PracticesThreat and Vulnerability Management Researcher bypasses Microsoft Defender security patch, seizing controlBy Evan Schuman Aug 12, 20266 minsCybercrimeHackingVulnerabilities From credentials to cloud admin in 8 minutes: AI supercharges AWS attack chain AI-assisted attackers weaponized exposed credentials and permissive roles to move from initial access to full AWS admin control in minutes. By Shweta Sharma Feb 3, 2026 5 mins Artificial Intelligence Cloud Security Security Notepad++ infrastructure hijacked by Chinese APT in sophisticated supply chain attack The hosting provider’s compromise allowed attackers to deliver malware through tainted software updates for six months. By Gyana Swain Feb 3, 2026 5 mins Cybercrime Malware Security New phishing attack leverages PDFs and Dropbox Forcepoint researchers describe a layered attack chain that slips past filters by mimicking everyday business behavior. By Taryn Plumb Feb 2, 2026 6 mins Cybercrime Phishing Social Engineering This stealthy Windows RAT holds live conversations with its operators The modular Windows RAT uses in-memory execution and live operator control to maintain persistence and exfiltrate sensitive data. By Shweta Sharma Feb 2, 2026 3 mins Cybercrime Malware Security Ivanti patches two actively exploited critical vulnerabilities in EPMM The code injection flaws allow for unauthenticated remote code execution on Ivanti Endpoint Manager Mobile deployments, but also endanger connected Ivanti Sentry mobile traffic gateways. By Lucian Constantin Jan 30, 2026 4 mins Network Security Security Vulnerabilities Startup Amutable plotting Linux security overhaul to counter hacking threats As attacks on the operating system grow more serious, the company is teasing a plan to bring “verifiable integrity” to Linux. By John E. Dunn Jan 30, 2026 5 mins Cybercrime Hacking Security Hugging Face infra abused to spread Android RAT in a large-scale malware campaign A fake security app called TrustBastion is being used to drop remote‑access malware hosted on Hugging Face, with attackers generating thousands of Android package variants to evade detection, Bitdefender researchers warn. By Shweta Sharma Jan 30, 2026 4 mins Endpoint Protection Malware Mobile Security Roughly half of employees are using unsanctioned AI tools, and enterprise leaders are major culprits BlackFog research reveals widespread shadow AI use and a startling level of risk tolerance among senior leaders, even as employees upload proprietary data into free AI tools. By Taryn Plumb Jan 29, 2026 6 mins Artificial Intelligence Data and Information Security Generative AI ShinyHunters ramp up new vishing campaign with 100s in crosshairs The group has released stolen data from Match.com, Bumble, and Panera Bread as part of what appears to be a SLSH campaign against high-value corporate targets. By Lucian Constantin Jan 29, 2026 5 mins Access Control Cyberattacks Social Engineering Critical RCE bugs expose the n8n automation platform to host‑level compromise A JavaScript sandbox bug rated CVSS 9.9 enables attackers to bypass AST‑based protections, while a Python execution bypass affects internal‑mode deployments common in enterprise setups. By Shweta Sharma Jan 29, 2026 3 mins Security Vulnerabilities CISA chief uploaded sensitive government files to public ChatGPT Madhu Gottumukkala uploaded multiple “for official use only” contracting documents to OpenAI’s public platform, bypassing DHS-approved AI tools and triggering automated cyber alerts. By Gyana Swain Jan 29, 2026 5 mins Data Privacy Generative AI Privacy EU’s answer to CVE solves dependency issue, adds fragmentation risks Integration with common vulnerability management tools is needed for GCVE.eu to reach its full potential — and not introduce additional friction and confusion into CISOs’ remediation strategies. By John Leyden Jan 29, 2026 7 mins Security Threat and Vulnerability Management Reports of GDPR violations have risen sharply Every day, 443 reports of violations of the Data Protection Act are received. By Manfred Bremmer Jan 29, 2026 2 mins Compliance Data Breach Laws and Regulations NIST’s AI guidance pushes cybersecurity boundaries Emerging NIST guidance suggests that the long-standing practice of treating AI as “just software” for cybersecurity purposes is giving way to more novel approaches to managing AI risks. By Cynthia Brumfield Jan 29, 2026 9 mins Artificial Intelligence IT Governance Frameworks Risk Management SolarWinds, again: Critical RCE bugs reopen old wounds for enterprise security teams Another round of critical Web Help Desk flaws highlights how SolarWinds’ legacy code and past breaches continue to haunt IT and security leaders. By Taryn Plumb Jan 28, 2026 6 mins Security Vulnerabilities Crooks are hijacking and reselling AI infrastructure: Report Researchers at Pillar Security say threat actors are accessing unprotected LLMs and MCP endpoints for profit. Here’s how CSOs can lower the risk. By Howard Solomon Jan 28, 2026 7 mins Artificial Intelligence Cybercrime Vulnerabilities Critical bug in popular vm2 Node.js sandboxing library puts projects at risk Sandbox escape vulnerability in vm2, used by nearly 900 NPM packages, allows attackers to bypass security protections and execute arbitrary code. By Lucian Constantin Jan 28, 2026 3 mins Node.js Security Vulnerabilities Palo Alto unveils Quantum-Safe Security to mitigate cryptographic risk By providing real-time cryptographic visibility and analysis, the solution aims to facilitate quantum-safe remediation of IT systems in advance of ‘Q-day.’ By Víctor Manuel Fernández Jan 28, 2026 3 mins Data and Information Security Encryption Network Security Critical FortiCloud SSO zero‑day forces emergency service disablement at Fortinet CISA added the flaw to its KEVs catalog as Fortinet warned that patches for most affected versions remain “upcoming,” even though vulnerable devices can no longer use cloud SSO until upgraded. By Gyana Swain Jan 28, 2026 4 mins Security Vulnerabilities Sicarii ransomware locks your data and throws away the keys A key-handling defect in the ransomware can permanently lock files by discarding private encryption keys, leaving affected organizations unable to recover data even if a ransom is paid. By Shweta Sharma Jan 28, 2026 4 mins Cybercrime Malware Ransomware Always-on privileged access is pervasive — and fraught with risks 91% of users log in at their highest level of privilege, which cyber experts see as a symptom of lax IT governance, laziness, and increasingly complex IT environments — and the harbinger of a PAM paradigm shift as NHIs rise. By Evan Schuman Jan 28, 2026 7 mins Identity and Access Management Risk Management Security AI-powered polymorphic attack lures victims to phishing webpages A new breed of malware uses various dynamic techniques to avoid detection and create customized phishing webpages. By David Strom Jan 27, 2026 4 mins Cybercrime Phishing Social Engineering Fixes released for a serious Microsoft Office zero-day flaw The fixes for Office 2021 are automatic, but for Office 2016 and Office 2019, they must be applied manually. By Howard Solomon Jan 27, 2026 3 mins Security Vulnerabilities Zero-Day Vulnerabilities CISA releases technology readiness list for post-quantum cryptography CISA has released a category-level inventory of hardware, software, and cryptography standards tied to post-quantum cryptography (PQC). By Shweta Sharma Jan 27, 2026 3 mins Data and Information Security Encryption Security AI overload to accelerate zero-trust data governance adoption According to research firm Gartner, companies will be forced to do so due to the proliferation of unverified AI-generated data. By Víctor Manuel Fernández Jan 27, 2026 2 mins Data and Information Security Security Zero Trust Unplugged holes in the npm and yarn package managers could let attackers bypass defenses against Shai-Hulud A researcher at Koi Security says the two key platforms have not plugged the vulnerabilities enabling the worm attacks, and ‘the JavaScript ecosystem deserves better.’ By Howard Solomon Jan 26, 2026 4 mins Development Tools GitHub JavaScript Microsoft handed over BitLocker keys to law enforcement, raising enterprise data control concerns The disclosure underscores how recovery keys stored in Microsoft’s cloud can be accessed under warrant, even when enterprise data is encrypted. By Nidhi Singal Jan 26, 2026 6 mins Encryption Government Laws and Regulations Microsoft releases second out-of-band fix for Windows in a week January’s Patch Tuesday updates caused several serious issues, calling Microsoft’s quality control into question. By Maxwell Cooter Jan 26, 2026 2 mins Communications Security Email Security Windows Security Fortinet confirms new zero-day attacks against customer devices All SAML SSO implementations, including FortiCloud SSO, are vulnerable to authentication bypass and malicious configuration changes from attacks on an unpatched flaw. By Lucian Constantin Jan 23, 2026 3 mins Network Security Vulnerabilities Zero-Day Vulnerabilities Ransomware gang’s slip-up led to data recovery for 12 US firms The discovery of artifacts from backup software used by the INC gang helped get encrypted data back. By Howard Solomon Jan 22, 2026 6 mins Cybercrime Malware Ransomware Trivial Telnet authentication bypass exposes devices to complete takeover The 11-year-old vulnerability likely impacts many devices that are no longer supported — and presents easy exploit even for those that are. By Lucian Constantin Jan 22, 2026 3 mins Security Vulnerabilities Spanish e-retailer PcComponentes denies report it was hacked The e-commerce company claims to have no evidence of a security breach in its systems, but it has detected that a third party may have used email addresses and passwords obtained from leaks elsewhere. By Víctor Manuel Fernández Jan 22, 2026 3 mins Cyberattacks Cybercrime Data Breach Actively exploited Cisco UC bug requires immediate, version‑specific patching The RCE flaw lets remote attackers gain root on affected systems with no user interaction. Cisco has released multiple version‑specific patch files — but offers no fix for 12.5 — as CISA warns the bug poses a significant risk to enterprise networks. By Gyana Swain Jan 22, 2026 4 mins Security Vulnerabilities VoidLink malware was almost entirely made by AI Check Point Research says the Linux malware framework was authored largely through AI-driven processes, lowering the barrier to producing complex threats. By Shweta Sharma Jan 22, 2026 4 mins Artificial Intelligence Cybercrime Malware GitLab 2FA login protection bypass lets attackers take over accounts The platform warns users of on-premises versions to upgrade to the latest versions; SaaS and web versions have been patched. By Howard Solomon Jan 21, 2026 6 mins Access Control GitLab Multifactor Authentication Misconfigured demo environments are turning into cloud backdoors to the enterprise Exposed lab and demo environments are leaking cloud credentials, IAM privileges, and sensitive data. By Taryn Plumb Jan 21, 2026 6 mins Cloud Security Security Vulnerabilities Ingram Micro admits 42,000 people impacted by ransomware attack Hit by a serious cyberattack last year, the IT distributor has now quantified the extent of the damage. By Julia Mutzbauer Jan 21, 2026 1 min Cyberattacks Data Breach Ransomware Oracle releases 337 security patches, including fix for critical Apache Tika flaw There are no zero days this quarter, but there’s still plenty of work for patching teams. By John E. Dunn Jan 21, 2026 4 mins Business Enterprise Threat and Vulnerability Management EU reviews cybersecurity to limit danger from high-risk suppliers A new legislative package aims to reduce risks to sensitive parts of the EU’s IT ecosystem. By Viktor Eriksson Jan 21, 2026 2 mins Government Laws and Regulations Markets Contagious Interview turns VS Code into an attack vector Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist malicious code. By Shweta Sharma Jan 21, 2026 3 mins Development Tools Security Social Engineering Three vulnerabilities in Anthropic Git MCP Server could let attackers tamper with LLMs Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told. By Howard Solomon Jan 20, 2026 6 mins Artificial Intelligence Security Vulnerabilities Flaws in Chainlit AI dev framework expose servers to compromise Security researchers uncovered two vulnerabilities in the popular Python-based AI app building tool that could allow attackers to extract credentials and files — and gain a lateral edge. By Lucian Constantin Jan 20, 2026 4 mins Artificial Intelligence Python Vulnerabilities CrashFix attack hijacks browser failures to deliver ModelRAT malware via fake Chrome extension A malicious extension impersonating an ad blocker forces repeated browser crashes before pushing victims to run attacker‑supplied commands, ultimately deploying a new Python‑based RAT. By Shweta Sharma Jan 20, 2026 3 mins Browser Security Endpoint Protection Vulnerabilities Google Gemini flaw exposes new AI prompt injection risks for enterprises A calendar-based prompt injection technique exposes how generative AI systems can be manipulated through trusted enterprise data. By Prasanth Aby Thomas Jan 20, 2026 5 mins Artificial Intelligence Security Vulnerabilities EU vulnerability database goes live The GCVE initiative has given the green light for its vulnerability database with a decentralized approach. By Julia Mutzbauer Jan 20, 2026 2 mins Security Vulnerabilities This Intune update isn’t optional — it’s a kill switch for outdated apps Microsoft is enforcing stricter Intune MAM security requirements, and enterprises that haven’t updated their iOS and Android apps will see them blocked from launching. By Taryn Plumb Jan 19, 2026 6 mins Endpoint Protection Mobile Security Security Mandiant pushes organizations to dump insecure NTLMv1 by releasing a way to crack it Tough love campaign is the latest attempt to kill a zombie Microsoft protocol that won’t die. By John E. Dunn Jan 19, 2026 4 mins Access Control Authentication Windows Security Five Chrome extensions caught hijacking enterprise sessions Malicious Chrome extensions posing as productivity tools were found stealing session tokens, blocking security controls, and enabling account takeover across popular enterprise HR and ERP platforms. By Shweta Sharma Jan 19, 2026 4 mins Browser Security Endpoint Protection Security ServiceNow BodySnatcher flaw highlights risks of rushed AI integrations A vulnerability that impacts Now Assist AI Agents and Virtual Agent API applications could be exploited to create backdoor accounts with admin roles. By Lucian Constantin Jan 19, 2026 8 mins Application Security Technology Industry Vulnerabilities Cisco finally patches seven-week-old zero-day flaw in Secure Email Gateway products Chinese hackers are behind attacks on AsyncOS Software that allow complete takeover of the appliance, the company says. By John E. Dunn Jan 16, 2026 4 mins Communications Security Email Security Network Security 1…101112131415161718…433 Show me morePopularArticlesPodcastsVideos news analysis EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage By John LeydenOct 2, 20266 mins Laws and RegulationsTechnology IndustryThreat and Vulnerability Management news Google makes Gemini 4 AI model available to a trusted few By Nidhi SingalOct 1, 20265 mins Artificial IntelligenceSecurity news Cisco SD-WAN Manager hit by zero-day admin access attack By Shweta SharmaOct 1, 20264 mins Network SecurityVulnerabilitiesZero-Day Vulnerabilities podcast Why Email Still Works for Attackers By Joan GoodchildSep 30, 20266 mins Email Security podcast The Evolving CISO: AI, Leadership and the Future of Cybersecurity By Joan GoodchildSep 24, 20266 mins CSO and CISO podcast Why Security Debt May Be a Bigger Risk Than Security Spend By Joan GoodchildSep 10, 202616 mins Cybercrime video Why Email Still Works for Attackers By Joan GoodchildSep 30, 20266 mins Email Security video The Evolving CISO: AI, Leadership and the Future of Cybersecurity By Joan GoodchildSep 24, 20266 mins CSO and CISO video Why Security Debt May Be a Bigger Risk Than Security Spend By Joan GoodchildSep 10, 202616 mins Cyberattacks
