Cyber Security
Cybercrime & Law Enforcement Malware & Antivirus Operating Systems Security Industry & Defense

Cyber Security
Even after PHP2Shell, blast radius matters more than a CVSS score
BleepingComputer

Cyber Security
Upwind raises $400M after walking away from Datadog acquisition offer
Help Net Security · SecurityWeek · TechCrunch

Cyber Security
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
SecurityWeek

Cyber Security
China-Linked Hackers Exploit PHP2Shell to Root Firewalls

Cyber Security
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
The Hacker News

Cybercrime & Law Enforcement
FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police

Cyber Security
Wazuh and AI for Enhanced SOC Workflows
The Hacker News

Cyber Security
Long-Hidden Flaws Patched in EPICS Research Facility Control Software
SecurityWeek

Cyber Security
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
The Hacker News

Cyber Security
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
SecurityWeek

Cyber Security
Data breach at Sony-owned internet provider compromises 2.6 million customer records

Cyber Security
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
SecurityWeek

Cyber Security
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster
Help Net Security

Cyber Security
Hackers Start Probing Fresh Oracle EBS Vulnerability

Cyber Security
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

Cyber Security
Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
Help Net Security · The Record · BleepingComputer +2 more

Cyber Security
Qualys CISO on what security teams can do as exploit campaigns grow
Help Net Security · Help Net Security

Cyber Security
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
SecurityWeek · BleepingComputer · The Hacker News +1 more

Cyber Security
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records
Help Net Security

Cyber Security
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature
Dark Reading

Cyber Security
NIST starts the countdown to retire quantum-vulnerable encryption

Cyber Security
Japan’s GMO urges customers to shut down PCs amid ransomware threat
BleepingComputer

Cyber Security
3 Frameworks to Protect CISOs & Orgs Against AI Liability
Dark Reading

Cyber Security
Fashion retailer Resolve says hackers stole payment card information
BleepingComputer · The Record

Cyber Security
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
The Record · BleepingComputer · Help Net Security +1 more

Cyber Security
SBOMs Alone Can’t Reveal the Scope of a Supply Chain Attack

Cyber Security
US indicts Malaysian national after Madagascar scam operation uncovered
The Record

Cyber Security
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
The Hacker News

Cyber Security
Microsoft releases Windows OOB updates to distrust eMudhra certificates
BleepingComputer

Cyber Security
Beware the Slasher: AI Could Kill Off Cybersecurity Pros’ Skills
Dark Reading