Google security engineer accused of turning confidential search trends into $1.2M win on Polymarket 2026-05-28 True Matt Kapko True Zapier fixes bug chain that researchers say risked widespread account takeover 2026-05-28 True Greg Otto True FBI warns US-based law firms to be on the lookout for cybercrime group that steals data in person 2026-05-27 True Matt Kapko True CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain 2026-05-27 True Greg Otto True Anthropic: Mythos finds more than 10,000 software flaws in first month 2026-05-26 True Greg Otto True FBI warns about fast-growing phishing kit targeting Microsoft 365 users 2026-05-22 True Matt Kapko True Alleged leader of Kimwolf, a sweeping botnet for cybercriminals, arrested in Canada 2026-05-21 True Matt Kapko True CISA chief frets about open-source vulnerabilities, delayed security improvements 2026-05-21 True Tim Starks True European authorities take down prolific cybercrime VPN service 2026-05-21 True Matt Kapko True GitHub says internal repositories were impacted in poisoned VS Code extension attack 2026-05-20 True Greg Otto True CISA credential leak raises alarms, and Capitol Hill demands answers 2026-05-19 True Tim Starks True Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches 2026-05-19 True Matt Kapko True Mini Shai-Hulud returns, compromising hundreds of npm packages 2026-05-19 True Greg Otto True Microsoft disrupts cybercrime service that abused software verification systems en masse 2026-05-19 True Matt Kapko True Interpol leads cybercrime crackdown across 13 countries in Middle East, North Africa 2026-05-18 True Matt Kapko True The Canvas breach proved that prevention is no longer enough 2026-05-18 True Greg Otto True Colorado governor commutes prison sentence for election denier Tina Peters 2026-05-15 True djohnson True Cisco zero-day under ongoing attack by persistent threat group 2026-05-15 True Matt Kapko True Major tech manufacturer Foxconn confirms cyberattack hit North American factories 2026-05-14 True Matt Kapko True Researchers say AI just broke every benchmark for autonomous cyber capability 2026-05-13 True Greg Otto True ‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply-chain attack 2026-05-12 True Greg Otto True Microsoft addresses 137 vulnerabilities in May’s Patch Tuesday, including 13 rated critical 2026-05-12 True Matt Kapko True Pressure mounts on Canvas as data leak extortion deadline looms 2026-05-11 True Matt Kapko True Google spotted an AI-developed zero-day before attackers could use it 2026-05-11 True Matt Kapko True Flaw in Claude’s Chrome extension allowed ‘any’ other plugin to hijack victims’ AI 2026-05-08 True djohnson True Ivanti customers confront yet another actively exploited zero-day 2026-05-07 True Matt Kapko True American duo sentenced for hosting laptop farms for North Korean IT workers 2026-05-07 True Greg Otto True A DOD contractor’s API flaw exposed military course data and service member records 2026-05-06 True Greg Otto True A critical Palo Alto PAN-OS zero-day is being exploited in the wild 2026-05-06 True Matt Kapko True CISA wants critical infrastructure to operate ‘weeks to months’ in isolation during conflict 2026-05-05 True djohnson True Latvian national sentenced for ransomware attacks run by former Conti leaders 2026-05-05 True Matt Kapko True ‘Copy Fail’ is a real Linux security crisis wrapped in AI slop 2026-05-04 True Matt Kapko True Why data centers now belong on the critical infrastructure list 2026-05-04 True Greg Otto True Former incident responders sentenced to 4 years in prison for committing ransomware attacks 2026-04-30 True Matt Kapko True cPanel’s authentication bypass bug is being exploited in the wild, CISA warns 2026-04-30 True Greg Otto True Two new extortion crews are speedrunning the Scattered Spider playbook 2026-04-30 True Matt Kapko True Chinese national extradited to US for pandemic-era Silk Typhoon attacks 2026-04-28 True Matt Kapko True Senators seek answers about hackers obtaining sensitive student data from ostensibly anonymous tip line 2026-04-27 True Tim Starks True BlackFile actively extorting data-theft victims in retail and hospitality sector 2026-04-27 True Matt Kapko True Vercel attack fallout expands to more customers and third-party systems 2026-04-23 True Matt Kapko True US, UK agencies warn hackers were hiding on Cisco firewalls long after patches were applied 2026-04-23 True Greg Otto True Dragos: Despite AI use, new malware targeting water plants is ‘hype’ 2026-04-23 True djohnson True Surveillance campaigns use commercial surveillance tools to exploit long-known telecom vulnerabilities 2026-04-23 True Tim Starks True A dozen allied agencies say China is building covert hacker networks out of everyday routers 2026-04-23 True Greg Otto True Former DigitalMint ransomware negotiator pleads guilty to extortion scheme 2026-04-21 True Matt Kapko True Scottish man pleads guilty to attack spree that created Scattered Spider’s notoriety 2026-04-21 True Matt Kapko True Lawmakers ponder terrorism designations, homicide charges over hospital ransomware attacks 2026-04-21 True Tim Starks True Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution 2026-04-20 True djohnson True The FTC’s AI portfolio is about to get bigger 2026-04-20 True djohnson True Vercel’s security breach started with malware disguised as Roblox cheats 2026-04-20 True Matt Kapko True