- 100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
- Ninja Forms plugin flaw exploited to hack WordPress sites
- ClickFix Attacks Evolve to Better Hide Malicious Payloads
- Critical Healthcare Systems Aren't Quantum-Ready
- Hackers exploit 32 zero-days on first day of Pwn2Own Ireland
- Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
- Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
- Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps
- Atlassian warns of critical file-access flaw in Jira, Confluence
- IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams
- 'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
- ASOS confirms data breach after “HACKED” in-app notifications
- Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
- How to secure RMM software: 8 controls MSPs should test
- LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
- Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
- Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
- Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
- Nikkei discloses breaches of employees’ Microsoft, Google email accounts
- Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
- Engineer sentenced for locking over 3,000 devices on employer network
- Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
- FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
- Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
- ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
- OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU
- ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes
- Rejetto HFS servers now actively scanned for critical RCE flaw
- IQVIA fined $7.8 million for failing to properly anonymize health data
- Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
- Chinese Hackers Impersonate US Officials for AI Cyber Espionage
- Denmark population registry data breach affects 8.8 million people
- New Dell System Update flaw lets hackers gain root privileges
- South Korea probes bank breaches amid suspected AI-powered attacks
- ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
- tenfold CE: Our free Identity Governance tool just got 2 new features
- Alleged dev of Ploutus ATM malware appears in US court after arrest
- Need for Speed: AI-Driven Attacks Are Changing Security Strategies
- The Credential Layer Is Expanding Faster Than Security Teams Can See It
- Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
