Verizon DBIR: Vulnerability exploitation is the dominant initial access vectorHelp Net Security·May 20, 00:00 UTC · May 20, 2026Vulnerability in the wild60
Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons SimulationsThe Hacker News·May 18, 08:39 UTC · May 18, 2026Malware42
Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering SoftwareThe Hacker News·May 18, 06:14 UTC · May 18, 2026Malware42
Composer vulnerability leaks GitHub tokens, threatens PHP supply chainSansec (Magento / e-commerce security)·May 13, 14:54 UTC · May 13, 2026Vulnerability155
Quest KACE SMA flaw CVE-2025-32975: when one unpatched tool opens the door to 60 organizationsSecurity Affairs·May 13, 13:25 UTC · May 13, 2026VulnerabilityCVE-2025-3297560
Friday Squid Blogging: Giant Squid Live in the Waters of Western AustraliaSchneier on Security·May 8, 21:03 UTC · May 8, 2026Vulnerability30
City Learns Flock Accessed Cameras in Children's Gymnastics Room as a Sales Pitch Demo, Renews Contract Anyway404 Media·Apr 30, 13:25 UTC · Apr 30, 2026Industry55
Disclosing PhantomRPC – a privilege escalation vulnerability in RPCKaspersky Securelist·Apr 24, 08:00 UTC · Apr 24, 2026Vulnerability42
Vercel Finds More Compromised Accounts in Context.aiThe Hacker News·Apr 23, 08:47 UTC · Apr 23, 2026Data breach45
Middle East Hack-for-Hire Operation Traced to South Asian APT GroupInfosecurity Magazine·Apr 9, 10:45 UTC · Apr 9, 2026Threat actor57
Two prominent Egyptian journalists targeted with elaborate spearphishing campaignThe Record·Apr 8, 16:46 UTC · Apr 8, 2026Threat actor45
Iranian hackers launching disruptive attacks at U.S. energy, water targets, feds warnCyberScoop·Apr 7, 17:58 UTC · Apr 7, 2026Exploit / PoC in the wild60
⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and MoreThe Hacker News·Apr 6, 12:46 UTC · Apr 6, 2026Malware in the wildCVE-2026-5281CVE-2026-3502CVE-2026-35616+1 CVEs60
Gambling Is Thousands of Years Older Than We Thought, Rewriting Human Evolution404 Media·Apr 4, 13:00 UTC · Apr 4, 2026Policy & legal30
Journalist Sues FAA Over Drone No Fly Zone Designed to Prevent Filming ICE404 Media·Apr 2, 15:04 UTC · Apr 2, 2026Policy & legal30
Stryker says malware was involved in recent cyberattack as production lines reopenThe Record·Mar 24, 20:45 UTC · Mar 24, 2026Malware55
Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131)Help Net Security·Mar 20, 00:00 UTC · Mar 20, 2026VulnerabilityCVE-2026-20131CVE-2026-20127CVE-2026-20045+1 CVEs60
Interlock group exploiting the CISCO FMC flaw CVE-2026Security Affairs·Mar 19, 09:22 UTC · Mar 19, 2026RansomwareCVE-2026-2013160
Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaultsHelp Net Security·Mar 19, 00:00 UTC · Mar 19, 2026VulnerabilityCVE-2026-2083335
Friday Squid Blogging: Increased Squid Population in the FalklandsSchneier on Security·Mar 15, 00:00 UTC · Mar 15, 2026Policy & legal130
Immutable Linux distribution Nitrux 6.0.0 adds GPU passthrough, boot-level recovery, C++ update systemHelp Net Security·Mar 4, 00:00 UTC · Mar 4, 2026Vulnerability30
Instagram to start alerting parents when children search for terms relating to selfThe Record·Feb 27, 16:43 UTC · Feb 27, 2026Threat actor45
⚡ Weekly Recap: Double-Tap Skimmers, PromptSpy AI, 30Tbps DDoS, Docker Malware & MoreThe Hacker News·Feb 26, 11:25 UTC · Feb 26, 2026MalwareCVE-2026-22769CVE-2026-25926CVE-2026-26119+32 CVEs60
Manual Processes Are Putting National Security at RiskThe Hacker News·Feb 25, 11:00 UTC · Feb 25, 2026Vulnerability55
Pinterest Is Drowning in a Sea of AI Slop and Auto404 Media·Feb 19, 14:42 UTC · Feb 19, 2026Policy & legal55
AI Found Twelve New Vulnerabilities in OpenSSLSchneier on Security·Feb 18, 12:03 UTC · Feb 18, 2026VulnerabilityCVE-2025-1546760
40 state AGs warn House KOSA bill falls short of protecting children onlineThe Record·Feb 11, 19:59 UTC · Feb 11, 2026Policy & legal30
Government Loses Hard Drives It Was Supposed to Put ICE Detention Center Footage On404 Media·Feb 11, 18:06 UTC · Feb 11, 2026Policy & legal55
Friday Squid Blogging: Squid Fishing TipsSchneier on Security·Feb 6, 22:01 UTC · Feb 6, 2026Malware30
Please Don’t Feed the Scattered Lapsus ShinyHuntersKrebs on Security·Feb 2, 18:57 UTC · Feb 2, 2026Ransomware57
Dozens of Bizarre Ancient Lifeforms Discovered in ‘Extraordinary’ Fossil Find404 Media·Jan 30, 16:42 UTC · Jan 30, 2026Research30
FTC commissioner says online age verification ‘offers a better way’ to protect kidsThe Record·Jan 28, 17:32 UTC · Jan 28, 2026Policy & legal30
Tips for Turning Bad Indicators of Compromise Into Good OnesRecorded Future·Jan 14, 00:00 UTC · Jan 14, 2026Ransomware57
Chinese-speaking hackers exploited ESXi zeroSecurity Affairs·Jan 9, 00:06 UTC · Jan 9, 2026Ransomware in the wildCVE-2025-22226CVE-2025-22224CVE-2025-2222560
⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & MoreThe Hacker News·Jan 5, 12:56 UTC · Jan 5, 2026VulnerabilityCVE-2025-55182CVE-2025-13915CVE-2025-52691+7 CVEs60
Scientists Discover One of the World’s Oldest Cremations404 Media·Jan 4, 17:57 UTC · Jan 4, 2026Industry30
Friday Squid Blogging: Squid CamouflageSchneier on Security·Dec 26, 22:08 UTC · Dec 26, 2025Research30
NIST, MITRE announce $20 million research effort on AI cybersecurityCyberScoop·Dec 23, 17:11 UTC · Dec 23, 2025Ransomware in the wild60