Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3800 articles
Seventy-three Microsoft GitHub repositories were disabled within 105 seconds, disrupting workflows using Azure Functions actions. Microsoft cited an internal management issue; a connection to the Miasma worm is unconfirmed.
Opal Security raised $23 million, bringing its total funding to $59 million. Its identity-governance platform provides visibility and policy enforcement across human, service, and AI-agent identities, with just-in-time access controls.
Federal agencies warned of malicious activity targeting Internet-exposed automatic tank gauges in the US. Shadowserver found 909 discoverable US devices after filtering honeypots; authorities urge operators to remove them from the Internet, patch, and strengthen access.
Toshiba and Muji warned of suspicious login prompts linked to polyfill[.]io; other Japanese organizations were also reportedly affected. Both companies say they resolved the issue, and there is no indication of hacking or credential theft.
The European Commission proposed a package to reduce reliance on foreign technology, including cloud sovereignty levels and funding for critical open-source security. The proposals require approval by the European Parliament and Council.
Researchers report npm campaigns distributing IronWorm and a new Miasma variant across dozens of packages. The malware steals developer and CI/CD secrets and spreads through package publishing and GitHub; attribution for the latest Miasma activity remains unclear.
A California man was sentenced to more than 26 years for selling methamphetamine and fentanyl through Nemesis Market, which German and U.S. authorities dismantled in March 2024, seizing infrastructure in Germany and Lithuania.
Microsoft’s dispute with researcher Nightmare Eclipse over public zero-day disclosures has renewed debate about coordinated vulnerability disclosure. The article says three of six flaws were exploited before patching and describes competing accounts of the disclosure.
ESET identified Asin, an unattributed Android spyware campaign using fake news, PDF, and war-update apps. The lures suggest possible targeting of Arabic-speaking journalists and OSINT researchers.
U.S. agencies warn that attackers are compromising internet-exposed automatic tank gauge systems through flaws including hardcoded credentials and command-execution weaknesses. Shadowserver observed 1,061 exposed devices, 909 in the U.S.; agencies urge restricting and —
OWASP has adopted CVE Lite CLI as an Incubator Project. The open-source, OSV-powered scanner checks JavaScript and TypeScript lockfiles for vulnerable npm, pnpm and Yarn dependencies and recommends replacement commands, according to its developer.
SecurityWeek’s roundup covers AI-assisted malware delivery, ransomware and banking-trojan activity, exploited tank gauge systems, Ultrahuman’s data breach, a Hola Browser supply-chain compromise, and an unpatched Comodo firewall flaw.
Metropolitan Police cybercrime chief William Lyne warned that ransomware groups are splintering into smaller, more volatile factions, while AI, cryptocurrencies and police-industry collaboration are reshaping the cybercrime ecosystem.
Google released Chrome 149 with patches for 429 vulnerabilities, including more than 100 critical- and high-severity flaws. One ANGLE vulnerability could let remote attackers escape the browser sandbox using a crafted HTML page.
Five Eyes agencies warn that Chinese military intelligence officers use fake job listings to solicit sensitive information from government and military-connected candidates, sometimes paying for increasingly sensitive reports.
Russia’s Supreme Court will consider banning Belarusian Cyber Partisans and Silent Crow as extremist groups. The move follows their claims of cyberattacks, including the July 2025 Aeroflot incident that disrupted more than 100 flights.
The FTC is seeking public comment on whether to modify or set aside its 2022 settlement with Twitter, now X, over allegations that account-security data was used for targeted ads. X says the order is outdated; a decision is expected after July 2.
Two sources said Palantir CTO Shyam Sankar was a leading contender to lead CISA, but a White House official disputed the reported selection. The agency remains without a Senate-confirmed director as it prepares to implement a new AI executive order.
Sansec reports a Magecart campaign targeting Magento/Adobe Commerce checkout pages. It uses Google Tag Manager and Stripe’s API to deliver a skimmer and store stolen payment data; a variant uses Google Firestore.
DTEX researchers found that Claude Cowork could access and transfer sensitive data from business apps and endpoint files using simple prompts. They warn that weak logging, monitoring and access controls can make AI-driven insider threats harder to detect.
House Democrats say a draft FY2027 DHS bill cuts CISA funding by $250 million; Republicans say it provides $2.4 billion and reallocates $100 million to core missions. A House subcommittee was set to vote on the bill.
Flare researchers say a forum post by “Hercules,” reposted across four forums, gives beginners a workflow for finding, validating and monetizing vulnerabilities. Replies seeking mentorship highlight its potential as a recruitment channel.
JFrog says IronWorm infected 36 npm packages, stealing developer secrets and spreading with stolen publishing credentials. Ox Security says the attack was stopped before reaching more popular packages; developers are advised to upgrade, rotate keys, and enable 2FA.
Industry leaders say AI is accelerating vulnerability discovery beyond remediation. XBOW found a WAF bypass and exposed API key in a Moderna trial; subsequent SQL-injection testing disrupted dependent apps. Cisco’s eBPF-based Live Protect aims to shield flaws pending P
