FBI director Kash Patel’s brand website taken offline after malware reports
FBI director Kash Patel’s brand website taken offline after malware reports Pierluigi Paganini May 25, 2026 The merchandise website of...
after
GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP...
Grafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft
Grafana has confirmed that an unauthorized party gained access to its GitHub environment after obtaining a compromised token, allowing the...
OpenAI Warns Mac Users to Update Apps After Supply-Chain Attack
OpenAI is telling Mac users to update its apps by June 12 after a developer-focused supply chain attack exposed code-signing...
Two Unpatched Windows Exploits Target BitLocker, SYSTEM Access
Microsoft’s quiet Patch Tuesday did not stay quiet for long. Soon after Microsoft released a May security update with no...
Canvas Breach Hackers Reach Deal After Claiming 275M Records Stolen
Hackers behind the Canvas breach have reached a deal with Instructure after claiming they stole data tied to nearly 9,000...
New WhatsApp Flaws Could Affect Billions of Users After Meta Security Patch
WhatsApp users should update their apps after Meta patched two flaws that could make risky files and links harder to...
CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure
CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure Pierluigi Paganini April 29, 2026 Attackers quickly exploited a critical LiteLLM...
New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs
Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the project...
Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign
A cybercrime group of Brazilian origin has resurfaced after more than three years to orchestrate a campaign that targets Minecraft...
When Geopolitics Writes Your Compliance Roadmap
Cyber policy has always lagged cyber reality. Regulations arrive after breaches, frameworks emerge after failures, and accountability structures materialize long...
Your MTTD Looks Great. Your Post-Alert Gap Doesn’t
Anthropic restricted its Mythos Preview model last week after it autonomously found and exploited zero-day vulnerabilities in every major operating...
Alleged RedLine malware developer extradited to United States
A man has appeared in federal court in Austin, Texas, after being extradited to the United States to face charges...
Gmail Finally Lets You Change Your Email Address Without Losing Anything
Image: Justin Morgan/Unsplash After more than two decades, US users can now change their Gmail username without losing a single...
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the...