March 2026
141 posts. Browse all months
- Rogers and Fido Confirm Data Breach Affecting Customer Information | iPhone in Canada
Rogers and Fido have confirmed a data breach that resulted in unauthorized access to customer information, including names, contact details, and account …
- APT Iran hackers steal over 375TB of data from Lockheed Martine - Cybersecurity Insiders
Hackers, identified as APT Iran, have reportedly stolen over 375TB of data from Lockheed Martin, a major US defense and aerospace firm. The attackers are …
- GitHub - backbay-labs/thrunt-god: Threat hunting command system for agentic IDEs · GitHub
The thrunt-god GitHub repository introduces a threat hunting command system designed for agentic IDEs, facilitating a five-phase process: Signal, Hunt, Swarm, …
- Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government
Unit 42 researchers have uncovered a cyberespionage campaign targeting a Southeast Asian government, involving three distinct threat clusters: Stately Taurus, …
- Wikipedia cracks down on contributors using AI to generate content - SiliconANGLE
Wikipedia has updated its policies to prohibit contributors from using AI to generate or rewrite content, citing concerns about verifiable sources and core …
- Breach Roundup: Tycoon2FA Phishing Platform Rebounds
The Tycoon2FA phishing platform has quickly resumed operations after a law enforcement takedown, while Trio-Tech International faces a material breach after …
- Google, Cohere launch new audio AI models - SiliconANGLE
Google and Cohere have launched new AI models for audio processing. Google’s Gemini 3.1 Flash Live can automate customer service and understand multimodal …
- Hackers threaten Mark Cuban-backed firm with major data leak | Cybernews
The ShinyHunters group has threatened to release several terabytes of data stolen from ZenBusiness, an online LLC formation platform, unless a ransom is paid. …
- Ajax suffers major own goal as data breach hits personal info of 300,000 fans | TechRadar
Ajax football club experienced a significant data breach affecting the personal information of 300,000 fans, exposed through a vulnerability in their app. An …
- Cyber Serp Hack Breaches Ukraine State Encryption System
The hacking group Cyber Serp claims to have breached Ukraine’s state encryption system, allegedly accessing encryption keys, source code, and digital signature …
- 11 million students possibly at risk after classroom software used by millions hacked | TechRadar
The student information system Infinite Campus was hacked by the ShinyHunters group, resulting in the theft of names and staff contact information of school …
- Russian authorities arrest alleged LeakBase admin behind stolen data marketplace
Russian authorities have arrested a Taganrog resident suspected of administering LeakBase, a major stolen data marketplace operating since 2021. This arrest is …
- TP-Link, Canva, HikVision vulnerabilities
Cisco Talos has disclosed 19 vulnerabilities in Canva Affinity related to EMF file processing, 10 vulnerabilities in TP-Link routers including buffer overflows …
- CISA: New Langflow flaw actively exploited to hijack AI workflows
The Cybersecurity and Infrastructure Security Agency (CISA) is warning of active exploitation of a critical vulnerability (CVE-2026-33017) in the Langflow …
- Why Vector Databases Put Enterprise AI Data at Risk
The article “Why Vector Databases Put Enterprise AI Data at Risk” highlights that vector databases, while consolidating enterprise AI data, create a …
- China’s DJI sues rival Insta360 for alleged patent infringement ahead of new drone launch | South China Morning Post
Chinese drone giant DJI has sued its rival Insta360 for alleged patent infringement, claiming some patents involve inventions by former employees. Insta360 …
- The Air Apparent: Apple’s Custom Silicon Comes of Age | Ookla®
The iPhone Air with its new C1X modem achieves download parity with Qualcomm’s X80 and excels in latency, positioning Apple’s custom silicon as a competitive …
- OpenAI plans desktop ‘superapp’ to streamline user experience | Reuters
OpenAI is planning a desktop “superapp” that will combine its ChatGPT app, coding platform Codex, and browser to simplify user experience and streamline …
- Mazda discloses security breach exposing employee and partner data
Mazda disclosed a security breach that exposed data for employees and business partners, stemming from unauthorized access to a warehouse management system for …
- New CanisterWorm Targets Kubernetes Clusters, Deploys “Kamikaze” Wiper
The CanisterWorm malware campaign targets Kubernetes clusters by spreading through npm supply chain attacks and hijacking developer accounts. It deploys a …
- US regulator bans imports of new foreign-made routers, citing security concerns | Reuters
The U.S. Federal Communications Commission (FCC) has banned the import of new foreign-made consumer routers due to security concerns, citing risks to U.S. …
- OpenAI rolls out ChatGPT Library to store your personal files
OpenAI has launched a new ChatGPT Library feature for Plus, Pro, and Business users, allowing them to store personal files and images in a secure cloud …
- Meta acqui-hires the co-founders of agentic AI startup Dreamer - SiliconANGLE
Meta Platforms Inc. has acqui-hired the co-founders and personnel of the agentic AI startup Dreamer for an undisclosed sum. The Dreamer team will join Meta’s …
- DOE Sets 5-Year Plan to Harden US Grid Against Cyberattacks
The U.S. Department of Energy has unveiled a five-year strategic plan to enhance the cybersecurity and resilience of the nation’s energy infrastructure, …
- Zero Trust Anchors AI Security Strategy - GovInfoSecurity
Jay Chaudhry, founder and CEO of Zscaler, emphasizes that Artificial Intelligence security requires a purpose-built infrastructure with zero trust principles …
- Sony anime streamer Crunchyroll was breached | Cybernews
Cybernews reports that Sony-owned anime streamer Crunchyroll was allegedly breached through Telus, a third-party outsourcing provider, after a Telus employee …
- This Massive Data Breach Leaked 2.7 Million Social Security Numbers | Lifehacker
A massive data breach at Navia Benefit Solutions, a benefits administrator, has compromised the Social Security Numbers and other sensitive personal …
- Hacker Group LAPSUS$ Claims Alleged AstraZeneca Data Breach
The hacker group LAPSUS$ claims to have breached AstraZeneca, offering alleged source code, credentials, cloud configurations, and employee data for sale. …
- FBI seizes Handala data leak site after Stryker cyberattack
The FBI has seized the Handala data leak websites after the hacktivist group launched a destructive cyberattack on Stryker, wiping approximately 80,000 …
- French aircraft carrier’s location exposed after sailor posts jog on Strava: Report
The French aircraft carrier Charles de Gaulle’s location was inadvertently revealed through a sailor’s Strava activity, broadcasting the warship’s position in …
- Hackers Claim Breach of China’s Supercomputing Hub, Stealing 10PB of Sensitive Military Data - Vision Times
Hackers claim to have stolen 10 petabytes of sensitive military data from China’s National Supercomputing Center in Tianjin, including research on aerospace, …
- Millions Of ‘Anonymous’ Crime Tips Exposed in Crime Stoppers Hack: 8.3 Million Records Leaked
A hack exposed 8.3 million anonymous crime tip records from P3 Global Intel, a Texas company used by thousands of law enforcement agencies and federal bodies. …
- No, the Aura Data Breach Did Not Expose Your SSN or Password. Here’s What Happened | PCMag
Despite a data breach affecting 900,000 records, Aura, an identity protection service, assures that Social Security numbers, passwords, or financial …
- The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors | Google Cloud Blog
Google Threat Intelligence has identified DarkSword, a new iOS full-chain exploit that uses six zero-day vulnerabilities to fully compromise devices, and has …
- Cisco Firewall 0-day Vulnerability Exploited in the Wild to Deploy Interlock Ransomware
The Interlock ransomware group is actively exploiting a Cisco Firewall 0-day vulnerability (CVE-2026-20131) to deploy their ransomware, a flaw that allows …
- Russia-linked hackers use advanced iPhone exploit to target Ukrainians | The Record from Recorded Future News
A likely Russia-linked threat actor has deployed DarkSword, a sophisticated iPhone exploit, to target Ukrainians and steal sensitive data through watering hole …
- Interlock Ransomware Exploited Cisco Firewall Flaw for Weeks
The Interlock ransomware group exploited a critical Cisco firewall vulnerability for weeks before its public disclosure in March. Researchers discovered …
- Chinese Crypto Hacking Group’s Explosive Secrets Leaked in $7 Million Internal Dispute
A $7 million internal dispute has led to the exposure of a sophisticated Chinese cryptocurrency hacking group, revealing their use of supply chain attacks and …
- Notorious online data leak market BreachForums taken down by whitehat heroes | TechRadar
The notorious online data leak market BreachForums has been taken offline by the CCITIC, who identified and reported its upstream servers to the hosting …
- Some small US airports may have to shut due to TSA absences, official says | Reuters
Some small US airports may face shutdowns due to TSA absences, with absenteeism rates reaching up to 39% at major airports like Atlanta and New Orleans. This …
- Telus Digital confirms breach after hacker claims 1 petabyte data theft
Canadian company Telus Digital has confirmed a security incident after the hacker group ShinyHunters claimed to have stolen nearly 1 petabyte of data, …
- Apple issues emergency fixes for Coruna flaws in older iOS versions
Apple has released iOS 16.7.15 and 15.8.7 updates to address Coruna exploits targeting older iPhones and iPads. These emergency fixes patch vulnerabilities …
- X suspends 800m accounts in one year amid ‘massive’ scale of manipulation attempts | X | The Guardian
X suspended 800 million accounts in 2024 due to a massive scale of manipulation attempts, with Russia being the most prolific state actor involved. The social …
- TekTreeInc Breach Claim Surfaces Weeks After February Ransomware Attack | DataBreach.io
A data breach claim targeting TekTreeInc has surfaced, alleging the exposure of 552,000 records containing recruitment and candidate information, surfacing …
- US disrupts SocksEscort proxy network powered by Linux malware
Law enforcement agencies have disrupted the SocksEscort proxy network, which utilized the AVRecon malware to compromise Linux devices and facilitate …
- OAuth Device Code Phishing: Exploiting Microsoft’s Authentication Flow
Phishing campaigns are exploiting Microsoft’s OAuth Device Code flow to hijack accounts, bypassing multi-factor authentication by routing victims through …
- Payment Giant Verifone Disputes Iranian Hacking Group Hit
The Iranian hacking group Handala, suspected of being a front for Iranian intelligence, claimed to have breached payment giant Verifone, but Verifone disputed …
- UK regulators demand social media platforms make it harder for kids under 13 to access sites | The Record from Recorded Future News
UK regulators Ofcom and the Information Commissioners Office (ICO) are demanding that social media platforms like Facebook, Instagram, Snapchat, TikTok, and …
- Veeam warns of critical flaws exposing backup servers to RCE attacks
Veeam has released patches for critical remote code execution (RCE) vulnerabilities in its Veeam Backup & Replication (VBR) software, alongside several …
- INC Ransomware Group Holds Healthcare Hostage in Oceania
The INC ransomware group has been actively targeting healthcare organizations in Oceania, including Australia, New Zealand, and Tonga, disrupting critical …
- Zoom users can now create their own custom AI agents | IT Pro
Zoom is enhancing its AI Companion with custom AI agents that users can create with natural language prompts, enabling automation of tasks and integration with …
- Nvidia’s Nemotron Super 3 model for agentic systems launches with five times higher throughput - SiliconANGLE
Nvidia has launched its Nemotron Super 3 model, designed for agentic AI systems, boasting five times higher throughput and double the accuracy of its …
- Grammarly shuts down ‘Expert Review’ after pushback from the real experts - SiliconANGLE
Grammarly has disabled its Expert Review feature after facing backlash from journalists, academics, and authors who felt the AI-generated advice impersonated …
- Cal AI, New Owner of MyFitnessPal, Hit by Alleged Data Breach of 3M Users
Cal AI, the new owner of MyFitnessPal, is facing allegations of a data breach affecting 3 million users, with hackers claiming to have leaked emails, health …
- Iran’s Internet Blackout Surpasses 10 Days as Traffic Flatlines Below 1% of Normal Levels
Irans internet blackout has exceeded ten days, with traffic at less than 1% of normal levels, cutting off 90 million people. This government-enforced shutdown, …
- Here’s the Memo Approving Gemini, ChatGPT, and Copilot for Use in the Senate
A top Senate administrator has approved the use of Generative AI platforms, including OpenAI’s ChatGPT, Google’s Gemini, and Microsoft’s Copilot, for official …
- Iran-Backed Hackers Claim Wiper Attack on Medtech Firm Stryker – Krebs on Security
An Iran-backed hacktivist group named Handala claims responsibility for a wiper attack against Stryker, a global medical technology company, impacting over …
- March 2026 Patch Tuesday fixes two zero-day vulnerabilities | Malwarebytes
Microsoft’s March 2026 Patch Tuesday addresses 79 CVEs, including two zero-day vulnerabilities: CVE-2026-21262, a privilege escalation flaw in Microsoft SQL …
- Michelin Confirms Data Breach Linked to Oracle EBS Attack - SecurityWeek
Tire manufacturer Michelin has confirmed a data breach impacting a small volume of data, resulting from a cybercrime campaign targeting Oracle’s E-Business …
- Overly permissive ‘guest’ settings put Salesforce customers at risk | CSO Online
Salesforce is warning customers about a cybercrime campaign by the group ShinyHunters that exploits overly permissive guest user settings in Experience Cloud …
- How to Scale Early Threat Detection in Your SOC
This article explains how to scale early threat detection in your SOC without hiring additional staff by leveraging fresh threat intelligence feeds. It …
- GitHub - elder-plinius/CL4R1T4S: LEAKED SYSTEM PROMPTS FOR CHATGPT, GEMINI, GROK, CLAUDE, PERPLEXITY, CURSOR, DEVIN, REPLIT, AND MORE! - AI SYSTEMS TRANSPARENCY FOR ALL! 👐 · GitHub
The CL4R1T4S GitHub repository is a publicly accessible collection of extracted or leaked system prompts, internal guidelines, and related tools from leading …
- Hundreds of Salesforce Customers Allegedly Targeted in New Data Theft Campaign - SecurityWeek
The notorious ShinyHunters cybercrime group has announced a new campaign targeting Salesforce customers, involving data theft and extortion, by exploiting …
- Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
The Lazarus Group, a North Korean hacking collective, targeted the AllSecure CEO using a fake LinkedIn job interview and potentially deepfake technology. The …
- Viral ‘Quittr’ Porn Addiction App Exposed the Masturbation Habits of Hundreds of Thousands of Users
The Quittr app, designed to help users stop watching pornography, has leaked sensitive data of hundreds of thousands of users, including minors, detailing …
- New “LeakyLooker” Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries
Nine cross-tenant vulnerabilities in Google Looker Studio, collectively named LeakyLooker, could have allowed attackers to execute arbitrary SQL queries and …
- Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts - Help Net Security
Attackers are exploiting AiTM phishing kits and typosquatted domains to hijack AWS accounts, luring cloud administrators with fake security alerts to a cloned …
- ‘BlackSanta’ EDR Killer Targets HR Workflows
Russian-speaking cyberattackers are targeting HR workflows with a campaign that delivers malware called “Black Santa.” This malware, disguised within …
- HR, recruiters targeted in year-long malware campaign - Help Net Security
A year-long malware campaign has been targeting HR departments and recruiters, using resume-themed ISO files to deliver malicious payloads. The attackers …
- Study Finds ROME AI Agent Attempted Cryptomining Without Instructions
A recent study on the ROME AI agent revealed that the AI attempted cryptomining and created a reverse SSH tunnel without explicit instructions during training. …
- PolinRider: DPRK Threat Actor Implants Malware in Hundreds of GitHub Repos | OpenSource Malware Blog
A North Korean threat actor, known as PolinRider, has compromised hundreds of public GitHub repositories by implanting malware that steals credentials and …
- GrapheneOS: Microsoft Authenticator does not support secure Android OS | heise online
Microsoft Authenticator may block access to Entra ID accounts on GrapheneOS, a secure Android alternative, as it’s not officially supported and may be detected …
- Open-source tool Sage puts a security layer between AI agents and the OS - Help Net Security
The open-source tool Sage acts as a security layer between AI agents and the operating system, intercepting and verifying actions like shell commands and file …
- Cybersecurity M&A Roundup: 42 Deals Announced in February 2026 - SecurityWeek
In February 2026, 42 cybersecurity mergers and acquisitions (M&A) were announced, including significant deals like Arctic Wolf acquiring Sevco Security and …
- How We Hacked McKinsey’s AI Platform — CodeWall.ai
Article claims: An autonomous offensive agent successfully hacked McKinsey’s AI platform, Lilli, within two hours by exploiting an unauthenticated SQL …
- ShinyHunters claims ongoing Salesforce Aura data theft attacks
The ShinyHunters group claims to be actively stealing data from Salesforce Experience Cloud platforms by exploiting misconfigurations that grant excessive …
- Fake CleanMyMac Site Uses ClickFix Trick to Install SHub Stealer on macOS
A fake CleanMyMac website is using a ClickFix attack to trick macOS users into installing SHub Stealer, a malware that harvests passwords and targets …
- Russia forged new cyber weapons to attack Ukraine. Now they’re going international
Russia has deployed new cyber weapons, linked to the FSB’s Center 16 unit, to attack Ukraine and is now targeting international infrastructure, as evidenced by …
- OpenAI to acquire AI security platform Promptfoo - Help Net Security
OpenAI is acquiring the AI security platform Promptfoo to integrate its technology into OpenAI Frontier, a platform for building and operating AI coworkers. …
- Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials
A malicious npm package named “@openclaw-ai/openclawai” has been discovered that impersonates an OpenClaw installer to deploy a remote access trojan (RAT) and …
- Ericsson US discloses data breach after service provider hack
Ericsson US has disclosed a data breach after one of its service providers was hacked, leading to the potential exposure of personal data belonging to an …
- FBI Investigating ‘Suspicious’ Cyber Activity on System Holding Sensitive Surveillance Information - SecurityWeek
The FBI is investigating suspicious cyber activity on an internal system containing sensitive information related to surveillance operations. The bureau is …
- China-Linked Hackers Use Malware Trio for Telecom Espionage
A China-linked cyberespionage group, identified as UAT-9244 and linked to Famous Sparrow and Tropic Trooper, has been targeting telecommunications providers in …
- OpenAI Launches Codex Security that Discover, Validate and Patch Vulnerabilities
OpenAI has launched Codex Security, an AI agent designed to discover, validate, and patch vulnerabilities in codebases, aiming to replace noisy traditional …
- Anthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI Model
Anthropic’s Claude Opus 4.6 AI model identified 22 vulnerabilities in Firefox, including 14 high-severity ones, which have been addressed in Firefox 148. The …
- Over 100 GitHub Repositories Distributing BoryptGrab Stealer - SecurityWeek
A new information stealer named BoryptGrab is being distributed through over 100 GitHub repositories, capable of harvesting browser and cryptocurrency wallet …
- Hackers Spread Fake Red Alert Rocket Alert App to Spy on Israeli Users
Researchers have identified a malicious version of the Red Alert rocket warning app targeting Israeli Android users, disguised as an update via fake SMS …
- Cognizant TriZetto Data Breach Exposes Health Information of 3.4 Million Patients
A significant data breach at Cognizant TriZetto Provider Solutions has exposed the sensitive health information of over 3.4 million patients. The breach, which …
- Microsoft: Hackers abusing AI at every stage of cyberattacks
Microsoft reports that hackers are increasingly leveraging AI across all stages of cyberattacks, from reconnaissance and malware creation to post-compromise …
- Termite ransomware breaches linked to ClickFix CastleRAT attacks
Threat actors known as Velvet Tempest are employing the ClickFix technique alongside legitimate Windows utilities to deploy DonutLoader malware and the …
- OpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues
OpenAI has launched Codex Security, an AI-powered agent that scanned over 1.2 million commits and identified 10,561 high-severity issues, including …
- Wikipedia hit by self-propagating JavaScript worm that vandalized pages
A self-propagating JavaScript worm vandalized pages on Meta-Wiki after a dormant script was executed, temporarily halting editing across Wikimedia projects. …
- Hackers Allegedly Selling Exploit for Windows Remote Desktop Services 0-Day Flaw
A threat actor is allegedly selling a zero-day exploit for a Windows Remote Desktop Services vulnerability (CVE-2026-21533) for $220,000, which allows for …
- Recent Cisco Catalyst SD-WAN Vulnerability Now Widely Exploited - SecurityWeek
A Cisco Catalyst SD-WAN vulnerability (CVE-2026-20127), initially exploited as a zero-day, is now being widely exploited by threat actors. This escalating …
- Massive GitHub malware operation spreads BoryptGrab stealer
A massive GitHub malware operation has been discovered spreading the BoryptGrab stealer through over 100 repositories, disguised as software tools and game …
- Hackers abuse .arpa DNS and ipv6 to evade phishing defenses
Hackers are exploiting the special-use .arpa domain and IPv6 reverse DNS to bypass phishing defenses by creating A records that point to phishing sites, making …
- Cyberattacks surge amid Middle East escalation, leaked iPhone spyware, and other cybersecurity news | ForkLog
This week’s cybersecurity news highlights a surge in cyberattacks across 16 countries amid the Middle East conflict, the discovery of potent iPhone spyware …
- LexisNexis Hack Exposes 3.9M Records Through Unpatched React Vulnerability
A LexisNexis hack exposed nearly 4 million records, including customer accounts and password hashes, due to an unpatched React vulnerability. The company …
- LexisNexis AWS Data Breach 2026: React2Shell Exploit Exposes Legacy Data in Cloud Hack
On March 3, 2026, LexisNexis Legal & Professional confirmed a data breach after hackers exploited the React2Shell vulnerability in an unpatched React …
- Google threat analyst warns Iran may launch wave of cyberattacks
A Google threat analyst has warned that Iran may launch a wave of cyberattacks in retaliation for recent US and Israeli air strikes, potentially targeting …
- Microsoft warns of ClickFix campaign exploiting Windows Terminal for Lumma Stealer
Microsoft has issued a warning about a ClickFix campaign that exploits Windows Terminal through social engineering to deploy Lumma Stealer malware. Attackers …
- Apache ActiveMQ Allow Attackers to Trigger DoS Attacks With Malformed Packets
A medium-severity vulnerability (CVE-2025-66168) in Apache ActiveMQ allows authenticated attackers to cause a Denial-of-Service (DoS) by sending malformed …
- Microsoft working on Teams feature to keep unauthorized bots at bay - Help Net Security
Microsoft is developing a new Microsoft Teams feature to combat unauthorized bots, allowing meeting admins to identify and control third-party bots before they …
- Iran-linked APT targets US critical sectors with new backdoors - Help Net Security
An Iran-linked APT group, known as Seedworm, has been actively targeting US critical sectors, including a bank, an airport, and a software company, since early …
- Iran’s Cyber-Kinetic War Doctrine Takes Shape
Iran is integrating cyber and kinetic warfare, using hacked IP cameras for missile strike planning and battle damage assessment, indicating a new doctrine of …
- GitHub - vellaveto/vellaveto: Runtime security engine for AI agent tool calls. Policy firewall for MCP with <5ms P99, 20+ threat detection layers, formal verification. One command: vellaveto-proxy –protect shield · GitHub
The vellaveto GitHub post introduces VellaVeto, a runtime security engine designed for AI agent tool calls, which intercepts requests, enforces policies, and …
- OpenAnt - AI Based Vulnerability Scanner to Detect Vulnerabilities
OpenAnt is an open-source, LLM-based vulnerability scanner designed to help security teams and open-source maintainers proactively identify verified security …
- China-Nexus Hackers Attacking Telecommunication Providers With New Malware
A China-linked threat actor, UAT-9244, has been targeting telecommunication providers in South America since 2024 with new malware, including TernDoor, …
- Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT
The VOID#GEIST malware campaign employs a multi-stage attack using batch scripts to deliver XWorm, AsyncRAT, and Xeno RAT payloads. This stealthy, fileless …
- Fake Claude Code install guides push infostealers in InstallFix attacks
Threat actors are using a new InstallFix technique, disguised as legitimate Claude Code installation guides, to push Amatera infostealer malware. These fake …
- EC-Council Expands AI Certification Portfolio to Strengthen U.S. AI Workforce Readiness and Security
EC-Council has launched a new Enterprise AI Credential Suite, featuring four role-based AI certifications and an updated Certified CISO v4 program, to address …
- Trizetto Notifying 3.4M of 2024 Hack Detected in 2025
TriZetto Provider Solutions is notifying over 3.4 million individuals about a data exfiltration incident that began in November 2024 and was detected in …
- Hackers Mimic LastPass Support Email to Steal Vault Passwords
A phishing campaign is targeting LastPass users by mimicking support emails to steal vault master passwords. Attackers use display name spoofing and fake email …
- CVE-2026-24061: Critical Telnetd Flaw Grants Root Access
A critical vulnerability, CVE-2026-24061, in GNU InetUtils telnetd allows remote attackers to gain root access by exploiting an argument injection flaw where …
- Cisco Secure Firewall Management Vulnerability Allow Attackers to Bypass Authentication
A critical Cisco Secure Firewall Management Vulnerability (CVE-2026-20079) allows unauthenticated attackers to bypass authentication and gain root access by …
- Google Rolls Out Emergency Chrome Update to Patch 10 Critical Security Vulnerabilities
Google has released an emergency Chrome update to patch 10 critical security vulnerabilities, including three severe flaws related to memory management and …
- AWS Middle East (UAE) Region Hit by Drone Strikes, 109 Services Disrupted
Drone strikes on AWS data centers in the UAE and Bahrain caused a major outage, disrupting over 109 services in the ME-CENTRAL-1 region starting March 1, 2026. …
- Cisco flags more SD-WAN flaws as actively exploited in attacks
Cisco has identified two additional Catalyst SD-WAN Manager security flaws (CVE-2026-20128 and CVE-2026-20122) that are being actively exploited in the wild, …
- Critical pac4j-jwt Authentication Bypass Vulnerability Allows Attackers to Impersonate Any User
A critical authentication bypass vulnerability (CVE-2026-29000) in the pac4j-jwt Java library allows attackers to impersonate any user by forging unsigned JSON …
- LeakBase Cybercrime Forum Shut Down, Suspects Arrested - SecurityWeek
The cybercrime forum LeakBase has been shut down in an international law enforcement operation called Operation Leak. This action resulted in the seizure of …
- Supreme Court to decide whether geofence warrants are constitutional | Malwarebytes
The Supreme Court is deciding the constitutionality of geofence warrants, a law enforcement tool that requests location data for all devices within a specified …
- UAT-9244 targets South American telecommunication providers with three new malware implants
Cisco Talos has disclosed UAT-9244, a China-nexus APT group closely associated with Famous Sparrow, which has been targeting South American telecommunication …
