CYBER ATTACK

7 Essential Application Security Testing (AST) Tools: Our Top Picks by Use Case Quick Answer: IAST agents embedded within running apps continuously.

A 16-year-old security researcher, Faav, discovered a potential authentication flaw in Microsoft's Titan analytics service, exposing an estimated 17.3.

On February 28, 2026, the U.S This article explores 2026 operation epic. . This operation, codenamed Operation Epic Fury/Roaring Lion, targeted key.

A new demonstration showcases how an uncensored, locally hosted AI model can create a functional LSASS credential-dumping tool, reportedly evading two.

Microsoft has identified a destructive campaign targeting Azure, known as Storm-3168 or JADEPUFFER. This campaign involved compromised service principals.

In early May 2026, Mirai-like botnet activity significantly increased following an attack on hosting servers running cPanel and WHM software This article.

Kiteworks has advised customers globally to temporarily halt their servers due to a potential imminent cyberattack on Kiteworks systems This article.

Ireland's Data Protection Commission (DPC) has levied a €403 million fine on Google for GDPR violations This article explores google gdpr violations.

Citrix NetScaler administrators are facing reports of two undisclosed remote code execution vulnerabilities allegedly exploited in real-world attacks This.

WordPress administrators are being advised to patch a high-severity core vulnerability that can transform anonymous comments into server-side command.

Tweakos hijack messaging accounts and turn them into items for sale This article explores telegram stealing. . Researchers recovered two related Python.

By 2026, enterprise data environments will no longer be confined to a single centralized location. Sensitive information now resides across a wide array.

The Sauron Loader has been identified in cyberattacks targeting German organizations, offering intruders an additional means to distribute malware This.

A newly disclosed Salesforce Agentforce vulnerability, dubbed SalesBleed, could have allowed attackers to extract sensitive CRM data through a zero-click.

CARBONATO is a botnet that turns Docker servers into footholds for attackers This article explores carbonato botnet. . In just one day, they managed to.

Two flaws in the latest OxygenOS build allow malicious Android apps to run with root privileges on OnePlus devices, including the OnePlus 15, by.

Microsoft has acknowledged a Windows 11 issue that can result in a black screen after signing in, with the desktop shell failing to start automatically.

MSSPs Can Demonstrate SOC Value A relatively quiet month can be an excellent month for a managed security service provider (MSSP) This article explores.

Attackers exploited a known vulnerability in Samsung’s MagicINFO software to gain access to a Windows system This article explores vulnerability samsung.

Cloudflare has addressed a cross-tenant data exposure vulnerability in its Containers platform, affecting global multi-tenant cloud computing.

A user of the Claude Code system reported a significant data loss incident where an autonomous coding agent deleted 48,218 live files from a Windows.

Attackers are turning standard business complaints into malware traps This article explores malicious document sharing. . Indicators of compromise (IoCs).

Discover how AI Agents Probed Public Websites Despite Failing Conventional Access Attempts The incident, monitored by urlquery.net, included attempts on a.

Machine Identity Management Solutions: Evaluating Top Picks by Use Case Quick Answer: Machine identity is divided into three key roles This article.

JIT Access Tools: Essential Picks by Functionality Quick Answer: Zero standing privileges is the ultimate goal; the lane varies based on the permissions.

A 14-year-old Linux kernel vulnerability in the AF_ALG cryptographic socket interface allows unprivileged local users to gain root privileges and escape.

The challenge in detecting phishing for cybersecurity teams frequently emerges after the initial alert This article explores phishing cybersecurity.

Security researchers have uncovered a faster method to compromise certain RSA implementations without factoring the public modulus, challenging the notion.

RemControl Trojan Steals Banking Credentials The malicious software targets individuals across Western Europe, the Middle East, and Canada. First detected.

Galago is a new ransomware operation that has garnered attention due to its alleged partnership with the Panzer group This article explores galago new.