Microsoft Urges Windows 11 Users to Install Updates Within Three Days
Microsoft warns attackers are increasingly using AI to accelerate exploitation of newly disclosed vulnerabilities, shrinking the time organizations have to...
attackers
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting...
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on...
The Verification Step Is the New ATO Battleground in 2026
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools,...
Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living....
Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware
Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone...
Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data
New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned...
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
Ravie LakshmananJun 29, 2026Cybersecurity / Hacking This week was a reminder that attackers do not always need big tricks. One...
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Pierluigi Paganini June 08, 2026 Hackers exploit CVE-2026-3300 in Everest...
Hackers Spied on a Stock Exchange Executive’s Outlook Mailbox for Five Months
Swati KhandelwalJun 04, 2026Cyber Espionage / Malware Unknown attackers spent at least five months inside the Outlook mailbox of a...
Defenders fall behind, as AI rewrites the rules of a data breach
For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon...
Developer Workstations Are Now Part of the Software Supply Chain
Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the...
Mac Users Warned Over Fake Claude Install Instructions
Mac users searching for Claude could be one copied command away from handing attackers a way into their machines. BleepingComputer...
ShinyHunters Extorts Universities in New Instructure Canvas Hack
ShinyHunters-linked attackers defaced Canvas portals, disrupting finals week access and exposing SaaS security risks for schools. The post ShinyHunters Extorts...
