What everyone is covering
Stories covered in the last 30 days, ranked by how many different newsrooms reported them in that time. Counts cover only that window. Single reports follow.
All topics
AIAutosBusinessClimateConsumerCryptoEconomicsEntertainmentFinanceGamingGovernmentHealthLocalPoliticsScienceSecuritySportsTechTop NewsU.S.WeatherWorld
- 26newsrooms Ahold Delhaize Takes Grocery Websites and Apps Offline After Cyberattack
- 23newsrooms FBI Arrests Suspects Tied to ShinyHunters Hack of Agency Jobs Portal
- 12newsrooms Microsoft Patches Record 1,400+ Flaws in October 2026 Patch Tuesday
- 11newsrooms Chinese-Linked Hackers Breach ConnectWise Cloud Backup, Exposing Microsoft 365 Tenants
- 10newsrooms Microsoft and Partners Disrupt Chinese-Language Phishing Kit Network
- 6newsrooms Hackers Exploit Plex2Shell Flaws to Hijack Unpatched Plex Servers
- 6newsrooms FBI Seizes Domains Tied to Flax Typhoon Hacking Tools
- 5newsrooms Ivanti Connect Secure Zero-Day Exploited, Patches Incomplete
- 5newsrooms LiteLLM Python Package Compromised in Supply Chain Attack
- 5newsrooms Ukrainian-Russian Dual Citizen Pleads Guilty to Leading Money Mule Laundering Scheme
- 5newsrooms CenterPoint Energy Data Breach Affects Over 1 Million Texans
- 5newsrooms Cyberattack on BAE Systems Disrupts US Federal Bankruptcy Court Notices
- 4newsrooms GitLab Patches Critical Unauthenticated Code Execution Flaw Affecting Releases Since 2014
- 4newsrooms 'Midnight Mimosa' Malware Found Preinstalled on Budget Android Phones
- 4newsrooms Citrix Patches Critical NetScaler Flaw CVE-2026-107406 Enabling Possible RCE
- 4newsrooms SonicWall SMA1000 Flaw CVE-2026-102255 Exploited Days After Patch
- 4newsrooms Cisco Secure Email Gateway Zero-Day Actively Exploited for Root Access
- 4newsrooms UK Legal Aid Agency Hack Exposes Records Dating Back to 1978
- 4newsrooms China-Linked Group Exploited BeyondTrust Remote Support Zero-Day Since August
- 4newsrooms Serbian University Rector's Phone Infected With Pegasus Spyware Before Election
- 4newsrooms Hackers Plant Secret-Stealing Malware in OVHcloud CLI Releases on GitHub
- 4newsrooms Interpol's Operation Serengeti III Arrests 1,462 in Africa Cybercrime Sweep
- 4newsrooms Russia-Linked Hackers Wipe Ukrainian Grain Firm's Data Using Yggdrasil Network
- 3newsrooms Hackers Earn $1.26 Million Exploiting 98 Zero-Days at Pwn2Own Ireland
- 3newsrooms Unpatched AhsayCBS Flaws Exploited to Deploy Webshells and Crypto Miners
- 3newsrooms Norway Fines Microsoft Unit Xandr $9.6M Over Grindr User Data
- 3newsrooms Hirudo Android Trojan Replaces Banking Apps to Bypass Security Checks
- 3newsrooms Palo Alto Networks Patches Exploited PAN-OS Remote Code Execution Flaw
- 3newsrooms Rank Math PRO WordPress Plugin Compromised by Malware in Supply Chain Attack
- 3newsrooms AOMEI Backupper Update Servers Hacked to Distribute Malware
- 2newsrooms Tensorlake npm Package Compromised in Shai-Hulud Credential-Stealing Attack
- 2newsrooms AWS Bedrock AgentCore Flaw Could Let Attackers Hijack AI Agents
- 2newsrooms P7 DarkSword: New iPhone Spyware Variant Steals Crypto Wallet Data
- 2newsrooms GWU Researchers Propose Formula to Predict When AI Chatbots Turn Bad
- 2newsrooms Four More U.S. States Sue TP-Link Over Router Security and China Ties
- 2newsrooms Germany Arrests Alleged Qilin Ransomware Member Extradited from Japan
- 2newsrooms iRhythm Data Breach Exposes Personal Information of At Least 360,000 Patients
- 2newsrooms Malware Breach at Nippon Columbia Exposes 8.7 Million Karaoke Customer Records
- 2newsrooms Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw
- 2newsrooms Dark Reading Names Fahmida Y. Rashid as New Editor-in-Chief
- 2newsrooms GitLab Patches Maximum-Severity Code Execution Vulnerability in CI/CD
- 2newsrooms SAP Patches Maximum-Severity OAuth2 Flaw in Cloud SDK for Python
- 2newsrooms North Korean Hackers Phish Ukrainian Experts for Russia War Intel
- 2newsrooms Docker Fixes Critical Docker Hub Flaw Allowing Image Impersonation
- 2newsrooms Microsoft Patches Always On VPN Issues From September Windows Updates
- 2newsrooms Hackers Exploit Collabora CODE Flaw to Backdoor Nextcloud Servers
- 2newsrooms Hackers Hijack D-Link and Ubiquiti Devices to Resell Victims' Bandwidth
- 2newsrooms Biomemory Launches DNA Shield for Storing Data in Synthetic DNA
- 2newsrooms US Cybersecurity Job Postings Fall 26% as AI Security Demand Rises
- 2newsrooms Microsoft's October Windows Server Updates Disrupt Exchange Sign-In and Mail Flow
- 2newsrooms Microsoft Fixes Windows 11 Audio Bug That Crashed Games and Apps
- 2newsrooms Attackers Exploit Siemens Software Center Flaw in ClickFix Malware Campaign
- 2newsrooms Bullhorn Staffing Platform Offline After Cyberattack
- 2newsrooms Nikkei Discloses Third Data Breach in a Month Exposing 1.8M Records
- 2newsrooms Russia-Linked APT28 Hackers Breach NATO Defense Contractors and Police Agency
- 2newsrooms Nigerian National Sentenced to 8 Years for Hacking US Tax Firms
- 2newsrooms Ransomware Groups Exploit Palo Alto Networks Flaw CVE-2026-0257
- 2newsrooms FBI and CISA Warn of SafePay Ransomware Attacks on 600+ Organizations
- 2newsrooms Hackers Use Stolen UpdraftCentral Keys to Backdoor WordPress Sites
- 2newsrooms Accenture, Dragos and SANS Launch $10M Program to Defend Small US Utilities
- 2newsrooms Attackers Hijack 300+ Tor Exit Relays to Intercept SSH Logins
- 2newsrooms Democrat Lawmakers Say Russia Runs Misinformation Campaign Against Democrats Ahead of Midterms
- 2newsrooms Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day
