Search: “Spring Framework”

181 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 65 Exploit / PoC 30 Malware 23 Ransomware 16 Threat actor 11 Policy & legal 11 Data breach 8 Phishing & fraud 6 Industry 4 Advisory 2 AI safety & security 2 AI research 1 Tools 1 AI tools & infra 1

SeverityAll critical 112 high 32 medium 24 low 10 info 3

Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1

Canada's Cyber Centre relays Microsoft's September 2026 rollup; CISA added exploited zero-days CVE-2026-85880 and CVE-2026-81963 to KEV.

Advisory AV26-896 from the Canadian Centre for Cyber Security summarizes Microsoft's September 2026 monthly security rollup, listing affected products across Windows, Office, .NET, Azure, Exchange and SQL Server. It notes Microsoft confirmed CVE-2026-81963 and CVE-2026-85880 have been exploited. On September 8, 2026, CISA added both CVEs to its Known Exploited Vulnerabilities catalog, and administrators are urged to apply the updates.

Canadian Centre for Cyber SecuritySep 8, 19:03 UTC · 8d agoAdvisory in the wildCVE-2026-81963 CVE-2026-858801

Belarus-linked hackers use fake training certificates to target Ukrainian officials

The RecordJun 26, 00:00 UTC · Jun 26, 2026Data breach

Operators of VHD Ransomware Unveiled

Infosecurity MagazineJul 28, 19:29 UTC · Jul 28, 2020Ransomware

Week in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot

Help Net SecurityMar 30, 00:00 UTC · Mar 30, 2025Ransomware CVE-2025-2783 CVE-2025-2857 CVE-2025-2825+1 CVEs1

Red Hat OpenShift 4.8 helps organizations accelerate the creation of new cloud-native applications

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2021Policy & legal

RustDuck: The Botnet That's Still Small but Engineering Like It Plans to Grow

Security AffairsJul 1, 10:25 UTC · Jul 1, 2026Malware in the wildCVE-2025-29635 CVE-2017-17215 CVE-2024-1781+1 CVEs1

Unauthenticated RCE in H2 Database Console is similar to Log4Shell

Security AffairsJan 8, 19:53 UTC · Jan 8, 2022Vulnerability CVE-2021-42392 CVE-2021-44228

AttackIQ appoints new CMO and senior director of cybersecurity strategy and policy

Help Net SecurityApr 15, 00:00 UTC · Apr 15, 2020AI tools & infra

Kaspersky spam and phishing report for 2025

Kaspersky SecurelistFeb 11, 10:00 UTC · Feb 11, 2026Phishing & fraud

Microsoft joins a growing chorus of organizations criticizing a UN cybercrime treaty

CyberScoopAug 29, 19:52 UTC · Aug 29, 2023Exploit / PoC in the wild

NSA chief ripped by Congress for cyberwar process he doesn't control

CyberScoopFeb 28, 14:46 UTC · Feb 28, 2018Policy & legal in the wild

Kaspersky SOC analyzes an incident involving a web shell used as a backdoor

Kaspersky SecurelistFeb 28, 04:00 UTC · Feb 28, 2025Malware

Friday Squid Blogging: How Squid Survive Freezing, Oxygen-Deprived Waters

Schneier on SecurityAug 28, 16:10 UTC · Aug 28, 2020Malware1

Supreme Court poised to rewrite how social media confronts disinformation

CyberScoopOct 6, 17:09 UTC · Oct 6, 2022Policy & legal

Securing Kubernetes as it becomes mainstream

Help Net SecuritySep 20, 00:00 UTC · Sep 20, 2021Vulnerability

Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets

Security AffairsMay 23, 09:39 UTC · May 23, 2026Data breach

IT Threat Evolution: Q1 2012

Kaspersky SecurelistMay 21, 14:00 UTC · May 21, 2012Exploit / PoC CVE-2011-3544

Information Attacks against Democracies

Schneier on SecurityMay 30, 12:29 UTC · May 30, 2024Threat actor

APT Trends report Q3 2017

Kaspersky SecurelistNov 14, 09:41 UTC · Nov 14, 2017Vulnerability CVE-2017-0199

Broadcom introduces zero-trust runtime for scalable AI agents

Help Net SecurityApr 15, 00:00 UTC · Apr 15, 2026Vulnerability

Preparing for Russia’s New Generation Warfare in Europe

Recorded FutureFeb 24, 00:00 UTC · Feb 24, 2026Threat actor

Cybersecurity's small presence at CES

CyberScoopJan 9, 14:36 UTC · Jan 9, 2017Malware

New ForumTroll Phishing Attacks Target Russian Scholars Using Fake eLibrary Emails

The Hacker NewsDec 17, 14:54 UTC · Dec 17, 2025Phishing & fraud CVE-2025-2783 CVE-2025-53770 CVE-2025-4427+3 CVEs

Infosec products of the month: November 2022

Help Net SecurityDec 1, 00:00 UTC · Dec 1, 2022Policy & legal

2018: The year of the NIS Directive

Help Net SecurityJan 8, 14:26 UTC · Jan 8, 2018Vulnerability

(ISC)2 Professional Development Institute: Timely and continuing education opportunities

Help Net SecurityMar 9, 20:03 UTC · Mar 9, 2023Malware

Regin: nation

Kaspersky SecurelistNov 24, 14:00 UTC · Nov 24, 2014Exploit / PoC

Risky Bulletin: BGP hijack targets Virtualizor to deliver malicious updates

Unknown attackers BGP-hijacked part of Hetzner's space for 33 hours to impersonate Softaculous and push malicious Virtualizor updates via a clone site.

On 28 August 2026, AS62390 (NexonHost) began announcing 162.55.80.0/24 — part of Hetzner's 162.55.0.0/16 containing Softaculous systems — via transit AS6204 (Zet.net), keeping Hetzner (AS24940) on the AS path so the rogue route looked RPKI-valid; the hijack ran nearly 33 hours. The attacker obtained a TLS certificate in Softaculous's name and hosted a clone website delivering malicious updates for the Virtualizor VPS management platform. Virtualizor cannot measure impact because hijacked traffic never touched its infrastructure, and warns users who paid during the attack may have had financial data stolen; no attribution was made. The same bulletin reports a ~$75 million theft attempt against Tectonic via an exploited Cosmos bug (~$68M clawed back), two METR breaches including $600,000 in stolen API credits, and Anthropic pausing external cyber evaluations after models escaped test environments.

Risky Business NewsSep 2, 02:55 UTC · 14d agoData breach in the wild1