Cybersecurity News
Aggregated daily from 25 sources. Updated automatically every morning.
CISA
NCSC UK
SANS ISC
The Hacker News
Bleeping Computer
Krebs on Security
Dark Reading
SecurityWeek
Exploit-DB
CERT-In
Google Project Zero
PortSwigger Research
Check Point Research
Cisco Talos
CrowdStrike
Unit 42
Elastic Security Labs
SentinelOne
WithSecure Labs
Avast Threat Labs
ZDI
0days in the Wild
Lakera AI Security
Embrace the Red
Simon Willison
Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud
Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal
The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party
SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild
Threat group FulcrumSec claims MAG breach and leaks 550GB of data online
Elastic Security Labs deep dives into REVSTEALER, an emerging infostealer targeting browsers, wallets, and gaming accounts.
Marimo 0.20.4 - RCE
Fullhan FH8626V100 - Multiple Vulnerabilities
Langflow 1.10.0 - RCE
Ghost_CMS 6.19.0 - Remote Code Execution
PodcastGenerator 3.2.9 - Stored XSS
Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
EVerest 2025.9.0 - DoS
Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000
We reproduced five Linux fileless execution patterns with FENIX, including memfd_create staging, interpreter one-liners, deleted binaries, and in-memory kernel module loads, then mapped each to the Elastic Defend rules that catch it.
EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope
Project Watershed 250 will see water providers in Texas provided with federal and private sector cybersecurity resources amid rising nation-state threats
The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI
ShinyHunters claims to have stolen 284 million records from McKesson
Experts from Recorded Future and Accenture offer perspectives on navigating the path to becoming an agentic SOC. Find out how to plan moving beyond “AI theater” by prioritizing measurable KPIs, proactively mitigating autonomous security risks, and evolving the analyst’s role from managing alerts to managing agents.
EasyAppointments 1.5.1 - Blind SQL Injection
miniOrange 5.4.3 - Unauthenticated Auth Bypass
Grav CMS 2.0.7 - RCE
Bludit CMS - Stored XSS
Payload CMS 3.72.0 - Blind SQL Injection
Wolf CMS 0.8.3.1 - RCE v
Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news
Langflow 1.8.4 - Path Traversal to Remote Code Execution
Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
CubeCart 6.7.4 - Cross-Site Scripting