CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

September 3, 2026 at 10:49AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security f…

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

September 2, 2026 at 11:57PM Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cyberse…

Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

September 2, 2026 at 12:26PM The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-pe…

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

September 1, 2026 at 10:49PM Brazilian financial services, retail, and e-commerce organizations have become the target of a finan…

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

September 1, 2026 at 02:35PM METR (short for Model Evaluation and Threat Research and pronounced "Meter"), a research n…

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

September 1, 2026 at 12:52PM Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to n…

North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

August 31, 2026 at 10:54PM Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) hav…

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

August 31, 2026 at 05:01PM Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials avai…

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

August 31, 2026 at 02:34PM A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VM…

DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

August 31, 2026 at 01:26PM The U.S. Department of Justice (DoJ) on Friday corrected a previously issued press statement that seve…

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

August 30, 2026 at 01:06PM Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick user…

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

August 29, 2026 at 02:08AM Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was explo…

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

August 28, 2026 at 09:26PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security…

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

August 28, 2026 at 03:15PM cPanel has released patches for a security flaw affecting domain parking and addon domain functionalit…

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

August 28, 2026 at 01:50PM Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic or…

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

August 28, 2026 at 12:06AM OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (…

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

August 27, 2026 at 01:43PM Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 me…

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

August 27, 2026 at 12:35PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its K…

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

August 26, 2026 at 09:05PM Cybersecurity researchers have discovered additional infrastructure and previously undocumented malwar…

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

August 26, 2026 at 12:42PM An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEE…