CWE-200 - Exposure of Sensitive Information

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure

Russian Hackers Exploit Zimbra Zero-Day for Espionage Campaign

GRU Compromises Home Routers in 23 States to Steal Outlook Credentials

Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

GitLab Issues Emergency Patch for Critical RCE Vulnerability

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation

Critical RCE Vulnerability in Rails Active Storage Disclosed

Critical Buffer Overflow Vulnerability in Silex Devices (CVE-2026-32956)

Critical CVE-2026-48611 Vulnerability Allows OAuth Account Hijacking

Operation Escaneo Targets Latin American Critical Infrastructure

CVE-2026-105222 Exposes Google Maps API Keys

Apple Alerts Users of Targeted Mercenary Spyware Attacks in 110 Countries

Massive Data Breach at Change Healthcare Affects 190 Million Americans

Critical Vulnerabilities in Veeam Software Expose Systems to Remote Attacks

Zero-Click Spyware Delivered via Targeted Ads: Citizen Lab Report

Critical Vulnerabilities in Paperclip AI Platform Enable Unauthenticated Command Execution

Critical Vulnerabilities in FortiOS and Arista VeloCloud Under Active Exploitation

Critical Vulnerabilities Discovered in Splunk AI Toolkit

Critical Flaws in Veeam and Terraform MCP Require Immediate Patching

Critical Authentication Bypass Vulnerability in Gorse Exposed

Ubiquiti Patches Critical Vulnerabilities in UniFi OS Exposing Remote Attacks

Pre-Auth RCE Vulnerability in Marimo Exposed

Critical Authentication Bypass Vulnerability in AWS Loom Exposed

Critical Memory Overread Vulnerability in Citrix NetScaler Exploited

Iranian State Actors Deploy CHOSEN BRICK Spyware Against Dissidents

Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign

Critical Vulnerability CVE-2026-32625 Discovered in LibreChat

Critical CVE-2026-11624 Vulnerability in Model Context Protocol

Escalating Cyber Threats Targeting U.S. Critical Infrastructure

EU Officials Targeted by State-Sponsored Cyberattacks on Messaging Apps

Yahoo Confirms Breach of Over 1 Billion Accounts Linked to State-Sponsored Actors

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability

Iranian Hackers Breach Los Angeles Transit System, Steal 700GB of Data

Russian Intelligence Exploits Signal Backup Flaw, Cryptographic Fix Proposed

Cyclops Blink Malware Targets Cisco Firewall Devices

THORChain Hit by $10.7 Million Theft Due to Unapplied Patch

Fake Bahrain Civil Defense App Distributes Advanced Surveillance Malware

AI-Generated Exploits Target Siemens PLCs in Critical Infrastructure

Coruna and DarkSword iOS Exploit Kits Targeting Users Globally

Critical Vulnerabilities in openSUSE erlang27 Require Immediate Attention

Cloud Atlas APT Group Exploits CVE-2018-0802 and Modifies termsrv.dll for RDP Access

More Rewards customers' data accessed in a cybersecurity breach

Mage-OS 3.6.0 – Security Release

Save-On-Foods rewards system breached by hackers

Save-On-Foods rewards system breached by hackers

Ransomware gang puts 2.6TB of sensitive Maryland government data up for sale

Todyl said

OpenCode Hacked: User credentials leaked

Health Card and False Mail to Steal Data, Scam and L'alert of the Ministry of Health

canaledieci.it

Hackers Used AI-Written Code to Spy on Government Linux Servers for Months, Unit 42 Finds

India's cybersecurity agency says AI agents breached its computer systems

Rogue AI agents hacked into Indian companies without anyone noticing

AI Agents Accessed Indian Organizations Without Authorization, CERT

AI Agents Accessed Indian Organizations Without Authorization, CERT

Napoleon Perdis data breach affects 340000 of the cosmetics company's clients

Medical Records, Social Security Numbers Stolen In Breach Affecting Nearly 63K CT Residents

Lingguo Drama Broken Access Control

Hackers steal sensitive personal info from millions of California students in massive breach

statement on Oct. 10, 2026,

ShinyHunters announced

From cyber fear to grid resilience

Shorten the time from credential exposure to remediation with SpyCloud

CT Settles 2024 Data Breach That Compromised 58000 Residents' Information

AD FS Gets Two New Spoofing CVEs the Day DKM Enforcement Activates

AI Hacking Breach Hits 16 Financial Institutions, Leaks 100000 Records

Anne Arundel County Hit by Second Cyberattack in 18 Months, Hackers Claim Stolen Files

Eiliko robot companion exposes private chats and can be hijacked

Big Fish: Exploiting a 37-Year

Moscow detains suspected DataSuckers hackers linked to breaches in Ukraine and Russia

AI agents access confidential data, India's cybersecurity agency issues 'critical' alert

Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns

ChangeNOW Announces NOW AI After Resolving Website Integration Vulnerability

BeyondTrust zero

Building cyber resilience before, during and after attacks - A&O Shearman

Microsoft Patches Two Dozen RCE Flaws in Office

Microsoft Patches Two Dozen RCE Flaws in Office

CERT

Dark Web and Brand Monitoring Solution

Nivocart Issues 26

Thinkcmf Admin Rest Api Missing Authorization

Crmeb Gift Order Idor Takeover

Stolen AI API keys are paying for hackers’ autonomous scans

No click required: How the ad industry became a pipeline for mercenary spyware