Our own breakdowns of what happened
Broadcom Wi-Fi Setup Bug Hands Routers to Nearby Attackers, With No Patch in Sight
A researcher says a Broadcom WPS flaw lets nearby attackers run code as root on millions of routers, with no CVE or fix.
Read full story →PwnEscape: Malformed IPv4 Packets Could Let a Guest Break Out of Linux KVM
Magento's BlockStrap Bug Earns Perfect CVSS 10 as Sansec Predicts Rapid Exploitation
Stolen ConnectWise Backup App Credential Opens Door to Over 170 Microsoft 365 Tenants
Attackers used a stolen ConnectWise Cloud Backup app credential to sign in to Microsoft 365 tenants, some with admin roles.
Read full story →Millions of Healthcare Customers Hit in Major Data Breach; What You Need to Know
AdaptHealth reports 4.1 million patients exposed after July cyberattack; experts warn of broader industry vulnerabilities.
Read full story →Cisco Secure Firewall Management Center Under Active Attack Following Security Flaw Discovery
Trezor Cryptocurrency Users Face New Security Threat After Email System Compromised
Hardware wallet firm Trezor alerts customers following unauthorized access to email systems, raising phishing risks.
Read full story →Hackers Are Stealing AI Service Passwords to Break Into Company Accounts
Criminals are using stolen login credentials to hijack AI tools from major providers, creating security gaps companies need to patch fast.
Read full story →Multiple Hacking Groups Exploit Same Security Flaws in Popular Software
Four different spy operations used identical vulnerabilities in Chrome and Windows within days, raising alarms about shared attack tools.
Read full story →Critical Security Flaw Discovered in Chrome Browser; Google Issues Urgent Warning
Google alerts users to an active Chrome vulnerability being used in real-world cyberattacks with no patch yet available.
Read full story →Major Bitcoin Theft Partially Reversed as Hackers Return Stolen Cryptocurrency from Exchange Platform
Cybercriminals return thousands of Bitcoin after exploiting software vulnerability, but millions remain missing.
Read full story →Microsoft Releases Historic Security Update as Critical N-able Flaw Spreads Among Businesses
Microsoft patches nearly 1,000 flaws in major update; remote access tool vulnerability already being weaponized by attackers.
Read full story →Microsoft Releases Massive Security Update Fixing Nearly 1,000 Vulnerabilities, Including Active Windows Threats
Microsoft patched 974 security holes this month, with 2 Windows flaws already being exploited by hackers in the wild.
Read full story →Attackers Breach 258 Companies Using Microsoft 365 Phishing Tool That Defeats Two-Factor Authentication
Criminal operation targeting Microsoft 365 users bypassed MFA protections at hundreds of organizations using specialized phishing service.
Read full story →Massive Passenger Database Breach Exposes 220 Million Travelers' Personal Information
A Vietnam-based aviation database containing decades of passenger records was left unprotected online, compromising millions of travelers worldwide.
Read full story →Criminals Using Fake Help Desk Calls to Steal Cloud Account Access
Security researchers warn of coordinated attacks targeting business cloud accounts through impersonation and fake login pages.
Read full story →New Browser Hijacking Tool Puts Corporate Leaders at Risk Through Fake Support Calls
Attackers use disguised browser add-ons to steal Microsoft 365 data from executives in targeted campaigns.
Read full story →HPE Releases Emergency Fixes for Major Security Flaws in Network Operating System
HPE addresses 23 critical vulnerabilities in AOS-CX software that could let hackers take over systems remotely.
Read full story →Major Security Week: Microsoft Patches Cloud Flaws While Thousands Lose Dropbox Access
Microsoft updates cloud defenses, 5K Dropbox users breached, and cybersecurity startup Guardio hits unicorn status.
Read full story →Critical Security Flaw in Popular Elementor Plugin Puts Thousands of WordPress Sites at Risk
A severe vulnerability in Elementor Pro allows attackers to upload malicious files to WordPress websites, threatening site security and user data.
Read full story →Hidden Text Tricks Let Scammers Slip Past Email Filters
Cybercriminals are using invisible characters to disguise phishing emails and bypass security systems designed to catch them.
Read full story →N-able Rushes Critical Security Fix for N-central Platform as Hackers Actively Exploit Vulnerability
Software company N-able released an urgent patch for a severe flaw in its remote management tool being actively targeted by attackers.
Read full story →Cybercriminals Bypass Security on Millions of MikroTik Routers Left Exposed Online
Hackers exploit unprotected MikroTik routers accessible through the internet, gaining full control without needing passwords.
Read full story →Thousands of Legitimate Websites Weaponized to Distribute Malicious Software Through Blockchain Storage
Cybercriminals compromised over 5,400 websites to push ClickFix malware using blockchain as a hidden delivery system.
Read full story →