Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack 2026-10-12 80 Rob Wright True Prominent Ransomware Negotiator Faces Extortion Charges 2026-10-12 70 Alexander Culafi True ASOS Breach Reveals the Risks in Customer-Facing SaaS 2026-10-09 75 Nate Nelson True What We Missed: FBI Strikes Back at ShinyHunters 2026-10-09 78 Rob Wright, Alexander Culafi True Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too 2026-10-09 50 Arielle Waldman True 'AgentCorruption' Puts AWS Environments At Risk With Single Prompt 2026-10-08 70 Rob Wright True Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting 2026-10-08 78 Robert Lemos True Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift 2026-10-08 85 Jai Vijayan True Australian Gov't Weighs Mandatory AI Incident Reporting 2026-10-07 70 Nate Nelson True Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives 2026-10-07 50 Rob Wright True OpenAI Agent Escape Causes Wikimedia Service Outage 2026-10-07 50 Elizabeth Montalbano True ClickFix Attacks Evolve to Better Hide Malicious Payloads 2026-10-06 68 Alexander Culafi True Critical Healthcare Systems Aren't Quantum-Ready 2026-10-06 60 Jai Vijayan True Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps 2026-10-06 30 Elizabeth Montalbano True 'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates 2026-10-06 50 Alexander Culafi True ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes 2026-10-05 78 Jai Vijayan True Chinese Hackers Impersonate US Officials for AI Cyber Espionage 2026-10-05 85 Elizabeth Montalbano True Need for Speed: AI-Driven Attacks Are Changing Security Strategies 2026-10-05 60 Rob Wright True Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response 2026-10-02 80 Robert Lemos True SWIFT Banking & Government Middleware Enables RCE 2026-10-02 85 Nate Nelson True Is Your Organization Ready for 2027's AI Accountability Era? 2026-10-02 65 Arielle Waldman True Is It Fair to Blame 'Rogue' AI for Security Failures? 2026-10-02 35 Alexander Culafi True Malicious Linux Implants Mimic Asian Mail Security Products 2026-10-02 82 Nate Nelson True Alleged KillSec Ransomware Mastermind a 16-Year-Old 2026-10-01 78 Jai Vijayan True Warlock Ransomware Hits Large Spanish, Portuguese Orgs 2026-10-01 85 Nate Nelson True Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure 2026-09-30 75 Alexander Culafi True Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net 2026-09-30 85 Elizabeth Montalbano True South Africa Seeks Help After Cyberattack Targets Air Traffic Control 2026-09-30 75 Robert Lemos True Apple Zero-Day Vulnerability Weaponized in Targeted Attacks 2026-09-29 85 Jai Vijayan True Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution 2026-09-29 65 Alexander Culafi True 'NeedyMantis' Provides Long-Term Access to Compromised Networks 2026-09-29 80 Elizabeth Montalbano True Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers 2026-09-29 90 Rob Wright True One Packet Can Crash OT Servers in Industrial Sectors 2026-09-28 70 Jai Vijayan True Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts 2026-09-28 70 Alexander Culafi True Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions 2026-09-28 78 Nate Nelson True JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack 2026-09-28 75 Elizabeth Montalbano True What We Missed: Google Gemini Joins the AI Escape Party 2026-09-25 70 Rob Wright, Alexander Culafi True Stopping IT Worker Scams Requires Revamped HR Process 2026-09-25 85 Robert Lemos True Russia's Hybrid Cyber-Physical War in Europe Heats Up 2026-09-25 85 Alexander Culafi True 'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing 2026-09-24 55 Nate Nelson True SectopRAT Returns, Hiding Inside a Legitimate Application 2026-09-24 72 Jai Vijayan True 3 Cyber Threats That Defined the Summer of 2026 2026-09-24 85 Arielle Waldman True Ghost Service Accounts Enable M365 Data Theft in Chile 2026-09-24 70 Nate Nelson True Prompt-Injection Bug Hits $4B Agentic AI App 'Manus' 2026-09-24 70 Nate Nelson True EDR Evasion Stack Helps Process Injection Slip Past Defenses 2026-09-23 55 Alexander Culafi True GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks 2026-09-23 72 Rob Wright True UAE, Saudi Arabia Face Onslaught of Increasingly Complex Cyberattacks 2026-09-23 75 Robert Lemos True Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign 2026-09-23 70 Elizabeth Montalbano True Relays Are Masking Chinese Access to Frontier AI Models in the US 2026-09-22 70 Jai Vijayan True Microsoft Disrupts EvilTokens Device Code Phishing Service 2026-09-22 78 Alexander Culafi True