Cybersecurity news
Latest cybersecurity news on breaches, vulnerabilities, zero-day exploits and the people fixing them.
- Apple reveals how tiny silicon fortresses keep your camera and microphone data locked up tight
Original headline: Apple Reveals How Secure Exclaves Shield Camera and Microphone Data
securityweek.com ·
- CISA warns of actively exploited flaws in Check Point gear and UnrealIRCd servers
Original headline: U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog
securityaffairs.com ·
- Tech giants play 'compliance theater' while harmful content slips through
Original headline: Big Tech takes a beating as online safety experts accuse companies of doing bare minimum
theregister.com ·
- Global Surveillance Exposed: Ad-Tracking Tech Goes Rogue in Hands of Intelligence
Original headline: Security Agencies Worldwide Found to Use Ad-Based Surveillance System
citizenlab.ca ·
- Home Assistant's 'key to your home' is actually a sticky note on the fridge
Original headline: Home Assistant: the password is not the key – token secrets in cleartext
seclists.org ·
- Android malware now uses AI to profile your bank account before stealing everything
Original headline: ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
darkreading.com ·
- FBI: AI tool 'Artex' supercharges cyberattacks, letting hackers breach systems in hours
Original headline: FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
therecord.media ·
- Nationwide ground stop halts all US flights after air traffic control system failure
Original headline: FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’
securityweek.com ·
- AI Hacking Tools Are Now a Standard Threat – And They're Scary Good
Original headline: ARTEX and beyond: AI-enabled penetration testing platforms
blog.talosintelligence.com ·
- AI-Hunting Explodes Bug Count Past 100,000
Original headline: This year’s bug count just passed 100K
theregister.com ·
- Who Impersonates a Personal Blog? A Bizarre Case of Low-Stakes Identity Theft.
Original headline: Someone's Impersonating This Blog
mattbee.mataroa.blog ·
- Osaka breach exposes 1M emails as Japan faces wave of cascading cyberattacks
Original headline: City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents
therecord.media ·
- PostgreSQL patches 22-year-old bug allowing authenticated users to run code on the server
Original headline: PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
thehackernews.com ·
- Google tells Android devs: Your sensitive clipboard data is your problem, not ours.
Original headline: Ctrl+C, Ctrl+v, Ctrl+cve: Bypassing Android's Clipboard Read Security Measures
toninoble.com ·
- German drone maker's update server hacked, disrupting military operations
Original headline: German military drone operations disrupted by cyberattack
bleepingcomputer.com ·
- University Hit by Qilin Ransomware Gang, Student Data Stolen
Original headline: University of Texas at Arlington warns personal information stolen during cyberattack
therecord.media ·
- Project Zero declares 90-day security fixes obsolete in the AI era
Original headline: Policy and Disclosure: 2026 Edition
projectzero.google ·
- Germany votes to let its spies hack and sabotage foreign targets
Original headline: German parliament passes law giving spy agencies hacking, sabotage powers
therecord.media ·
- Massive Brazil insurer breach leaks tax IDs of all 7.6 million customers
Original headline: Brazil's Caixa insurer breach exposes names and tax IDs of all 7.6M customers
filemanager-cdn.mziq.com ·
- Major flaw in AMD's 'secure' VM tech lets rogue cloud hosts steal secrets
Original headline: New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs
thehackernews.com ·
- International Cops Seize 235 Servers and 6.4M Stolen Logins in Major Malware Takedown
Original headline: Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins
thehackernews.com ·
- DOJ dismantles Gootloader botnet after 44 ransomware attacks caused $29M in damages
Original headline: DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018
therecord.media ·
- Shadow AI agents are sneaking into your company, and nobody has the keys
Original headline: How one AI agent exposed five critical enterprise security gaps
bleepingcomputer.com ·
- Feds Seize & Disrupt Major Gootloader Malware Botnet
Original headline: Gootloader Malware Disrupted After Infecting 25,000 Computers
securityaffairs.com ·
- FBI agent stole $2.5M in crypto, tanking cases, as AI agents went rogue
Original headline: In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach
securityweek.com ·
- TSMC employee data breached via unnamed cloud provider
Original headline: TSMC confirms employee data breach tied to cloud service provider
therecord.media ·
- Buy a Crypto Wallet, Get a Hidden Spy Chip Free
Original headline: Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases
thehackernews.com ·
- Massive Patch Tuesday Hits 1,100 Vulnerabilities as OpenSSH Flaw Exploited
Original headline: This Week In Security: Four-Digit Patch Tuesday, SSH Exploited, GitBook Breach, Android GhostMap
hackaday.com ·
- Ransomware cripples Belarusian cloud provider, disrupting major businesses
Original headline: Ransomware attack on Belarusian cloud firm disrupts businesses for days
therecord.media ·
- North Korean hackers stole $400 million using deepfake video calls and fake meetings
Original headline: FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls
thehackernews.com ·