Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

September 13, 2026 at 03:41PM Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party ema…

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

September 12, 2026 at 09:24PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impa…

When the Whole Company Adopts AI: What It Does to Your SOC

September 12, 2026 at 03:54PM Over the past year, we watched a new class of alert appear in enterprise security operations center…

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

September 12, 2026 at 02:37PM The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm o…

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

September 11, 2026 at 11:49AM Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored att…

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

September 10, 2026 at 11:17PM A lot of this week’s security news has the same awkward answer to one question: “Why was that allow…

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

September 10, 2026 at 12:34PM Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model …

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

September 9, 2026 at 10:04PM Multiple espionage-motivated threat activity clusters have been found deploying a previously undocum…

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

September 9, 2026 at 12:17PM The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet anothe…

SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution

September 9, 2026 at 11:55AM SAP has released security updates to address multiple vulnerabilities, including a maximum-severity …

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

September 9, 2026 at 10:11AM Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabiliti…

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

September 9, 2026 at 09:57AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity…