Threats

Malware Exploits Exploitation Ransomware Hacking Phishing Vulnerabilities Remote Code Execution Cyber Attacks Data Breaches

3 ARTICLES

10h ago

GeoServer Zero-Day SQL Injection Draws Mass Probes

The flaw lets attackers inject SQL into jsonArrayContains queries, allowing database manipulation with remote code execution possible in some configurations.

Stories older than 24h

9 ARTICLES

yesterday

Microsoft Ships August Patch Tuesday Fixes for About 400 Vulnerabilities Including an Exploited Zero‑Day

16 ARTICLES

3d ago

Coordinated Cyberattacks Target U.S. Water Systems and Trigger Emergency Defenses

4 ARTICLES

4d ago

Tenet Demonstrates ‘Ghostjacking’ That Turns Trusted AI Agents into Attack Paths

3 ARTICLES

5d ago

Critical Metabase SQL Injection Exploited to Steal Customer Data

4 ARTICLES

last wk.

Levi Strauss Discloses Corporate Data Theft After Phone-Based Social Engineering Attack

22 ARTICLES

last wk.

Wall Street Firms Hit by AI‑Enabled Voice‑Phishing Campaign

3 ARTICLES

last wk.

Microsoft Says Russian-Linked Hackers Are Hijacking Hotel and Airport Wi‑Fi to Steal Logins

30 ARTICLES

last wk.

U.S. Water Systems Hit by Widespread Cyber Campaign

7 ARTICLES

last wk.

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

6 ARTICLES

last wk.

Fifteen Flaws in TP‑Link Omada ZTP Can Be Chained to Take Over Networks

10 ARTICLES

last wk.

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

5 ARTICLES

last wk.

Google Removes ADK Workflows After Researchers Show Gemini Agent‑to‑Agent Privilege Escalation

11 ARTICLES

last wk.

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

33 ARTICLES

last wk.

Cyber Intrusions Target Water-Plant Control Systems in Multiple U.S. States

Threats

GeoServer Zero-Day SQL Injection Draws Mass Probes

ShieldBreak PoC Elevates Privileges via Microsoft Defender

Critical Adobe Commerce Flaw Lets Attackers Hijack Customer Accounts

Zoom 'Zoomsday' Flaw Allowed Zero‑Click Device Takeover, Researchers Say

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

Cisco Patches Firewall Flaw Being Exploited to Crash ASA and FTD Devices

Microsoft Ships August Patch Tuesday Fixes for About 400 Vulnerabilities Including an Exploited Zero‑Day

Coordinated Cyberattacks Target U.S. Water Systems and Trigger Emergency Defenses

Tenet Demonstrates ‘Ghostjacking’ That Turns Trusted AI Agents into Attack Paths

Critical Metabase SQL Injection Exploited to Steal Customer Data

Never miss stories about

Threats

Levi Strauss Discloses Corporate Data Theft After Phone-Based Social Engineering Attack

Wall Street Firms Hit by AI‑Enabled Voice‑Phishing Campaign

Microsoft Says Russian-Linked Hackers Are Hijacking Hotel and Airport Wi‑Fi to Steal Logins

U.S. Water Systems Hit by Widespread Cyber Campaign

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

Fifteen Flaws in TP‑Link Omada ZTP Can Be Chained to Take Over Networks

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

Google Removes ADK Workflows After Researchers Show Gemini Agent‑to‑Agent Privilege Escalation

Russian-Linked Hackers Hijack Hotel Wi‑Fi to Steal Microsoft 365 Logins and Deliver Malware

Cyber Intrusions Target Water-Plant Control Systems in Multiple U.S. States

Never miss stories about

Threats