-
AWS Continuum to Enable Agentic Code Security for Enterprises
Amazon Web Services has recently introduced AWS Continuum, a new integrated security platform to automate the discovery, enforcement, and …
-
Claude for Chrome Flaw Puts Gmail at Risk From Rogue Extensions
Researchers say a Claude for Chrome flaw lets rogue extensions trigger Gmail, Docs, and Calendar tasks, with greater risk in unattended …
-
The Biggest Data Breaches of 2026 So Far, Ranked by Impact
The biggest data breaches of 2026 so far, ranked by impact, with details on exposed data, affected users, and what readers should do next. …
-
Microsoft is rebuilding its security business around AI, and cutting hundreds
Microsoft is the biggest seller of cybersecurity software on the planet. Now it is tearing that business up and rebuilding it around …
-
Oak raised $60M to give every user, machine, and AI agent one identity system
Most companies still cannot say who, or what, has access to their systems at any given moment. Oak, an Israeli startup, has raised $60M to …
-
Two Scattered Spider Members Sentenced to 5.6 Years Over TfL Cyberattack
Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two members of the …
-
C’mon, just copy this text string and paste it into your macOS Terminal – it’ll fix your computer, honest
Threat intel outfit Group-IB has detailed a previously undocumented macOS information stealer that doesn’t bother hunting for software …
-
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
A lot of this week’s trouble starts with something that looks close enough. A familiar …
-
HelloNet campaign — new malicious modules launched through the ViPNet update system
We identified targeted infection attempts against large Russian organizations using the ViPNet update system (a software suite for creating …
-
Phishing Campaign Hides Lua Loader as TrueType Font File
A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the fake .ttf …
-
n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer
n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one …
●●●
NVD
- CVE-2026-23538 – A vulnerability was identified in the Feast Feature Server’s `/ws/chat` endpoint that …
- CVE-2026-15907 – A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. This impacts an unknown …
- CVE-2026-15909 – A vulnerability has been found in RafyMrX TOKO-ONLINE-ROTI up to …
- CVE-2026-1609 – A flaw was found in Keycloak. When the JSON Web Token (JWT) authorization grant preview …
- CVE-2026-54526 – Argo Workflows is an open source container-native workflow engine for orchestrating …
EXPLOITS
- Krayin CRM v2.2.x – Authenticated Remote Code Execution
- Langflow 1.9.0 – RCE
- Atarim WordPress Plugin 4.2.2 – Sensitive Information Exposure
- Joomla Page Builder CK 3.5.10 – Arbitrary File Upload
- MCPJam Inspector – Remote Code Execution
SECURELIST
- HelloNet campaign — new malicious modules launched through the ViPNet update system
- GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration
- OkoBot: new sophisticated malware framework targets cryptocurrency users
- Threat landscape for industrial automation systems. Q1 2026
- When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft we