Security

Cybersecurity news: breaches, ransomware, actively exploited vulnerabilities and the attackers behind them, with what to patch.

552 articles · page 1 of 6

All AI Hardware & Devices Crypto Programming Security

Viewgrid list compact

CISA confirms active exploitation of maximum-severity GitLab flaw

Trezor Warns of Reported Hardware Implant in CryptoBilis Safe 5

30 Oct· 2 sources

Critical PHP flaw puts 70% of websites at risk as agencies urge patches

Researchers find 'Embrace' flaws in five AI developer tools; OpenAI, Microsoft bugs unpatched

Japan Airlines data breach exposes about 92,000 customers via Amadeus system

Google Adopts DPoP to Bolster OAuth 2.0 Against Token Theft, but Only for Refresh Tokens

Florida Department of Education says data of up to 4.9 million was vulnerable in breach

Hackers exploit Cisco SD-WAN flaw to deploy 'KeyDrift' malware, researchers say

319 Chrome extensions with 13.4 million installs caught hijacking searches

Moldovan president calls security meeting after cyberattack exposes data of about 750,000 Moldovans

GCHQ cannot account for thousands of storage devices, watchdog finds

Belgium's tax agency confirms cyberattack, extends filing deadline

Ransomware hits exposed Synology NAS, likely exploiting 18-month-old flaw

CISA warns of Fragnesia Linux flaw exploited alongside PHP2Shell vulnerabilities

29 Oct· 2 sources

Cisco patches actively exploited zero-day allowing remote crash of VPN firewalls

Fake PS5 emulator repositories on GitHub spread password-stealing malware

Attackers target 61 public GitHub repos in suspected supply-chain campaign

US and European Authorities Seize Virtualine, a Bulletproof Hosting Service for Cybercrime

Florida county won't probe mystery Flock cameras that vanished after takedown

Oracle patches trailed by fresh exploits as PeopleSoft zero-day proves to be triple bug

DHS takedown push fails to stop spread of leaked employee data

28 Oct· 14 sources

Volt Typhoon uses 'Silent Train' relay framework with zero-day exploits, researchers say

Sony ISP subsidiary data breach exposes 2.5 million customer records

Report warns of actively exploited vulnerabilities in critical network infrastructure

Fresh wave of cyberattacks hits South Korean financial firms

28 Oct· 2 sources

Hotel booking scam hits Australians after RMS Cloud cyberattack

28 Oct· 2 sources

Attackers scan the internet for unpatched Oracle E-Business Suite systems

123 Reg says AI-driven cyberattack exposed customer data, China threat group suspected

Microsoft October security update fixes 1,415 vulnerabilities, one exploited in the wild

Ukrainian ransomware affiliate sentenced to 70 months for attacks on hospitals and businesses

CISA warns hackers are actively exploiting critical Brotli 'Node2Shell' flaw

Black October's AI-discovered PHP bugs prove hard to exploit, but experts warn of coming 'vulnpocalypse'

28 Oct· 7 sources

UNM Health ransomware attack disrupts patient care as new Byod gang claims responsibility

NIST publishes roadmap for transition to post-quantum cryptography

Brazilian skimming gang compromises Convertr analytics script, steals payment card data

Code-execution flaw in boot-time firmware threatens most servers worldwide

Norway reports successful cyberattacks have tripled in six months, warns of AI threat

Warp discloses breach exposing AI agent logs, user telemetry data

Tailscale warns of serious SSH flaws that could allow root privilege escalation

GMO urges customers to shut down PCs after hackers publish stolen data

27 Oct· 3 sources

Hacker finds PS5 hypervisor bug with AI, awarded $50,000 bounty

Attack on AfD email host exposes 345,000 accounts, party says AI used to analyse stolen data

Microsoft removes seven certificates from Windows trust list in eMudhra response, plans Edge update

27 Oct· 3 sources

French energy giant ENGIE confirms customer data breach

Apple Backports CoreGraphics Zero-Day Fix to Older iPhones and iPads

npm worm that looked like a test secretly armed 42 GitHub repositories, researchers say

Keystone to destroy 18,835 wallets after hackers steal verification key in website breach

27 Oct· 3 sources

LiteLLM supply chain attack traced to master key exposed on GitHub in May

Apple patches 329 vulnerabilities across devices, including camera access flaw

AI-assisted attacks hit South Korean banks before arrests in separate case; 68,000 data records stolen

26 Oct· 3 sources

CISA unveils 'CISA 2030' strategy to harden US cyber defences, prioritise critical infrastructure

Microsoft issues emergency .NET patches for critical Brotli flaw ‘Broccoli2Shell’

26 Oct· 3 sources

NIST, CISA and NSA issue AI agent incident guidance as OpenCode reports key exposure

Kali Linux 2026.3 brings six new hacking tools and KDE Plasma 6.7

ASD warns of ‘inevitable’ online disruptions as AI supercharges cyber threats

26 Oct· 7 sources

Hacker cracks vulnerable PHP server in Bitcoin bounty challenge

ICANN accelerates quantum-safe DNS work as registry reform nears

Electrum Bitcoin wallet issues emergency patch after server-based theft exploit

26 Oct· 3 sources

AI coding agents hijacked via AGENTS.md file in Downloads folder

Samsung TV tracking researcher says OpenAI banned account over AI reverse-engineering

25 Oct· 2 sources

PingCAP confirms breach as FulcrumSec says it stole 10.6 TB

Argus open-source platform marches AI agents against machine-speed security threats

Symantec uncovers AI attack agent designed to hijack exposed models for autonomous attacks

New BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot in Central Asia espionage campaign

AI-discovered PHP bugs prompt global website shutdowns

24 Oct· 8 sources

Chainguard's early PHP disclosure sparked scramble, CISA confirms exploits underway

24 Oct· 9 sources

Astra Security releases free tools to detect PHP2Shell vulnerabilities

24 Oct· 2 sources

Third PHP2Shell vulnerability found, but no emergency fix planned

23 Oct· 2 sources

Researchers disable vulnerable updater in abandoned Popcorn Time fork, closing RCE risk on millions of devices

23 Oct· 2 sources

Microsoft Teams to gain AI-powered phishing detection in November

Quest Diagnostics confirms data breach on Quanum lab testing system, patient records accessed

23 Oct· 2 sources

US bans dashboard camera and wireless video transmitter under new chip-level security rule

Bitcoin Core merges AI-era security policy as 44% of nodes run unsupported versions

23 Oct· 3 sources

Interpol-led Operation Serengeti III Nets 1,462 Suspects, Recovers $105 Million in African Cybercrime Sweep

23 Oct· 2 sources

HPE patches eight maximum-severity flaws in ArubaOS networking devices

Grok and Claude among AI agents used to automate attacks on Latin American banks, researchers say

AI-discovered PHP bug forces global patch as exploit attempts hit millions

23 Oct· 20 sources

Brisbane police officer charged with computer hacking offences

23 Oct· 3 sources

UK targets subsea cable saboteurs with 14-year prison sentences

23 Oct· 2 sources

Switch 2 security bypassed in software-only jailbreak

ABC and Critical Infrastructure Targeted in Spyware Campaign Weaponising Online Ads

23 Oct· 2 sources

Capcom confirms data breach exposing 11.7 million customer accounts

FCC uses new powers to block gadgets over 'foreign surveillance chips'

LiteLLM release pipeline hacked, malicious packages distribute info-stealing malware

Arista patches actively exploited zero-day in VeloCloud Orchestrator

Chinese hackers spied on thousands of companies after ConnectWise breach, Microsoft says

22 Oct· 3 sources

Developer platform Railway urges all users to rotate API keys after cyberattack

GitLab patches maximum-severity remote code execution flaw in regex compiler

22 Oct· 2 sources

Over 300 Tor exit nodes hijacked in SSH and email interception campaign

Eiliko robot toy maker Energize Lab responds after security flaws exposed

Banks detect AI agents taking independent actions on customer accounts

Indian certificate authority eMudhra exits global SSL/TLS business after weak key scandal

22 Oct· 2 sources

North Korean Lazarus hackers use post-quantum cryptography in campaign against South Korean firms

Hackers breach Japan's Onamae Desktop Cloud, affecting up to 27,000 servers

Apple blocks eight rogue web certificates, but Mac vulnerability remains

ICO reprimands firms after 'Password1' test account exposed data of 3,300, mostly children

21 Oct· 3 sources