The Hacker News
- DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment [1h]
- Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers [4h]
- Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy [4h]
- Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data [4h]
- Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts [5h]
- New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value [10h]
- CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key [1d]
- Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script [1d]
- FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist [1d]
- NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection [1d]
BleepingComputer
- BTCPay Server warns of hot wallet thefts targeting outdated instances [56m]
- Your Mobile Carrier Stores Your Call Logs for Years [58m]
- Hackers disrupt refrigeration systems at European supermarkets [1h]
- Microsoft fixes Smart App Control broken by October Windows update [2h]
- Over 1,000 GitLab servers vulnerable to ongoing RCE attacks [3h]
- Synology warns of C3RB3R ransomware attacks targeting NAS devices [4h]
- Ivanti patches two more Connect Secure zero-days chained in attacks [6h]
- FBI links $6.3 billion Binance crypto heist to North Korean hackers [20h]
- Alpine Linux rebuilds GitLab after attempted RCE attack [1d]
- OpenAI says it's doubling Pro usage limits and bringing Work features to Chat [1d]
- Northflank security breach leads to abuse of customers' AI API keys [1d]
- New Android SMS of Death exploit can remotely crash unpatched phones [2d]
- Reddit to lock content behind logins to fight scrapers [2d]
- From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era. [2d]
- Chainalysis discloses data breach from "offensive agentic techniques" [2d]
- Critical Linux kernel flaw allows remote root attacks on MPTCP servers [2d]
Dark Reading
- [Virtual Event] Cybersecurity Outlook 2027 [now]
- [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI [now]
- Microsoft's AI Risk Report Misses This Key Detail [1h]
- PapRAT Cyber Espionage Campaign Leaves a 'BITTER' Taste in South Asia [2h]
- Investors Dish on New Startups & What They'd Back Next [2d]
- Devs Hit by Trojanized Claude Code Extension for Cursor [2d]
- Behind the Scenes of How Operation Blackout Went Down [2d]
The Record
- Apple warns users in 99 countries of mercenary spyware [1h]
- Russian and Ukrainian hackers hijack emergency apps to spread fake nuclear attack warnings [1h]
- Second wave of suspected cyberattacks hits supermarket freezers across Europe [3h]
- FBI blames N. Korea’s TraderTraitor for Binance theft, urges crypto industry to block transactions [16h]
- DOJ raises privacy concerns over potential sale of Character.AI chats [2d]
- Fashion retailer Resolve says hackers stole payment card information [2d]
CyberScoop
- Could Nick Andersen’s leadership outlast the clock on his acting role? [5h]
- Federal court tosses Trump lawsuit challenging Alaska Senate certification [17h]
- China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days [2d]
- Apple notifications alert victims in 99 countries about mercenary spyware infections [2d]