Cybersecurity News
Aggregated daily from 25 sources. Updated automatically every morning.
CISA
NCSC UK
SANS ISC
The Hacker News
Bleeping Computer
Krebs on Security
Dark Reading
SecurityWeek
Exploit-DB
CERT-In
Google Project Zero
PortSwigger Research
Check Point Research
Cisco Talos
CrowdStrike
Unit 42
Elastic Security Labs
SentinelOne
WithSecure Labs
Avast Threat Labs
ZDI
0days in the Wild
Lakera AI Security
Embrace the Red
Simon Willison
OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will get access.. [...]
Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters. [...]
OpenAI has committed to subsidizing access to Daybreak, helping defenders deploy its AI models in its existing cybersecurity infrastructure
The G7 has published a call to action, urging governments to launch national strategies dedicated to the post-quantum encryption transition
Pegasus infected a Serbian student activist's iPhone through an iMessage zero-click exploit
Outsider phishing kit generated 700 new pages after a Google-led disruption
CREST’s new AI-enabled penetration testing accreditation welcomes its first 10 providers
Thomson Reuters has disclosed a cyber incident affecting its C-Track court management software, potentially exposing court records in Canada and the US
The FBI is investigating how scans of over 153 million driver’s licenses are being sold on the dark web
US-led action sinkholes machines caught up in Sality botnet
Russian man extradited to US over malware campaign that targeted 80,000 freelance users
Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud
The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party
SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild
Threat group FulcrumSec claims MAG breach and leaks 550GB of data online
Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000
EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope
Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid rising nation-state threats
The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI
ShinyHunters claims to have stolen 284 million records from McKesson
A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations with over 26,000 malicious messages
More than 100 companies, including OpenAI, Anthropic, Google and Microsoft, have urged collective action to unlock the power of AI to protect critical public services
Aurora ransomware operators are abusing SpaceX’s Cursor Agent AI tool to conduct tasks such as reconnaissance and exploitation activities
Customer data linked to bookings and airport Wi-Fi registrations at Manchester, Stansted and East Midlands airports has been accessed by an unauthorized third party
The FBI advisory set out QTFY’s distributed hacking ecosystem, allowing it to exploit vulnerabilities at scale and obfuscate its activities
CISA added six new bugs to its Known Exploited Vulnerabilities catalog on August 26, showing signs of active exploitation in the wild
MedTech giant Boston Scientific has revealed IT outages following a cyber incident
OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach
Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool
Interpol operation leads to 58 arrests and identifies 263 suspects across 22 countries