CWE-798 - Use of Hard-coded Credentials

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

EU Sanctions Russia Over Ongoing Cyber Espionage Campaign

Critical Authentication Bypass Vulnerability in AWS Loom Exposed

Critical Vulnerability in Issabel Framework Allows Remote Code Execution

Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

Critical Vulnerabilities in Yarbo Robot Firmware Expose Devices to Remote Attacks

Escalating Cyber Threats Targeting U.S. Critical Infrastructure

Russia Hacks Civilian Cameras to Monitor NATO Military Logistics

APT36 Launches Operation RapidRust with New Rust Malware Tools

Iranian Hackers Disable UK Power Plant for Four Days

VerdantBamboo's 18-Month Cyber Campaign Targets Managed Service Providers

Harvester APT Group Unveils New GoGra Linux Backdoor Using Microsoft Graph API

Go Malware Campaign Targets Terraform Providers and Go Modules

SHEETCREEP Espionage Campaign Uses UAE-India Lure for RAT Deployment

State Actors Target Water Systems Amid Weak Cyber Defenses

HOLLOWGRAPH Malware Exploits Microsoft 365 Calendars for Espionage

Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

Russian Cyber Threats Targeting Consumer Routers

Over 24,000 Servers Expose Password Hashes via BMC Vulnerability

Human Attacker Exploits Marimo RCE at Machine Speed

LiteLLM Supply Chain Attack Exposes Critical Credentials

Iranian Hackers Breach US Gas Station Fuel Monitoring Systems

Critical cPanel Vulnerability Exploited for Hosting Server Compromise

Microsoft Issues Critical Security Patches for August 2026

Massive Security Flaw Exposes 1.1 Million Baby Monitors to Hackers

Mustang Panda Espionage Campaigns Target India's Government and Energy Sectors

Critical Vulnerabilities in Exposed MCP Servers Threaten Sensitive Data

Evolution of Chinese-Nexus Cyber Operations: Strategic Long-Term Threats

Cisco FMC Static Credential Vulnerability Under Active Exploitation

Critical Vulnerabilities in SxDevOps Expose Remote Code Execution Risks

Acer Addresses Critical Zero-Day Vulnerabilities in Wave 7 Routers

Gitea Vulnerability Exposes 30,000 Private Container Images to Attackers

Critical Vulnerabilities Discovered in Apache OFBiz Affecting All Versions Pre-24.09.06

Operation Navy Ghost Targets Telegram Bot Developers with Malicious PyPI Packages

Zeabur Shuts Down After Major Security Breach Exposing 3.2M Records

Critical CVE-2026-76658 Vulnerability in HPE Fabric Composer

Toy Ghouls Launch GenieLocker Ransomware Targeting Russian Manufacturing

Smishing Triad's JWR Kit Targets Victims via SMS Phishing

Novo Nordisk Data Breach Exploits Hardcoded GitHub Tokens

TeamFiltration Campaign Targets Microsoft 365 Accounts in Chile

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

Critical Security Bypass in Fedora Keylime Affects Multiple Versions

AI-Driven Ransomware Attack Completes in Under 10 Hours

Trigger Dev Before 4.5.6 Authentication Bypass Via Hardcoded Default Secrets

Ransomware Attack Encrypts 182GB of Data Following Decade

Nowsecure Uncovers Multiple Security And Privacy Flaws In Deepseek Ios Mobile App

Zeabur shutting down after second security breach in two months

October 2026 Security Incident

CVE Alert: CVE-2026-109126 – IBM

Litellm Credential Stealer Hidden In Pypi Wheel

Bearer Bearer

Api Security Risks

AI Security Study: Attacks on AI Infrastructure Rather Than the AI ​​Model

Bearer CLI: Free, source-available code security scanning tool (SAST)

Startup Fortune

AI Agents Breached Indian Companies Live Systems and Nobody Noticed

Hackers Used AI-Written Code to Spy on Government Linux Servers for Months, Unit 42 Finds

India's cybersecurity agency says AI agents breached its computer systems

AI Agents Accessed Indian Organizations Without Authorization, CERT

AI Agents Accessed Indian Organizations Without Authorization, CERT

How Abliterated Models Can Get You Pwned

Hooking Candiru Another Mercenary Spyware Vendor Comes Into Focus

CERT-In: AI Agents Accessed Indian Firms’ Live Systems

AI agents access confidential data, India's cybersecurity agency issues 'critical' alert

PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

CERT

Mandiant attributes the attacks

CVE-2026-102764: BeyondTrust Zero

Legal Aid Agency hackers made off with records dating back to 1978

Hirudo Android Trojan Replaces Banking Apps to Steal Credentials

JadePuffer

Smart Devices Law

Apple launches hub as Anthropic issues connected home AI risk warning

LG smart TVs vulnerable: attackers can bypass webOS security and gain root

AI Agent Security: Best Practices for Safe Deployment

Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns

Anthropic study warns that small AI models could soon replicate across everyday devices

Utility Cybersecurity

Lab Dookhtegan Cyber Attack On Iranian Oil Tankers Disrupts Operations

Cyber Essentials guide for small businesses

Tr Smtp Is The Key Bpfdoor Averat Hitting The Network Edge

Research Finds 12 000 Live Api Keys And Passwords In Deepseek S Training Data

Agentcorruption Initial Imds Access

Collaboration and Support Platforms are the New Attack Surface