The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,257 reports across 7 topics, updated hourly.
A critical security vulnerability, identified as Plugin4Shell, has been disclosed that affects four prominent AI coding agents, enabling attackers to substitute legitimate plugins with malicious versions. This exploit bypasses security measures designed to lock plugins to specific, reviewed versions.
Cybersecurity researchers have identified a new threat actor distributing a previously undocumented JavaScript stealer, codenamed WeaselBiscuit, through 13 npm packages. OpenSourceMalware, a cybersecurity research group, reported on March 12, 2024, that these npm packages were designed to harvest sensitive data…
A financially motivated threat actor has been identified as the likely developer and distributor of PhantomRaven, a JavaScript-based information stealer distributed through the npm package registry. Security researchers have assessed with high confidence that the malware was developed using…
Cybersecurity researchers have identified a new Android malware strain named RatHat, which is believed to be operated by China-based threat actors. This malware distinguishes itself with an artificial intelligence (AI)-powered system designed to navigate and control compromised devices.
A critical vulnerability has been identified in Check Point's Security Management and Log Servers, enabling unauthenticated attackers to execute arbitrary code with root privileges over a network connection. This flaw, designated CVE-2024-24762, affects specific versions of the Security Management Server…
The threat landscape continues to evolve with attackers exploiting a range of vulnerabilities, from novel AI-driven methods to persistent, older security weaknesses. ThreatsDay has documented numerous new attack vectors and ongoing security challenges, highlighting the dynamic nature of cyber threats.
Docker has issued a security warning on September 15 regarding a critical vulnerability within its Docker Sandboxes feature on macOS. This flaw, identified as CVE-2026-77179, permits malicious code executing inside a Docker Sandbox to escape its designated project directory…
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a sophisticated Telegram-based surveillance backdoor named HEAVYGRAM. This malware, alongside a Delphi-based utility called CRUDEEXCLUDE, facilitates extensive data exfiltration and system compromise.
NLnet Labs disclosed a critical heap overflow vulnerability in the DNSSEC validator of the Unbound DNS resolver, affecting all releases prior to version 1.26.1. The advisory, issued on Wednesday, details how an attacker controlling a malicious DNS zone could exploit…