Skip to content

CyberFeed: Security News

Advisories, disclosures and breach reporting, newest first. Aggregated, not triaged — a headline here is a starting point, not a verdict on whether it affects you.

Meet Fragnesia, the third Linux kernel vulnerability in a month

Microsoft disrupts malware code-signing service used by ransomware gangs | CSO Online•

An Engineer’s Post Protesting Laptop Surveillance Is Going Viral Inside Meta

Feed: Artificial Intelligence Latest•

White House cyber official: identity security matters more than ever in the age of AI

CyberScoop•

Sandworm Hackers Pivot From Compromised IT Systems Toward Critical OT Assets

Cyber Security News•

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

BleepingComputer•

Advertisement

Chinese APT Hackers Exploit Microsoft Exchange to Breach Energy Sector Network

Cyber Security News•

Google announces hackers are using AI to create zero days.

The CyberWire•

OpenAI confirms security breach in TanStack supply chain attack

BleepingComputer•

Trump’s Tech Posse in China, Who’s Winning in Musk v. Altman, and Hantavirus Conspiracy Theories

Feed: Artificial Intelligence Latest•

U.S. CISA adds a flaw in Cisco Catalyst SD-WAN  to its Known Exploited Vulnerabilities catalog

Security Affairs•

New Malware Framework Enables Screen Control, Browser Artifact Access, and UAC Bypass

Cyber Security News•

Zero-day exploit completely defeats default Windows 11 BitLocker protections

Security - Ars Technica•

node-ipc npm Package with 822K Weekly Downloads Compromised in Supply Chain Attack

Cyber Security News•

Linux Kernel bug Fragnesia allows local root access attacks

Security Affairs•

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

The Hacker News•

Advertisement

Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets

The Hacker News•

Hackers Compromise 170 npm Packages to Steal GitHub, npm, AWS, and Kubernetes Secrets

Cyber Security News•

CISA Adds One Known Exploited Vulnerability to Catalog

Cybersecurity and Infrastructure Security Agency CISA•

Critical Canon MailSuite Vulnerability Enables Remote Code Execution Attacks

Cyber Security News•

TeamPCP and BreachForums Hackers Running $1,000 Contest for Supply Chain Attacks

Cyber Security News•

OpenAI says hackers stole some data after latest code security issue

Security News | TechCrunch•

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

The Hacker News•

Disgruntled researcher discloses two Windows zero-days.

The CyberWire•

18-year-old NGINX vulnerability allows DoS, potential RCE

BleepingComputer•

More money is going to physical security, but it’s often CISOs that oversee it: EY

Cybersecurity Dive - Latest News•

New Critical Exim Mailer Allows Remote Attacker to Execute Arbitrary Code

Cyber Security News•

Cyber-Enabled Cargo Crime: How Cybercrime Tradecraft is Used to Steal Freight

BleepingComputer•

What is continuous authentication?

Latest from ITPro •

West Pharmaceutical starts restoring operations after ransomware attack

Cybersecurity Dive - Latest News•

Siemens Ruggedcom Rox

Cybersecurity and Infrastructure Security Agency CISA•

Sponsored Links

Subscribe to my newsletter

Receive my case study and the latest articles on my WhatsApp Channel.

Warning
Ask CyberROX AI