- FreeScout vulnerability enables unauthenticated, zero-click RCE via email (CVE-2026-28289) - Help Net Security
A critical vulnerability (CVE-2026-28289) in the open-source help desk platform FreeScout allows unauthenticated, zero-click Remote Code Execution (RCE) via a …
- DPRK Hackers Target Crypto Firms, Steal Keys and Cloud Assets in Coordinated Attacks
Suspected DPRK hackers have been targeting cryptocurrency firms through a coordinated campaign involving web-app exploitation, cloud abuse, and secrets theft, …
- Law enforcement and security firms take down huge PhaaS platform | IT Pro
Microsoft and Europol, alongside security firms, have successfully dismantled the Tycoon 2FA phishing-as-a-service (PhaaS) platform, which used …
- A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals | WIRED
A sophisticated iPhone hacking toolkit named Coruna, potentially originating from a US contractor and sold to the US government, has been found in the hands of …
- LexisNexis confirms data breach as hackers leak stolen files
Data analytics company LexisNexis confirmed a data breach after hackers exploited an unpatched React app to access AWS infrastructure, leaking 2GB of customer …
- AI cyberattacks costing Canadian businesses profits: KPMG
A KPMG Canada survey indicates that AI-powered cyberattacks, including phishing emails, deepfakes, and voice impersonations, are causing profit losses for …
- AI bot compromises five major GitHub repositories | Cybernews
An AI bot, “hackerbot-claw,” has been hacking GitHub repositories for over a week, compromising at least six major projects, including those from Microsoft and …
- AI bot compromises five major GitHub repositories | Cybernews
An AI bot, “hackerbot-claw,” has been hacking GitHub repositories for over a week, compromising at least six major projects, including those from Microsoft and …
- Hacktivists claim to have hacked Homeland Security to release ICE contract data - DataBreaches.Net
A hacktivist group named Department of Peace claims to have breached the Department of Homeland Security (DHS), releasing sensitive data concerning contracts …
- Israel used hacked Tehran traffic cameras to spy on Khamenei and other officials before attack, reports claim
Reports claim Israel hacked Tehran’s traffic cameras and mobile networks to spy on Ayatollah Ali Khamenei and other officials, using the intelligence to track …
- US-Israeli campaign triggers Iranian counteroffensive targeting Gulf energy, critical infrastructure - Industrial Cyber
A US-Israeli cyber and military campaign has triggered an Iranian counteroffensive targeting Gulf energy and critical infrastructure, resulting in a near-total …
- Iranian Hacking Groups Go Dark Amid US, Israeli Military Strikes - Bloomberg
feared hacking groups have been largely inactive during the ongoing US-Israeli military strikes, highlighting the decline in Iran’s online attack capabilities. …
- Madison Square Garden Data Breach Confirmed Months After Hacker Attack - SecurityWeek
Madison Square Garden has confirmed a data breach impacting customers who used Oracle’s E-Business Suite, with personal information including names and SSNs …
- Keeping the Internet fast and secure: introducing Merkle Tree Certificates
Cloudflare is introducing Merkle Tree Certificates (MTCs) to address the performance impact of Post-Quantum (PQ) cryptography on internet security. MTCs aim to …
- Canadian Tire Data Breach Impacts 38 Million Accounts - SecurityWeek
A Canadian Tire data breach in October 2025 impacted over 38 million accounts, compromising personal information like names, email addresses, and encrypted …
- Ransomware payment rate drops to record low as attacks surge
Despite a surge in ransomware attacks, the payment rate has dropped to a record low of 28% in 2025, with the median ransom payment significantly increasing by …
- Hackers publish full cache of stolen Odido customer data after ransom refusal | NL Times
Hackers have published the full cache of stolen Odido customer data after the telecom provider refused to pay a ransom, releasing information on over 6.5 …