Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3804 articles
Wiz announced a cloud security CTF series with one advanced challenge each month. The first focuses on AWS security and includes hints and a scoring system. Find it at cloudsecuritychampionship[.]com.
Hunt 2.3 updates its threat-hunting platform with phishing investigation workflows, bulk domain enrichment for C2s and IOCs, analyst notes and observations, HuntSQL guidance and downloads, and SAML 2.0 SSO support.
DarkOwl reports DDoS claims, alleged data leaks and other hacktivist activity amid the Iran-Israel conflict, while noting that some claims—including attacks on US targets—were unverified or unsupported by evidence.
Huntress Managed ITDR can now disable and re-enable AD-synced identities in Microsoft 365 and on-premises Active Directory through an agent on domain controllers, preventing directory sync from re-enabling compromised accounts.
Wiz’s cloud-attack retrospective draws on detections across thousands of environments, highlighting exploitation of exposed PAN-OS appliances, weak PostgreSQL credentials, phishing, and persistence via cron jobs.
As Israel and Iran exchanged strikes on June 13, hacktivist groups on Telegram claimed attacks on Israeli targets and data theft, while another group called for volunteers to target Israel. The claims are not independently verified.
Hunt.io 2.2 adds automatic ZIP extraction and file search, expanded threat-intelligence datasets, consolidated IP history, a view of malicious hosting infrastructure, and Splunk integration for C2 and IOC feeds.
Huntress says its Managed EDR now monitors macOS XProtect and Microsoft Defender for Endpoint alerts, with its SOC investigating signals and offering response actions.
Huntress announced a security-awareness training simulator with interactive threat scenarios, starting with OSINT. The company says more than 24,000 learners completed its optional first simulation during a month of early access.
The proposed UK Cyber Security and Resilience Bill would expand NIS-style regulation to MSPs and data centres, introduce faster incident reporting, and strengthen supply-chain security duties.
A roundup covers FBI impersonation scams, DDoS-for-hire takedowns, malware campaigns, ransomware activity and international law-enforcement actions, including arrests and seizures.
Wiz’s Service Catalog is in public preview, grouping cloud resources and security findings by service to clarify ownership, consolidate recurring issues, and help developers prioritize remediation.
Hunt.io 2.1 adds threat-data analysis, IOC enrichment, threat-actor aliases, infrastructure pivots and platform updates. The company also says it fixed a protocol mismatch that had caused about 400,000 daily collections to fail.
CloudSEK says it raised $19 million across Series A2 and B1 rounds, with funding intended to advance its predictive cybersecurity platform and support global expansion.
BreachForums went offline in April 2025, prompting copycat domains and rival reboot efforts. The reported MyBB zero-day and law-enforcement involvement remain unverified; admins warned that clone sites could be phishing lures or honeypots.
Wiz says its internally adopted WizOS Linux base images use reproducible builds, source-built and signed components, and testing to reduce inherited container vulnerabilities. The images are now in private preview for Wiz customers.
Huntress introduced a local API for checking EDR agent health and component versions, with a PowerShell example and support for RMM-based checks across Windows and macOS endpoints.
A public GitHub repository exposed credentials for an IT training company’s resource management system. The company revoked and rotated them, tightened access, audited permissions, and enforced MFA; no unauthorized access was reported.
A security review found publicly accessible API documentation, a Postman workspace that may contain authentication tokens, and an outdated SAP component at a semiconductor company, creating risks of unauthorized access and disruption.
A cybersecurity news roundup covers the KidFlix takedown, phishing and malware campaigns, a claimed hack of 4chan, FBI warnings about impersonation scams, and arrests tied to a cryptocurrency investment scam.
DarkOwl announced Q1 Vision UI updates for team case management, saved findings, leak visualizations and alert timelines. It also reported growth in collected leak records and summarized several publicly advertised data-leak claims.
Darktrace says its Cyber AI Analyst conducted 90 million investigations in 2024. The company is adding DIGEST, which predicts threats likely to escalate, and DEMIST-2, a cybersecurity-focused language model that can run locally.
A Wiz recap of KubeCon Europe 2025 highlights talks on Kubernetes network security, access control for AI agents, prompt security, and software composition analysis limits against container image obfuscation.
CloudSEK says its XVigil service detects fake social media pages, ads, groups, and channels impersonating brands, then alerts security and communications teams so they can pursue takedowns.
