Pentagon breach exposes 3M+ personnel records including SSNs; Cisco SD-WAN zero-day added to KEV. Free credit monitoring offered. Patch now.

Citrix NetScaler root shells exploit (CVE-2026-88772) deploys Whipshot/Slapshot malware. FBI warns ShinyHunters. Apple CoreGraphics 0-day. Patch now.

ShinyHunters exploits Oracle PeopleSoft across industries; Google finds web shells on dozens of systems. FBI breach exposes SSNs, medical records. Pentagon confirms 2.76M exposed.

Citrix NetScaler RCE zero-days actively exploited globally; CISA orders federal agencies to patch CVE-2026-88771 and CVE-2026-88772 by Sept 30. Patch now.

Bitget loses $352M to North Korean hackers; CISA warns of TeamCity ransomware exploits. CEO confirms backend compromise. Cold wallets safe. Patch now.

F5 BIG-IP zero-day exploited for OAuth RCE; Check Point flaw patched; ShinyHunters claims FBI breach. Critical vulnerabilities demand immediate action. Patch now.

False AI report nearly triggers US boarding of Chinese vessel; AI agents breach cloud systems; supply chain attacks hit 100K+ sites. Security risks escalate.

Cisco ISE CVSS 10.0 zero-day actively exploited; Gyazo breach exposes 23.6M users; Brevo supply-chain ClickFix campaign. Patch ISE now.

Stay ahead with the latest cybersecurity news, data breaches, vulnerabilities, emerging threats, and expert insights—all in one trusted source.

ShinyHunters breach spree hits 284M McKesson records; Baylor Genetics, Aesto Health, Novocure exposed. Cloud analytics attacks escalate healthcare crisis.

N-able N-central CVSS 10.0 pre-auth RCE, active MikroTik RouterOS hijacks, and Magento StyleSmuggler zero-day: today’s high-impact cyber brief.Your trusted source for the latest cybersecurity news, th...

CISA adds PaperCut flaws to KEV as attackers pivot to hands-on activity; critical AI and artifact-management RCEs exploited; DPRK workers and Fire Ant router campaign continue.

Built for mobile users, this tech support scam uses a fake Apple Pay alert and browser tricks to pressure victims into calling a scam number.

TranslatePress WordPress plugin flaw lets unauthenticated attackers hijack admin accounts and compromise websites.

T-Mobile's security team resorted to an unusually low-tech fix for a high-tech problem in 2024, physically severing a network cable to cut off Chinese state-backed hackers' access to its systems, acco...

A polite reply to a wrong-number text may seem harmless. But scammers use it to profile their victims and fuel a multibillion-dollar fraud industry.

Anthropic and EPFL show AI mind viruses can spread through persistent agent prompt files, while a one-paragraph warning cuts spread to near zero.

The personal and financial information of more than 1.2 million people was stolen in a data breach at Heights Finance.

Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "Nightmare Eclipse" and now tracked as CVE-2026-69414.

It's the tenth zero-day the disgruntled researcher has disclosed

White House directive allows vetted private companies to conduct offensive cyber operations against foreign cybercrime organizations.

Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities.

AI agent flaws in AWS, Google, and Vercel let forged tool calls reach tools without model authorization, while several paths skip the model entirely.

AI agent flaws in AWS, Google, and Vercel let forged tool calls reach tools without model authorization, while several paths skip the model entirely.