Skip to content

CyberFeed: Security News

Advisories, disclosures and breach reporting, newest first. Aggregated, not triaged — a headline here is a starting point, not a verdict on whether it affects you.

Flaws in four popular VS Code extensions left 128 million installs open to attack

Hacker stiehlt Daten von Tausenden RTL-Mitarbeitern | CSO Online•

Job scam uses fake Google Forms site to harvest Google logins

Security Boulevard•

Job scam uses fake Google Forms site to harvest Google logins

Malwarebytes•

China-linked APT weaponized Dell RecoverPoint zero-day since 2024

Security Affairs•

Keenadu: Android malware that comes preinstalled and can’t be removed by users

Compromised npm package silently installs OpenClaw on developer machines | CSO Online•

Advertisement

AI Found Twelve New Vulnerabilities in OpenSSL

Security Boulevard•

Carelessness versus craftsmanship in cryptography

Security Boulevard•

From Shadow APIs to Shadow AI: How the API Threat Model Is Expanding Faster Than Most Defenses

Security Boulevard•

New Book Challenges Security Leaders to Look Beyond Technology to Solve Today’s Hardest Risks

Cyber Defense Wire•

Securin 2025 Ransomware Report Finds AI Accelerating, Not Replacing, Human-Led Attack

Cyber Defense Wire•

Cybersecurity Tech Predictions for 2026: Operating in a World of Permanent Instability

The Hacker News•

New Research Reveals APIs are the Single Most Exploited Attack Surface

Cyber Defense Wire•

EdTech Magazine | What Minimum Viable Cybersecurity Looks Like for K–12 Districts

Security Boulevard•

Building an Effective Incident Response Strategy to Combat Cyberattacks 

Security Boulevard•

‘AI is making us able to develop software at the speed of light’: Mistral CEO Arthur Mensch thinks 50% of SaaS solutions could be supplanted by AI

Latest from ITPro •

Advertisement

Cyberangriff auf Bahn stört Auskunftssysteme

Compromised npm package silently installs OpenClaw on developer machines | CSO Online•

Millions of developers could be impacted by flaws in Visual Studio Code extensions – here's what you need to know and how to protect yourself

Latest from ITPro •

Prompt Control is the New Front Door of Application Security 

Security Boulevard•

HackerOne 'updating' Ts&Cs after bug hunters question if they're training AI

The Register - Security•

From repatriation to replatforming: The cloud story no one wants to tell

Anna Sánchez Simó (Volkswagen Distribución): “El coche es el IoT más grande que existe” | CIO•

Cybersecurity News: Hacking protestors, UK “locks the door,” Kenyan politician phone cracked

Cybersecurity Headlines Archives - CISO Series•

Discipline is the new power move in cybersecurity leadership

Compromised npm package silently installs OpenClaw on developer machines | CSO Online•

U.S. CISA adds Google Chromium CSS, Microsoft Windows, TeamT5 ThreatSonar Anti-Ransomware, and Zimbra flaws to its Known Exploited Vulnerabilities catalog

Security Affairs•

Dutch police arrest man for “hacking” after accidentally sending him confidential files

GRAHAM CLULEY•

Glendale man gets 5 years in prison for role in darknet drug ring

BleepingComputer•

CredShields Leads OWASP Smart Contract Top 10 2026 as Governance and Access Failures Drive Onchain Risk

Compromised npm package silently installs OpenClaw on developer machines | CSO Online•

Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since Mid-2024

The Hacker News•

CISA: Hackers Exploiting Vulnerability in Product of Taiwan Security Firm TeamT5

SecurityWeek•

Security Metrics That Actually Predict a Breach

Security Boulevard•

Cloud sovereignty: squaring compliance with innovation

Rethinking virtualization in the age of AI | CIO•

Sponsored Links

Subscribe to my newsletter

Receive my case study and the latest articles on my WhatsApp Channel.

Warning
Ask CyberROX AI