The Hacker News
- Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers [2h]
- Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy [2h]
- Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data [2h]
- Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts [3h]
- New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value [8h]
- CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key [1d]
- Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script [1d]
- FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist [1d]
- NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection [1d]
- Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data [2d]
BleepingComputer
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacks [1h]
- Synology warns of C3RB3R ransomware attacks targeting NAS devices [2h]
- Ivanti patches two more Connect Secure zero-days chained in attacks [4h]
- FBI links $6.3 billion Binance crypto heist to North Korean hackers [18h]
- Alpine Linux rebuilds GitLab after attempted RCE attack [22h]
- OpenAI says it's doubling Pro usage limits and bringing Work features to Chat [1d]
- Northflank security breach leads to abuse of customers' AI API keys [1d]
- New Android SMS of Death exploit can remotely crash unpatched phones [1d]
- Reddit to lock content behind logins to fight scrapers [1d]
- From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era. [2d]
- Chainalysis discloses data breach from "offensive agentic techniques" [2d]
- Critical Linux kernel flaw allows remote root attacks on MPTCP servers [2d]
- Trezor warns of suspected crypto-theft implant in hardware wallet [2d]
- Malicious Claude Code extension on Cursor planted SSH backdoors [2d]
Dark Reading
- [Virtual Event] Cybersecurity Outlook 2027 [now]
- [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI [now]
- Devs Hit by Trojanized Claude Code Extension for Cursor [2d]
- Behind the Scenes of How Operation Blackout Went Down [2d]
- L’Italia è afflitta da vulnerabilità informatiche, senza una causa chiara [2d]
- Undead Software Projects Continue to Raise Security Risks [2d]
The Record
- Second wave of suspected cyberattacks hits supermarket freezers across Europe [1h]
- FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions [14h]
- DOJ raises privacy concerns over potential sale of Character.AI chats [2d]
- Fashion retailer Resolve says hackers stole payment card information [2d]
- Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach [2d]
- Syrian Electronic Army hacker gets prison time for attacks on Western targets [2d]
CyberScoop
- Could Nick Andersen’s leadership outlast the clock on his acting role? [3h]
- Federal court tosses Trump lawsuit challenging Alaska Senate certification [15h]
- China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days [2d]
- Apple notifications alert victims in 99 countries about mercenary spyware infections [2d]
- California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment [2d]
- Defense contractor pleads guilty to aiding North Korean remote worker scheme [2d]
- Syrian hacker who served Assad regime gets 42 months in US prison [2d]