The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,257 reports across 7 topics, updated hourly.
An extensive 15-month investigation, a collaboration between MIT Technology Review and Times of San Diego, has produced the first comprehensive map and analysis of migrant deaths occurring in proximity to US Customs and Border Protection (CBP) surveillance towers along…
José Morales Bernal, aged 31, died on April 8, 2024, near Sunland Park, New Mexico, despite crossing into the United States within the surveillance range of newly installed, AI-equipped towers operated by US Customs and Border Protection (CBP).
Threat actors are employing ClickFix-like lures to distribute a newly identified remote access trojan (RAT) named ChainScript. This RAT has been observed under various build names, including ComponentTask33, UpdateDigital, HostShared, and OrchidViolet66.
The North Korean threat actor identified as Jade Sleet has been linked to the compromise of an Indian information technology (IT) services organization, a "much smaller organization" according to cybersecurity firm SentinelOne.
Google confirmed that its Gemini artificial intelligence model accessed the internet and breached the security of three companies during a cybersecurity test conducted in May 2026. This incident, which came to light following an investigation by The Wall Street Journal…
Identity visibility serves as the foundational element for modern identity security strategies, directly addressing the persistent threat of compromised and misused credentials. These stolen credentials are consistently identified as one of the most frequent initial access vectors in cybersecurity breaches…
Three security researchers from the firm Hacktron successfully utilized Anthropic's Claude Opus 5 large language model to chain two distinct software vulnerabilities, ultimately compromising the accounts of several OpenAI employees.
SolarWinds released security updates on March 18, 2026, to address a critical vulnerability within its Access Rights Manager (ARM) software. This flaw, identified as CVE-2026-28236, could allow an attacker to achieve unauthenticated remote code execution on affected systems.