Single reports · 184
Articles no other newsroom has matched yet, newest first. Some are brand-new stories.
- Trust Is Not What It Seems — And Fraudsters Are Counting on It
- Microsoft Teams to get AI-powered, context-aware phishing detection
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
- Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
- AI Tools Are Generating Massive Attacks for Little Cost
- Microsoft: Windows Server 2016 reaches end of support in January
- You gave your AI agent access, but who is giving it orders?
- Why Caribbean Threats Cascade Into Global Cyber-Risk
- Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
- Cyber Insurance's New Reality: Underwriting Isn't Enough
- HPE patches eight max severity RCE and auth bypass AOS flaws
- Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
- Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
- Atlassian Patches 75 Flaws in Data Center and Server Products
- Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
- Microsoft shares how to fix broken Exchange Online EWS apps
- Hacker Conversations: Corey Thuen and the Evil Bit
- As AI Risks Grow, Insurers Split on Covering the Damage
- Machine speed attacks require machine speed detection and response
- Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
- South Carolina officials offer assistance after state capital hit with cyberattack
- The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
- Splunk, SolarWinds Release Fresh Security Updates
- OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
- Cisco Patches 34 Vulnerabilities Across Multiple Products
- Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
- New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
- UAE Transitions 50% of Gov't Services to Agentic AI
- Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
- TiDB Breach Exposes Flawed Cloud Security Assumptions
- Lazarus hackers use post-quantum cryptography for malware delivery
- Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
- Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
- Optiv Launches CyberBOT Cybersecurity Awareness Training Program
- Survey Finds High-Profile Executives Feel Untouchable as Digital Exposure Turns Into Physical Risk
- ‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets
- High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
- ClickFix has never been bigger, and AI tools are its most convincing lure yet
- Decades-Old Windows Utility Powers Modern ClickFix Attack
- Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
- China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
- Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports
- The Harness Is the Hard Part of Agentic Pentesting
- Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor
- Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
- Zeabur shutting down after second security breach in two months
- US Agencies Detail Incident Response Practices for Rogue AI Agents
- Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
- Close Identity Gaps in Software Development Before Unleashing AI
- Anti-Putin messages disrupt nationwide school assessments in Russia
- CJIS v6.1 Compliance: 5 Practical Priorities for Agencies
- The Key to AI Software Security Isn’t Speed, It’s Maturity
- AI Platform Cairn Abused to Hack Over 100 Organizations
- What Security Teams Can Do To Tame Wild Code
- Windows Server 2025 gets support for quick machine recovery
- 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
- Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
- Researchers Infiltrate Microsoft Tech Support Scam Operation
- 'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery
- Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
- Russian social media giant VK faces disruptions after data center drone strike
- Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
- OnlyFans Copyright Takedowns Expose Compromised Websites
- Inside the Underground Market for Know Your Client Services
- The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience
- F5 releases out-of-band patches for critical NGINX vulnerabilities
- GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
- Microsoft fixes classic Outlook bug that hid Copilot buttons
- From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
- Hackers steal customer data from major Russian hosting provider FirstVDS
- Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
- Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
- MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks
- Anthropic Acquires Confidential AI Startup Opaque Systems
- Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root
- Drupal patches critical RCE flaws, warns exploits may emerge soon
- MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
- BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
- Critical BlockStrap flaw lets hackers run code on Magento servers
- Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
- Enterprise AI Enters Risk Management Phase as Security Concerns Rise
- AI Takes Control of Robotic Arm in 16 Minutes Flat
- Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
- Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
- UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
- Employees using personal ChatGPT at work? Here's what IT admins need to do
- Moscow detains suspected DataSuckers hackers linked to breaches in Ukraine and Russia
- Baltimore suburb confirms August data breach after ransomware claims
- When AI Agents Commit Breaches, Humans May Not Be Held Liable
