Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3802 articles
CYFIRMA describes Earth Lusca, a China-linked actor active since 2019, as targeting strategic organizations and cryptocurrency platforms. Recent activity includes the Go-based KTLVdoor backdoor, established toolsets and rotating cloud-hosted C2 infrastructure.
OpenAI is acquiring Promptfoo, whose platform tests LLMs and AI agents against threats such as prompt injection and data leaks. OpenAI plans to add automated security testing and red-teaming to its Frontier platform and continue Promptfoo’s open-source project.
Fortinet, Ivanti, and Intel released fixes for vulnerabilities that could enable code execution, privilege escalation, or security bypasses. The vendors reported no known in-the-wild exploitation.
Wiz says it has officially joined Google. It plans to accelerate its cloud and AI security platform while continuing to support customers across AWS, Azure, GCP and OCI.
Microsoft’s May 2026 Patch Tuesday fixes 84 vulnerabilities, including two publicly disclosed zero-days. The update also addresses a critical RCE, Winlogon privilege escalation and Azure MCP SSRF, while enabling hotpatch updates through Windows Autopatch.
Microsoft’s March 2026 updates address 79 vulnerabilities across products, including two publicly disclosed zero-days; Microsoft reported no evidence they were exploited. The release also fixes critical Office RCE and Excel/Copilot information-disclosure flaws.
Finland’s SUPO warns that Russian and Chinese intelligence operations target technology companies, research institutions, and government networks, seeking economic and technological information. The service says smaller firms face particular risks.
Siemens, Schneider Electric, Mitsubishi Electric and Moxa issued ICS advisories covering flaws including code execution, DoS, XSS and hardcoded credentials; CISA and VDE-CERT also published advisories affecting industrial products.
Researchers found five Rust crates designed to exfiltrate .env secrets and reported an AI-powered bot targeting GitHub Actions workflows. A stolen token was used to publish malicious Trivy VS Code extensions; affected users were urged to remove them and rotate secrets.
Israeli authorities warned that spoofed calls and “OREFAlert” texts impersonated the Home Front Command with false emergency messages. They attributed the coordinated misinformation effort to Iranian or pro-Iranian actors and urged reliance on official channels.
The FBI warns that scammers are impersonating municipal officials and using public permit details to demand fake fees. Applicants are urged to verify requests through official contacts and report suspected fraud to IC3.
The Senate confirmed Lt. Gen. Joshua Rudd 71-29 to lead the NSA and U.S. Cyber Command, ending an almost year-long vacancy. Critics cited his lack of cyber experience and concerns about surveillance authorities ahead of Section 702 renewal.
Microsoft’s mandatory March 2026 Windows 11 updates include security patches, expanded Secure Boot certificate rollout, built-in Sysmon event logging, WDAC improvements, and reliability fixes.
Microsoft’s March 2026 updates fix 79 flaws, including two publicly disclosed zero-days not known to be exploited. Highlights include Office preview-pane RCEs and an Excel flaw that could enable Copilot data exfiltration.
Microsoft’s March 2026 Windows 10 KB5078885 update addresses 79 vulnerabilities, including two actively exploited zero-days, fixes a Secure Launch shutdown issue, and expands delivery of replacement Secure Boot certificates.
Microsoft patched 83 vulnerabilities in its March 2026 updates; none were flagged as exploited. The article highlights publicly disclosed flaws, an Azure MCP Server Tools issue that could expose a managed identity token, and patching considerations.
Adobe released fixes for 80 vulnerabilities across eight products, including Commerce, Illustrator, Acrobat Reader and Premiere Pro. The company says none of the flaws are known to be exploited in the wild.
DLP startup Jazz emerged from stealth with $61 million in seed and Series A funding. Its product combines a forensic endpoint agent with an autonomous investigator to analyze data use and distinguish legitimate workflows from risks.
Kai emerged from stealth with $125 million in seed and Series A funding. The company says its AI platform performs cybersecurity tasks across IT and OT, including threat detection, vulnerability management, and asset discovery.
Researchers report that KadNap has infected about 14,000 edge devices, including ASUS routers, using a modified Kademlia DHT for C2. They link it to the Doppelganger proxy service; Lumen says it blocked related traffic on its network.
Microsoft Entra's opt-in public preview adds device-bound Windows Hello passkeys for phishing-resistant, passwordless sign-in on managed and unmanaged Windows devices. Admins must enable FIDO2 passkeys and configure a Windows Hello passkey profile.
Microsoft plans to enable hotpatch security updates by default for eligible Intune-managed Windows devices starting with the May 2026 update. The company estimates this could halve the time to reach 90% patch compliance; admins can manage the setting in Intune.
Researchers report a PlugX campaign attributed to Camaro Dragon targeting Qatar after regional escalations, plus a separate likely Qatar-focused Rust-loader campaign delivering Cobalt Strike; attribution of the latter to China-aligned actors is low confidence.
NASSCOM urged member companies to prepare for potential disruption linked to the West Asia conflict, recommending continuity planning, stronger access controls, vendor audits, DDoS readiness and offline immutable backups.
