Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3802 articles
Wiz says its Security Graph now connects vulnerabilities validated by its Attack Surface Scanner to code findings, traces them from source to runtime, and lets users open remediation pull requests.
MS-ISAC describes fee-based memberships and add-on security services for U.S. state, local, tribal, and territorial organizations, including 24/7 SOC monitoring, threat intelligence, incident response, and detection tools at tiered prices.
CIS announced updated or newly released benchmarks for Azure and AWS database services, PostgreSQL, FortiGate and HPE Aruba CX Switch, including new configuration-scanning support for the FortiGate benchmark.
Germany’s BfV warns that suspected state-sponsored attackers are targeting Signal accounts of politicians, journalists, and other high-profile people in Germany and Europe, posing as support to take over accounts or link devices.
The Breisgau-Hochschwarzwald district administration says G DATA MXDR now monitors more than 2,300 clients and servers around the clock. Its rollout began in spring 2025 and took about four months.
Wiz’s Backstage plugin maps Wiz projects to Backstage components, showing developers related issues and vulnerabilities, severity, and remediation status, with links to Wiz for further investigation and remediation.
DarkOwl outlined Q4 updates to its Vision threat-intelligence suite, including enhanced darknet-market data, improved paste search, case exports, and analyst-enriched data-leak records.
CloudSEK says leaked credentials for a subcontractor exposed a vendor portal serving more than 200 airports. The portal lacked MFA and provided operational visibility and diagnostic tools; the credentials were revoked and MFA was rolled out.
DarkOwl’s roundup highlights reports on phishing and malware campaigns, a ransomware breach at the University of Hawaii Cancer Center, a disputed Resecurity breach claim, and attacks exploiting a Sitecore zero-day.
A seizure notice appeared on RAMP4U on January 28, 2026. DarkOwl says the forum’s domains point to name servers used by the FBI, and the alleged administrator appeared to confirm the seizure; the FBI has not formally commented.
Wiz has opened a public preview of sensor-triggered forensics that captures evidence from suspicious cloud workloads and uses AI to help analysts investigate alerts and reconstruct attacks.
Researchers report 21 open-source contributors’ repositories compromised with VS Code tasks that run downloaded scripts on folder open. The payloads are currently described as innocuous; the actor is unknown.
WizExtend adds security context to cloud consoles and code repositories, linking cloud resources to IaC, surfacing findings, generating remediation options, and checking live environments for exposure to CVEs.
Wiz says its JetBrains IDE plugin is generally available to customers, scanning code and infrastructure-as-code for security risks and using cloud context to prioritize findings and suggest fixes.
Scattered Lapsus$ Hunters extorted companies over alleged Salesforce data theft, leaked data from six victims, and announced a ransomware-as-a-service platform called ShinySp1d3r.
The NCSC says pro-Russian hacktivists, including NoName057(16), continue targeting UK and global organisations with DDoS attacks, and urges organisations to strengthen resilience and review their defences.
A 2025 review of law-enforcement takedowns, arrests, exit scams, and platform crackdowns that fragmented underground forums and markets and pushed some criminal activity to other platforms.
A Fusion Fireside episode explores how PSD3 and the PSR respond to evolving payment fraud, reshape liability, and strengthen prevention, while raising questions about future regulation of AI-driven payments.
Team Cymru and OpenCTI announced an integration combining Team Cymru telemetry with OpenCTI workflows, with features for alert enrichment, automated threat hunting, internal and external data fusion, and STIX indicator generation.
DarkOwl’s roundup highlights 10 of its 2025 blogs on darknet markets, cybercrime trends, law-enforcement actions, extremist networks, doxing, and local threats.
StepSecurity announced its beta Dev Machine Guard for monitoring developer-machine dependencies, IDE extensions and AI-agent activity, with risk policies such as extension allowlists, package cooldowns and blocking known malicious components.
StepSecurity says Harden-Runner now protects 10,000+ open-source repositories and monitors 13 million jobs weekly. The company describes runtime detections across supply-chain incidents and new runner, HTTPS monitoring and SIEM integrations.
Darkowl’s roundup highlights reported campaigns targeting Central Asia, React2Shell exploitation, attacks on radio equipment and VMware servers, malicious developer packages, and a fake-browser-update campaign.
An unnamed bank adopted Darktrace’s Proactive Exposure Management to consolidate security findings, map attack paths, prioritize risks by business context, and support ongoing oversight and DORA reporting.
