CyberFeed: Security News

Advisories, disclosures and breach reporting, newest first. Aggregated, not triaged — a headline here is a starting point, not a verdict on whether it affects you.

Hackers steal sensitive data from major banking industry vendor

Cybersecurity Dive - Latest News•Nov 24, 2025

Matrix Push C2 abuses browser notifications to deliver phishing and malware

Malwarebytes•Nov 24, 2025

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability

SecurityWeek•Nov 24, 2025

Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications

Cybersecurity and Infrastructure Security Agency CISA•Nov 24, 2025

SEC drops SolarWinds lawsuit

Latest from ITPro •Nov 24, 2025

CrowdStrike Insider Helped Hackers Falsely Claim System Breach

SecurityWeek•Nov 24, 2025

Years-old bugs in open source tool left every major cloud open to disruption

The Register - Security•Nov 24, 2025

New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions

The Hacker News•Nov 24, 2025

SCCM and WSUS in a Hybrid World: Why It’s Time for Cloud-native Patching

BleepingComputer•Nov 24, 2025

OWASP Top 10 2025 Updates: Supply Chain, Secrets, And Misconfigurations Take Center Stage

Security Boulevard•Nov 24, 2025

Gainsight says additional applications put on hold after Salesforce customers breached

Cybersecurity Dive - Latest News•Nov 24, 2025

Delta Dental of Virginia data breach impacts 145,918 customers

Security Affairs•Nov 24, 2025

Intrusion at real estate finance biz sparks concern for big banks

The Register - Security•Nov 24, 2025

Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

BleepingComputer•Nov 24, 2025

Vulnerability Summary for the Week of November 17, 2025

Cybersecurity and Infrastructure Security Agency CISA•Nov 24, 2025

US banks scramble to assess data theft after hackers breach financial tech firm

Security News | TechCrunch•Nov 24, 2025

Shai-Hulud worm returns, belches secrets to 25K GitHub repos

The Register - Security•Nov 24, 2025

Harvard University discloses data breach affecting alumni, donors

BleepingComputer•Nov 24, 2025

AWS S3-Buckets im Visier von Ransomware-Banden

CSPM buyer’s guide: How to choose the best cloud security posture management tools | CSO Online•Nov 24, 2025

True Cybersecurity Story: How FreakyClown Robs Banks

Cybercrime Magazine•Nov 24, 2025

Invisible battles: How cybersecurity work erodes mental health in silence and what we can do about it

CSPM buyer’s guide: How to choose the best cloud security posture management tools | CSO Online•Nov 24, 2025

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

The Hacker News•Nov 24, 2025

JPMorgan, Citi, Morgan Stanley assess fallout from SitusAMC data breach

Neue ClickFix-Kampagne nutzt Fake-Windows-Updates | CSO Online•Nov 24, 2025

Elite Cyber Veterans Launch Blast Security with $10M to Turn Cloud Detection into Prevention

Security Boulevard•Nov 24, 2025

The Generative AI Security Dilemma: Rethinking Data Protection in a Post-Compliance Era

Cyber Security News Archives - Cyber Defense Magazine•Nov 24, 2025

Mazda Says No Data Leakage or Operational Impact From Oracle Hack

SecurityWeek•Nov 24, 2025

Attackers deliver ShadowPad via newly patched WSUS RCE bug

Security Affairs•Nov 24, 2025

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

The Hacker News•Nov 24, 2025

To buy or not to buy: How cybercriminals capitalize on Black Friday

Securelist•Nov 24, 2025

Simulating attacks: how to use tabletop exercises in incident response

Latest from ITPro •Nov 24, 2025

CyberFeed: Security News

Hackers steal sensitive data from major banking industry vendor

Matrix Push C2 abuses browser notifications to deliver phishing and malware

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability

Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications

SEC drops SolarWinds lawsuit

CrowdStrike Insider Helped Hackers Falsely Claim System Breach

Years-old bugs in open source tool left every major cloud open to disruption

New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions

SCCM and WSUS in a Hybrid World: Why It’s Time for Cloud-native Patching

OWASP Top 10 2025 Updates: Supply Chain, Secrets, And Misconfigurations Take Center Stage

Gainsight says additional applications put on hold after Salesforce customers breached

Delta Dental of Virginia data breach impacts 145,918 customers

Intrusion at real estate finance biz sparks concern for big banks

Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

Vulnerability Summary for the Week of November 17, 2025

US banks scramble to assess data theft after hackers breach financial tech firm

Shai-Hulud worm returns, belches secrets to 25K GitHub repos

Harvard University discloses data breach affecting alumni, donors

AWS S3-Buckets im Visier von Ransomware-Banden

True Cybersecurity Story: How FreakyClown Robs Banks

Invisible battles: How cybersecurity work erodes mental health in silence and what we can do about it

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

JPMorgan, Citi, Morgan Stanley assess fallout from SitusAMC data breach

Elite Cyber Veterans Launch Blast Security with $10M to Turn Cloud Detection into Prevention

The Generative AI Security Dilemma: Rethinking Data Protection in a Post-Compliance Era

Mazda Says No Data Leakage or Operational Impact From Oracle Hack

Attackers deliver ShadowPad via newly patched WSUS RCE bug

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

To buy or not to buy: How cybercriminals capitalize on Black Friday

Simulating attacks: how to use tabletop exercises in incident response

Subscribe to my newsletter

Stay Alert

Warning

Snooze Alerts

CyberFeed: Security News

Hackers steal sensitive data from major banking industry vendor

Matrix Push C2 abuses browser notifications to deliver phishing and malware

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability

​​Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications​

SEC drops SolarWinds lawsuit

CrowdStrike Insider Helped Hackers Falsely Claim System Breach

Years-old bugs in open source tool left every major cloud open to disruption

New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions

SCCM and WSUS in a Hybrid World: Why It’s Time for Cloud-native Patching

OWASP Top 10 2025 Updates: Supply Chain, Secrets, And Misconfigurations Take Center Stage

Gainsight says additional applications put on hold after Salesforce customers breached

Delta Dental of Virginia data breach impacts 145,918 customers

Intrusion at real estate finance biz sparks concern for big banks

Shai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

Vulnerability Summary for the Week of November 17, 2025

US banks scramble to assess data theft after hackers breach financial tech firm

Shai-Hulud worm returns, belches secrets to 25K GitHub repos

Harvard University discloses data breach affecting alumni, donors

AWS S3-Buckets im Visier von Ransomware-Banden

True Cybersecurity Story: How FreakyClown Robs Banks

Invisible battles: How cybersecurity work erodes mental health in silence and what we can do about it

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

JPMorgan, Citi, Morgan Stanley assess fallout from SitusAMC data breach

Elite Cyber Veterans Launch Blast Security with $10M to Turn Cloud Detection into Prevention

The Generative AI Security Dilemma: Rethinking Data Protection in a Post-Compliance Era

Mazda Says No Data Leakage or Operational Impact From Oracle Hack

Attackers deliver ShadowPad via newly patched WSUS RCE bug

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

To buy or not to buy: How cybercriminals capitalize on Black Friday

Simulating attacks: how to use tabletop exercises in incident response

Subscribe to my newsletter

Stay Alert

Warning

Snooze Alerts

Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications