The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,257 reports across 7 topics, updated hourly.
Check Point disclosed a zero-day vulnerability, identified as CVE-2026-93616, that was exploited in a limited number of targeted attacks on July 23, according to a company statement. This previously unknown flaw affects Check Point's Security Management Server, a critical component…
WordPress released version 7.1.2 on September 22, 2023, to address a critical security vulnerability within its core software. This flaw, identified as allowing an unauthenticated attacker to load a PHP file from outside a theme's designated folders, posed a significant…
Cybersecurity researchers have disclosed the existence of a malicious npm package, identified as "tw-pkgprobe-7731," which has been strategically designed to deceive developers by posing as a legitimate security tool. This package was uploaded to the npm registry, a vast…
Microsoft announced on Tuesday the successful takedown of the EvilTokens device code phishing service, a sophisticated operation that utilized artificial intelligence (AI) at every stage of its attack chain. This action, authorized by the U.S. District Court for the Eastern…
A critical vulnerability, tracked as CVE-2026-90898, has been identified in Bifrost, an open-source AI gateway designed to route requests to over 20 different Large Language Model (LLM) providers. This flaw permits an unauthenticated attacker to execute arbitrary commands…
A zero-day proof-of-concept (PoC) tool named BigDiskBuster was published on GitHub on September 19, capable of preventing Microsoft Defender from installing platform and signature updates. This exploit achieves its objective by consuming all available disk space on a targeted system…
Arista disclosed on September 22 that attackers are actively exploiting a critical vulnerability in on-premises VeloCloud Orchestrator (VCO) deployments. This flaw, designated CVE-2026-93952, carries a CVSS 10.0 severity score, indicating the highest possible risk.
A significant vulnerability has been identified within the Linux kernel's Kernel-based Virtual Machine (KVM) virtualization code, specifically impacting ARM64 processors. This flaw, officially designated as CVE-2026-89775, creates a security risk by exposing a freed piece of host memory…
A critical vulnerability in Microsoft SharePoint Server, initially categorized by Microsoft as a spoofing flaw with a Common Vulnerability Scoring System (CVSS) score of 6.5, has been revealed to enable authenticated remote code execution (RCE).
The summer of 2024 has been characterized by significant hype surrounding artificial intelligence, with major companies like Anthropic and OpenAI making bold claims about their models' capabilities and security incidents.