CyberFeed: Security News

Advisories, disclosures and breach reporting, newest first. Aggregated, not triaged — a headline here is a starting point, not a verdict on whether it affects you.

Weak passwords meet strong motives

The CyberWire•Dec 11, 2025

Notepad++ fixes flaw that let attackers push malicious update files

BleepingComputer•Dec 11, 2025

Russian hackers debut simple ransomware service, but store keys in plain text

The Register - Security•Dec 11, 2025

Malicious VSCode Marketplace extensions hid trojan in fake PNG file

BleepingComputer•Dec 11, 2025

CISA Unveils Enhanced Cross-Sector Cybersecurity Performance Goals

Cybersecurity and Infrastructure Security Agency CISA•Dec 11, 2025

GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration

Security Affairs•Dec 11, 2025

From Chatbot to Code Threat: OWASP’s Agentic AI Top 10 and the Specialized Risks of Coding Agents

Security Boulevard•Dec 11, 2025

NDSS 2025 – URVFL: Undetectable Data Reconstruction Attack On Vertical Federated Learning

Security Boulevard•Dec 11, 2025

Here’s what Oracle’s soaring infrastructure spend could mean for enterprises

ソフトウェアサプライチェーンの透明化が問い直す企業の信頼――SBOM世界標準化の現在地と日本企業が講ずべき生存戦略 | CIO•Dec 11, 2025

SAML authentication broken almost beyond repair

How to create a ransomware playbook that works | CSO Online•Dec 11, 2025

CISA Adds One Known Exploited Vulnerability to Catalog

Cybersecurity and Infrastructure Security Agency CISA•Dec 11, 2025

Battering RAM hardware hack breaks secure CPU enclaves

How to create a ransomware playbook that works | CSO Online•Dec 11, 2025

Rethinking Security as Access Control Moves to the Edge

Security Boulevard•Dec 11, 2025

Identity Management in the Fragmented Digital Ecosystem: Challenges and Frameworks

Security Boulevard•Dec 11, 2025

Google fixed a new actively exploited Chrome zero-day

Security Affairs•Dec 11, 2025

OpenAI Launches GPT-5.2 as It Navigates ‘Code Red’

Feed: Artificial Intelligence Latest•Dec 11, 2025

1 Week Left: How to Claim Up to $7,500 From AT&T's $177 Million Data Breach Settlement

PCMag.com - Technology Product Reviews, News, Prices & Tips•Dec 11, 2025

Was Your Info Leaked in Petco's Data Breach? Here's How to Find Out

PCMag.com - Technology Product Reviews, News, Prices & Tips•Dec 11, 2025

New GetReal Security Research: 41% of Enterprises Surveyed Report Having Hired and Onboarded Fraudulent Candidates

Cyber Defense Wire•Dec 11, 2025

Commvault and Delinea Partner to Strengthen Protection and Resilience Against Credential-Based Attacks

Cyber Defense Wire•Dec 11, 2025

Adapt or be deceived: The shape-shifting nature of fraud

ソフトウェアサプライチェーンの透明化が問い直す企業の信頼――SBOM世界標準化の現在地と日本企業が講ずべき生存戦略 | CIO•Dec 11, 2025

UK fines LastPass over 2022 data breach impacting 1.6 million users

BleepingComputer•Dec 11, 2025

Attackers Worldwide are Zeroing In on React2Shell Vulnerability

Security Boulevard•Dec 11, 2025

AIs Exploiting Smart Contracts

Security Boulevard•Dec 11, 2025

Cyberattacks force small firms to raise prices: ITRC

Cybersecurity Dive - Latest News•Dec 11, 2025

Intelligence agencies warn of Russian hacktivists targeting critical infrastructure.

The CyberWire•Dec 11, 2025

DroidLock malware locks you out of your Android device and demands ransom

Malwarebytes•Dec 11, 2025

LastPass hammered with £1.2M fine for 2022 breach fiasco

The Register - Security•Dec 11, 2025

The Shady Emails Keep Coming. It's Time to Fight Back Against Spear Phishing

PCMag.com - Technology Product Reviews, News, Prices & Tips•Dec 11, 2025

Grid-scale battery energy storage systems face heightened risk of cyberattack

Cybersecurity Dive - Latest News•Dec 11, 2025

CyberFeed: Security News

Weak passwords meet strong motives

Notepad++ fixes flaw that let attackers push malicious update files

Russian hackers debut simple ransomware service, but store keys in plain text

Malicious VSCode Marketplace extensions hid trojan in fake PNG file

CISA Unveils Enhanced Cross-Sector Cybersecurity Performance Goals

GeminiJack zero-click flaw in Gemini Enterprise allowed corporate data exfiltration

From Chatbot to Code Threat: OWASP’s Agentic AI Top 10 and the Specialized Risks of Coding Agents

NDSS 2025 – URVFL: Undetectable Data Reconstruction Attack On Vertical Federated Learning

Here’s what Oracle’s soaring infrastructure spend could mean for enterprises

SAML authentication broken almost beyond repair

CISA Adds One Known Exploited Vulnerability to Catalog

Battering RAM hardware hack breaks secure CPU enclaves

Rethinking Security as Access Control Moves to the Edge

Identity Management in the Fragmented Digital Ecosystem: Challenges and Frameworks

Google fixed a new actively exploited Chrome zero-day

OpenAI Launches GPT-5.2 as It Navigates ‘Code Red’

1 Week Left: How to Claim Up to $7,500 From AT&T's $177 Million Data Breach Settlement

Was Your Info Leaked in Petco's Data Breach? Here's How to Find Out

New GetReal Security Research: 41% of Enterprises Surveyed Report Having Hired and Onboarded Fraudulent Candidates

Commvault and Delinea Partner to Strengthen Protection and Resilience Against Credential-Based Attacks

Adapt or be deceived: The shape-shifting nature of fraud

UK fines LastPass over 2022 data breach impacting 1.6 million users

Attackers Worldwide are Zeroing In on React2Shell Vulnerability

AIs Exploiting Smart Contracts

Cyberattacks force small firms to raise prices: ITRC

Intelligence agencies warn of Russian hacktivists targeting critical infrastructure.

DroidLock malware locks you out of your Android device and demands ransom

LastPass hammered with £1.2M fine for 2022 breach fiasco

The Shady Emails Keep Coming. It's Time to Fight Back Against Spear Phishing

Grid-scale battery energy storage systems face heightened risk of cyberattack

Subscribe to my newsletter

Stay Alert

Warning

Snooze Alerts