WP Maps Pro bug exploited to create admin accounts on WordPress sites 2026-05-31 True Bill Toulas True Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks 2026-05-30 True Lawrence Abrams True New CIFSwitch Linux flaw gives root on multiple distributions 2026-05-30 True Bill Toulas True ChatGPT share links abused to host fake outage pages to deliver malware 2026-05-29 True Lawrence Abrams True California AG sues 23andMe over 2023 breach exposing health data 2026-05-29 True Bill Toulas True From $5 Attacks to Botnet-Powered Platforms: Inside the DDoS-as-a- Service Market 2026-05-29 True Sponsored by Flare True Dutch govt disrupts malware botnet with 17 million infected devices 2026-05-29 True Bill Toulas True Man sent to prison for selling data of 7 millions elderly Americans 2026-05-29 True Sergiu Gatlan True US charges Google security engineer with Polymarket insider trading 2026-05-29 True Sergiu Gatlan True Charter Communications data breach affects 4.9 million accounts 2026-05-29 True Sergiu Gatlan True GreyVibe hackers use ChatGPT, Gemini to power cyberattacks 2026-05-28 True Bill Toulas True BTMOB Android malware service generates custom phishing payloads 2026-05-28 True Bill Toulas True FBI warns of fake FIFA websites running World Cup fraud schemes 2026-05-28 True Bill Toulas True Hackers exploit FortiClient EMS flaw to push infostealer malware 2026-05-28 True Bill Toulas True New Gogs zero-day flaw lets hackers get remote code execution 2026-05-28 True Sergiu Gatlan True Romanian gets 5 years in prison for hacking Oregon govt network 2026-05-28 True Sergiu Gatlan True Carnival Cruise confirms data breach affecting nearly 6 million people 2026-05-28 True Sergiu Gatlan True Sextortionist sentenced to 33 years for targeting 145 children 2026-05-28 True Sergiu Gatlan True GPU mining malware spreads via SEO poisoning, AI chatbots 2026-05-27 True Ionut Ilascu True Glassworm botnet disrupted after resilient C2 infrastructure takedown 2026-05-27 True Ionut Ilascu True FBI warns of in-person data theft attacks from extortion gang 2026-05-27 True Sergiu Gatlan True CISA gives feds 4 days to patch actively exploited cPanel plugin flaw 2026-05-27 True Sergiu Gatlan True Dutch police arrests suspect linked to Ajax football club hack 2026-05-27 True Sergiu Gatlan True KnowledgeDeliver flaw exploited as a zero-day to install web shells 2026-05-26 True Ionut Ilascu True Charter confirms data breach after ShinyHunters extortion threat 2026-05-26 True Lawrence Abrams True CISA orders feds to patch actively exploited Drupal vulnerability 2026-05-26 True Sergiu Gatlan True Microsoft: Domain Controller lookup may fail on Windows Server 2016 2026-05-26 True Sergiu Gatlan True 7-Eleven data breach exposes personal information of 185,000 people 2026-05-26 True Sergiu Gatlan True Anthropic’s restricted Claude Mythos model may be coming to Claude Code 2026-05-25 True Mayank Parmar True FBI warns of Kali365 phishing service targeting Microsoft 365 accounts 2026-05-25 True Lawrence Abrams True Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign 2026-05-24 True Bill Toulas True Laravel Lang packages hijacked to deploy credential-stealing malware 2026-05-23 True Lawrence Abrams True Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes 2026-05-23 True Bill Toulas True Netherlands seizes 800 servers of hosting firm enabling cyberattacks 2026-05-22 True Bill Toulas True Former US execs plead guilty to aiding tech support scammers 2026-05-22 True Sergiu Gatlan True Trend Micro warns of Apex One zero-day exploited in the wild 2026-05-22 True Sergiu Gatlan True Drupal: Critical SQL injection flaw now targeted in attacks 2026-05-22 True Bill Toulas True Ubiquiti patches three max severity UniFi OS vulnerabilities 2026-05-22 True Sergiu Gatlan True Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet 2026-05-21 True Sponsored by Flare True Chinese hackers target telcos with new Linux, Windows malware 2026-05-21 True Bill Toulas True Max severity Cisco Secure Workload flaw gives Site Admin privileges 2026-05-21 True Sergiu Gatlan True Police seize “First VPN” service used in ransomware, data theft attacks 2026-05-21 True Bill Toulas True Microsoft warns of new Defender zero-days exploited in attacks 2026-05-21 True Sergiu Gatlan True GitHub links repo breach to TanStack npm supply-chain attack 2026-05-21 True Sergiu Gatlan True Ukraine identifies infostealer operator tied to 28,000 stolen accounts 2026-05-20 True Bill Toulas True Hackers bypass SonicWall VPN MFA due to incomplete patching 2026-05-20 True Bill Toulas True Grafana breach caused by missed token rotation after TanStack attack 2026-05-20 True Bill Toulas True Drupal critical update to fix bug with high exploitation risk 2026-05-20 True Bill Toulas True Exploit released for new PinTheft Arch Linux root escalation flaw 2026-05-20 True Sergiu Gatlan True GitHub confirms breach of 3,800 repos via malicious VSCode extension 2026-05-20 True Sergiu Gatlan True