- Burger King Japan data breach exposes 11 million customer records
- AI Decision Models and Their Impact on AI SOC Platforms
- F5, Juniper Networks Patch Critical Vulnerabilities
- Microsoft Patches Two Dozen RCE Flaws in Office
- PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
- SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape
- F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud
- AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
- Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
- Context Is King in the Fight Against Modern Cyberattacks
- Fake Arch Linux packages push malware with root privileges
- Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
- Vulnerability Management Isn't About the Score — It's About How It Applies to You
- Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
- Is AI pentesting as good as a human pentester?
- Suspected Kazakhstan-linked hackers target governments across former Soviet states
- Microsoft: Windows Server 2022 reached end of mainstream support
- NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
- Drupal Patches Critical Core RCE Flaw with No-Login Path via Contributed Modules
- Police arrests 95 suspects in international CSAM crackdown action
- Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
- CikaBika Bot RAT Uses Discord for C&C
- Why AI Confidence Is Not Validation
- India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1
- Microsoft fixes bug causing Windows black screens, Explorer crashes
- GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
- CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
- Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
- AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
- North Macedonian police arrest alleged administrator behind OLVX cybercrime market
- Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
- AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
- ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw
- U.K. Sanctions Cryptomus for RU Money Laundering
- The Blind Spots of Agentic Pentesting and How to Close Them
- Russian travel booking platform suspends reservations after cyberattack
- Russian Influence Operation Widely Targeting Latin America
- curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
- How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team
- An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.
- Microsoft: Recent Windows updates may trigger Remote Desktop failures
- AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
- Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
- SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
- Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
- Ransomware Gangs Embrace Physical Threats, Family Stalking?
- Ghostscript flaw lets hackers hijack servers via PDF uploads
- FTC: Company netted at least $60 million charging sextortion victims for help it didn’t provide
- Microsoft: Windows 11 24H2 Home and Pro reached end of support
- UK Housing Ombudsman Service investigates 'security incident'
- Adobe Patches 140 Vulnerabilities Across 10 Products
- Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says
- The MFA Gaps Attackers are Still Exploiting
- Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers
- [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
- XWorm RAT Evolves Into Surveillance Platform
- LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
- AI Turns Familiar Cyberattacks Into a Race Against Time
- Product Walkthrough: Bitdefender AI Visibility and Control
- Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
- No Identity, No Recovery: Cyber Resilience Starts With IAM
- Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
- Microsoft: Windows 11 23H2 reaches end of support in 30 days
- CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
- Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management
- The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
- Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
- Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
- AI Scramble Drives Cybersecurity M&A Boom
- Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
- Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too
- Belarusian hacktivists admit to 2023 breach of Russian state healthcare network
- How to keep AI agents within their permissions
- Social Engineering AI Agents: The New BEC for 2026
- Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
- Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
- Google Domains Impacted by Recent ccTLD Hijacks
- The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition
- Microsoft: Outdated Windows devices will stop receiving security updates
- GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys
- Ransomware attack disrupts Japan's IDCF Cloud used by govt clients
- Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
- FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
- Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
- FakeGit malware campaign returns with 17,610 malicious GitHub repos
- Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
- Cisco Patches a Dozen Critical Vulnerabilities
- UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
- Cisco warns of critical flaws allowing Nexus switch takeover
- OAuth grants pile up faster than you can review them. Here's how to keep up.
- Writing the Next Chapter
- Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
- 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
- U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks