FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

October 9, 2026 at 11:15PM The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on…

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

October 9, 2026 at 01:41PM Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScal…

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

October 9, 2026 at 12:09PM The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disr…

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

October 8, 2026 at 11:28PM The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for …

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

October 8, 2026 at 11:16AM The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tenso…

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

October 7, 2026 at 09:47PM SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remot…

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

October 7, 2026 at 01:37PM Anthropic on Tuesday said it's expanding a program that allows vetted cybersecurity professionals …

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

October 6, 2026 at 11:54PM Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguisin…

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

October 6, 2026 at 12:26PM The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged r…

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

October 6, 2026 at 10:52AM A new type of ClickFix attack is using compromised websites to trick users into executing a malicious …

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

October 5, 2026 at 05:16PM Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting …

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

October 5, 2026 at 04:08PM Apple has announced that it's taking steps to tighten controls around a macOS setting called Full …