Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

October 12, 2026 at 04:51PM Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via Cryptobilis fol…

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

October 12, 2026 at 04:06PM Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall …

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

October 12, 2026 at 02:32PM A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active…

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

October 12, 2026 at 12:56PM Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmen…

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

October 10, 2026 at 04:30PM In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party produc…

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

October 10, 2026 at 02:48PM Anthropic on Friday said it's cutting off live internet access for all its internal evaluations f…

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

October 10, 2026 at 12:44AM Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has com…

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

October 9, 2026 at 11:15PM The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on…

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

October 9, 2026 at 01:41PM Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScal…

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

October 9, 2026 at 12:09PM The U.S. Federal Bureau of Investigation (FBI) and Department of Justice (DoJ) have announced the disr…

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

October 8, 2026 at 11:28PM The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for …

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

October 8, 2026 at 11:16AM The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tenso…