GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
Shai-Hulud worm copycats emerge after source code leakSecurity Affairs·May 19, 07:29 UTC · May 19, 2026Malware42
New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chainHelp Net Security·May 19, 00:00 UTC · May 19, 2026Malware42
PureLogs infostealer is stealing credentials worldwideHelp Net Security·May 19, 00:00 UTC · May 19, 2026Malware30
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain AttackThe Hacker News·May 15, 00:00 UTC · May 15, 2026Malware42
Widely used Daemon Tools disk app backdoored in monthlong supplyArs Technica · Security·May 5, 19:46 UTC · May 5, 2026Malware42
PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal CredentialsThe Hacker News·May 1, 16:27 UTC · May 1, 2026Ransomware57
Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 AttackThe Hacker News·Apr 27, 14:19 UTC · Apr 27, 2026Ransomware57
Product showcase: Proton Authenticator is an end-to-end encrypted, open source 2FA appHelp Net Security·Apr 23, 04:20 UTC · Apr 23, 2026Industry30
Self-spreading npm malware targets developers in new supply chain attackHelp Net Security·Feb 24, 00:00 UTC · Feb 24, 2026Malware42
BlueNoroff's latest campaigns: GhostCall and GhostHireKaspersky Securelist·Oct 28, 03:00 UTC · Oct 28, 2025Threat actor45
Life, death, and online identity: What happens to your online accounts after death?Help Net Security·Oct 22, 00:00 UTC · Oct 22, 2025Policy & legal30
Passkeys rise, but scams still hit hard in 2025Help Net Security·Oct 3, 00:00 UTC · Oct 3, 2025Phishing & fraud30
⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-theThe Hacker News·Aug 27, 05:11 UTC · Aug 27, 2025Ransomware in the wildCVE-2018-0171CVE-2025-43300CVE-2025-7353+5 CVEs60
⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and MoreThe Hacker News·Aug 19, 13:08 UTC · Aug 19, 2025Ransomware in the wildCVE-2025-2783CVE-2025-2857CVE-2025-1974+11 CVEs60
Microsoft Removes Password Management from Authenticator App Starting August 2025The Hacker News·Jul 1, 10:27 UTC · Jul 1, 2025Phishing & fraud30
⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and MoreThe Hacker News·May 17, 13:56 UTC · May 17, 2025Ransomware in the wildCVE-2025-2783CVE-2025-2857CVE-2025-1974+11 CVEs60
People know password reuse is risky but keep doing it anywayHelp Net Security·May 2, 00:00 UTC · May 2, 2025Data breach57
Password management habits you should unlearnHelp Net Security·Apr 15, 12:13 UTC · Apr 15, 2025Data breach57
Passkey technology is elegant, but it’s most definitely not usable securityArs Technica · Security·Dec 30, 12:00 UTC · Dec 30, 2024Data breach57
NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card DataThe Hacker News·Nov 22, 04:34 UTC · Nov 22, 2024Malware30
Gmail's New Shielded Email Feature Lets Users Create Aliases for Email PrivacyThe Hacker News·Nov 18, 11:57 UTC · Nov 18, 2024Industry30
THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7The Hacker News·Oct 21, 12:12 UTC · Oct 21, 2024Ransomware in the wild60
FIDO Alliance Proposes New Passkey Exchange StandardInfosecurity Magazine·Oct 16, 12:00 UTC · Oct 16, 2024Phishing & fraud30
FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different PlatformsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Phishing & fraud30
Week in review: Vulnerability allows Yubico security keys cloning, Patch Tuesday forecastHelp Net Security·Sep 8, 00:00 UTC · Sep 8, 2024VulnerabilityCVE-2024-7261CVE-2024-4519560
Week in review: SonicWall critical firewalls flaw fixed, APT exploits WPS Office for Windows RCEHelp Net Security·Sep 1, 00:00 UTC · Sep 1, 2024VulnerabilityCVE-2024-40766CVE-2024-7262CVE-2924-7263+2 CVEs60
Most people still rely on memory or pen and paper for password managementHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2024Vulnerability55
Threat Roundup for November 3 to November 10Cisco Talos·Nov 9, 18:32 UTC · Nov 9, 2023Vulnerability30
Chrome zero-day exploited in the wild, patch now! (CVE-2023-4863)Help Net Security·Sep 29, 08:22 UTC · Sep 29, 2023Exploit / PoC in the wildCVE-2023-4863CVE-2023-41064CVE-2023-41061+1 CVEs60
Week in review: 6 free resources for getting started in cybersecurity, Patch Tuesday forecastHelp Net Security·Sep 10, 00:00 UTC · Sep 10, 2023VulnerabilityCVE-2023-41064CVE-2023-4106160
Building a secure future without traditional passwordsHelp Net Security·Aug 14, 00:00 UTC · Aug 14, 2023Research30
Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023Help Net Security·Jun 25, 00:00 UTC · Jun 25, 2023Ransomware in the wildCVE-2023-32435CVE-2023-32434CVE-2023-32439+3 CVEs60
The future of passwords and authenticationHelp Net Security·Jun 20, 00:00 UTC · Jun 20, 2023Industry30
KeePass Exploit Allows Attackers to Recover Master Passwords from MemoryThe Hacker News·Jun 6, 03:48 UTC · Jun 6, 2023Exploit / PoCCVE-2023-32784CVE-2023-2405550
Week in review: MOVEit Transfer critical zero-day vulnerability, Kali Linux 2023.2 releasedHelp Net Security·Jun 4, 00:00 UTC · Jun 4, 2023Exploit / PoC in the wildCVE-2023-28771CVE-2023-2868CVE-2023-2798860