Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

October 14, 2026 at 10:39PM Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of pr…

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

October 13, 2026 at 10:58PM A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a…

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

October 13, 2026 at 02:13PM GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE)…

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

October 13, 2026 at 11:30AM Low-cost Android smartphones have been shipped with malicious software baked into the device firmware…

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

October 12, 2026 at 04:51PM Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via Cryptobilis fol…

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

October 12, 2026 at 04:06PM Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall …

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

October 12, 2026 at 02:32PM A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active…

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

October 12, 2026 at 12:56PM Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmen…

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

October 10, 2026 at 04:30PM In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party produc…

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

October 10, 2026 at 02:48PM Anthropic on Friday said it's cutting off live internet access for all its internal evaluations f…

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

October 10, 2026 at 12:44AM Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has com…

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

October 9, 2026 at 11:15PM The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on…