Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3802 articles
Darktrace says Black Friday-related phishing attempts rose 620% in the weeks before the holiday, with a further 20–30% increase expected during Black Friday week. Campaigns impersonate retailers and use fake deal sites to steal personal and payment data.
Team Cymru describes RADAR, a tool that uses PureSignal data to map linked internet-facing IPs, CIDR ranges and domains, then enriches results with tags for providers, open ports and systems carrying known vulnerabilities.
Huntress says its acquisition of Microsoft 365 security company Inside Agent will support an Identity Security Posture Management product planned for 2026. The company says existing Inside Agent tools, pricing, and support will remain unchanged for now.
Team Cymru says its analysis helped identify Rhadamanthys infrastructure as Europol-coordinated Operation Endgame disrupted 1,025 servers, seized 20 domains and led to an arrest in Greece.
Huntress reports education accounted for 21% of incidents it observed in 2024, including attacks involving exposed RDP, compromised RMM tools and attempted data theft. It recommends MFA, patching, tested backups and monitoring.
Wiz introduced Posture Issues, which group cloud vulnerability, secrets, or data findings under configurable policies to help teams prioritize remediation, track SLAs, and monitor security-posture progress.
Team Cymru says PureSignal RADAR uses observed network traffic to discover internet-facing assets and enrich them with context such as threat indicators, CVEs, and KEVs. The vendor describes uses in shadow IT and third-party risk assessment.
Hunt 2.7 updates its threat-hunting platform with expanded domain risk indicators, threat actor visibility on IP and domain pages, faster C2 listings and risk cards, and new AttackCapture filters and investigation pivots.
Huntress and DEFCERT created CMMC preparation resources, including responsibility matrices and documentation templates. Huntress Sensitive Data Mode limits which file extensions SOC analysts can retrieve from hosts, helping address CUI handling in assessments.
At its Wizdom 2025 conference, Wiz announced AI agents, Microsoft 365 security integration, agentless workload threat detection, expanded AI security posture management, and attack surface management, with several features entering public preview.
DarkOwl’s roundup highlights ransomware and data-breach claims, a $15 billion crypto seizure, malware campaigns, Salesforce-related extortion, actively exploited vulnerabilities, and a breach affecting 17.6 million Prosper accounts.
A leaked Cellebrite briefing screenshot reportedly says its tools can extract data from stock Pixel 6–9 phones in BFU, AFU and unlocked states, while updated GrapheneOS builds resist extraction. The claims are not independently verified.
DarkOwl added marketplace search, summaries, and listing details to Vision UI and API, alongside other search updates. The post also highlights curated information on several alleged data leaks, including an Allianz Life incident reportedly confirmed by the company.
Darktrace announced NEXT, combining network visibility with endpoint process telemetry to support automated threat investigations, alongside updates to network detection, response, and security-platform management.
Hunt 2.6 adds IP risk and reputation details, expands IOC Hunter sources and C2 infrastructure data, and updates its API, integrations, search, and investigation features.
Wiz found over 550 secrets in more than 500 VSCode and Open VSX extensions, including over 100 tokens that could enable malicious updates affecting a reported 150,000 installs. Microsoft revoked marketplace tokens and added secret scanning and blocking.
F5 reported a network compromise and data exfiltration that included some BIG-IP source code and vulnerability information. The NCSC advises identifying F5 products, securing management interfaces and installing F5’s latest security updates; no customer network impact,
Wiz introduced HoneyBee, an open-source tool that generates intentionally misconfigured Docker environments for honeypots, testing detections, and research. Wiz says its honeypots observed attackers exploiting exposed JDWP and weak PostgreSQL credentials.
A webinar discusses how the EU Cyber Resilience Act, NIS2 and the UK Cyber Security and Resilience Bill expand cybersecurity duties, including continuous monitoring, supply-chain oversight and incident reporting.
ThreatFabric says OneSpan has made a strategic investment to support its global fraud-prevention efforts. OneSpan will join ThreatFabric’s Board of Directors and Strategic Advisory Board.
Researchers tested about 75,000 AI-designed variants of 72 toxins against four DNA-order screening programs. Detection varied, and three packages were updated; the study relied on predicted structures and did not establish that the variants were functional toxins.
Google says Android 16 will add verification for sideloaded apps, with a $25 paid tier and a free hobbyist/student option. Checks may require internet access, and Google says harmful apps could trigger deactivation across a developer’s apps.
Huntress reviews 2025 threat trends, including cross-platform ClickFix lures, deepfake-enabled social engineering and attacks exploiting exposed ASP.NET machine keys for ViewState code injection.
A September threat intelligence roundup covers a fintech breach, phishing targeting diplomats, cybercrime arrests, FBI alerts, ransomware-related airport disruption, malware attacks on developer accounts and Android ad fraud.
