Application security’s real crisis isn’t missing findings it’s five scanners producing five contradictory backlogs nobody owns. Instead of treating…
Tag: Cyber Security News
Splunk Patches Critical 9.8 Flaw Allowing Unauthenticated Remote Command Execution
Splunk has released security updates to fix a critical Splunk Enterprise vulnerability that could let an attacker run operating system commands without…
Top 10 Best SCA Tools in 2026 [Ranked & Scored]
Nine-tenths of the average codebase arrived via package manager, and attackers noticed years ago. With modern breaches increasingly originating from…
Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use
Anthropic has released Claude Haiku 5.5, its newest small AI model. The company says it is the cheapest, fastest, and most capable small model it has ever…
U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research
The U.S. Department of State is offering up to $10 million for information on Zhang Yu, a Chinese national accused of helping hackers target American…
Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data
Elastic published 14 security advisories covering Elasticsearch, Kibana, and Elastic Agent/Endpoint, including a high-severity Kibana flaw that lets…
Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use.
Anthropic has released Claude Haiku 5.5, its newest small AI model. The company says it is the cheapest, fastest, and most capable small model it has ever…
FBI Warns FortiBleed Attack Compromised 80,000+ Devices and Locked Out Admins
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…
Alert Overload, Tool Sprawl and Evasive Phishing: The 5 Bottlenecks Slowing Down US SOCs
US security operations centers are not short on security products. They are short on time, people and context. Current industry research suggests the…
Discord Users’ Data Exposed in Security Bot Double Counter Security Breach
Double Counter, a Discord security bot, has disclosed a breach that exposed user data after an attacker broke into its cloud systems on October 4, 2026.…
CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator
CrowdStrike announced its fourth annual Cybersecurity Startup Accelerator on October 6, 2026, expanding its collaboration with Amazon Web Services and…
FBI Warns of FortiBleed Attack Compromising 80,000+ Devices and Locking Out Admins
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…
Hackers Hijack .gh, .sl and .as Registry to Obtain Unauthorized HTTPS Certificates
Hackers compromised the .gh, .sl and .as country-code domain registries and used their access to obtain unauthorized HTTPS certificates for Google and…
FortiBleed Attack Campaign Exploiting Fortinet Firewalls and VPNs – FBI Warns
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…
Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware
Earth Sirrush is hiding espionage malware inside PNG images and malicious Notepad++ plugins to compromise Ukrainian organizations. The Russia-aligned…
Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People
Hackers breached two major South Korean churches, exposing more than one million congregant records and extensive financial and administrative data. The…
CyberXero Combines Claude Code, PentAGI and Cobalt Strike in AI-Augmented Cyberattacks
CyberXero has emerged as an initial access broker that combines familiar hacking tools with artificial intelligence to run large-scale intrusions. The…
PoC Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access
A proof-of-concept exploit has been released for CVE-2026-21589, a critical arbitrary file-read vulnerability affecting multiple self-managed Atlassian…
Hackers Compromise 100+ Websites With Fake Cloudflare Checks to Spread LUNEXSTEALER
Hackers compromised more than 100 websites and used fake Cloudflare verification pages to spread LUNEXSTEALER, a Windows malware capable of stealing…
SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10
SonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 Series appliances, including a critical server-side request forgery…