The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,236 reports across 7 topics, updated hourly.
Ransomware groups have escalated their tactics by increasingly targeting an organization's backup infrastructure, aiming to eliminate recovery options and exert greater pressure on victims to pay ransoms. This strategic shift means that traditional backup strategies may no longer be sufficient…
A teenager from Amman, Jordan, identified by the hacker handle “Rey” and suspected of leading the prolific data theft and extortion group ShinyHunters, has been detained and is reportedly cooperating with the FBI to identify other members of the hacking…
Hackers are actively exploiting a critical vulnerability, identified as CVE-2026-21589, across multiple Atlassian product families, including Jira, Confluence, and Bitbucket. This exploit does not require any form of authentication, significantly lowering the barrier for malicious actors.
The 2026 findings from The Sixth Voice of the CISO data report a significant shift in cybersecurity, indicating that cyber risk has moved from a perimeter-focused concern to one deeply embedded within organizational workflows.
Threat actors initiated exploitation attempts against a critical security flaw affecting Atlassian Data Center products within two hours of the vulnerability's public disclosure. This arbitrary file access flaw, designated as CVE-2026-21589, carries a high severity CVSS score of 9.3, indicating…
Agentic pentesting solutions are being pitched as tools that can autonomously discover, validate, and exploit attack paths, mirroring the methods of human attackers. This capability promises a significant advancement in cybersecurity by automating complex and time-consuming penetration testing processes.
Europol, the European Union's law enforcement agency, has issued a stark warning regarding the vulnerability of cryptocurrency wallets to future quantum computing attacks. The agency anticipates that as quantum computing technology advances, these wallets will become a primary target…
Advantest Corporation, a Japanese manufacturer of semiconductor testing equipment, has confirmed that a ransomware attack occurring earlier this year led to the compromise of personal information belonging to affected individuals.
Anthropic announced on Tuesday, October 22, 2024, an expansion of its program that grants vetted cybersecurity professionals access to its advanced artificial intelligence models with diminished safeguards and blocking classifiers.
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified over 100 compromised websites that are actively distributing an information-stealing malware known as LunexStealer, also referred to as Psychedelic Stealer.
Hackers are actively exploiting stored cross-site scripting (XSS) vulnerabilities within two distinct WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to compromise websites. The exploitation allows attackers to install backdoors, granting them persistent access to affected systems…
WordPress 7.1.3, released on March 11, 2024, addresses a total of eight security issues, including seven reported vulnerabilities and one critical flaw. This update is crucial for maintaining the security and stability of websites built on the WordPress platform…
On the inaugural day of the Pwn2Own Ireland 2026 hacking competition, security researchers demonstrated significant prowess by exploiting 32 previously unknown zero-day vulnerabilities. These exploits targeted a range of consumer electronics, with notable successes against the Samsung Galaxy S26 smartphone…
Cybersecurity researchers have detailed a sophisticated, human-operated phishing platform designed to impersonate advertising portals for prominent artificial intelligence (AI) chatbots. This platform targets users seeking to manage or optimize advertising campaigns for services such as Google Gemini, Anthropic Claude, OpenAI…
Sophisticated Linux backdoors have been observed in South Korea and Taiwan actively disguising their network traffic as legitimate email services to evade detection by security tools. These malicious programs are specifically targeting telecom and network appliances, indicating a focus…
At least seven major financial institutions in South Korea have been compromised through cyberattacks that leveraged an artificial intelligence agent, marking a significant escalation in the use of AI for malicious purposes within the cybersecurity landscape.
Atlassian has issued a critical vulnerability warning to its customers regarding a flaw that allows for arbitrary file access in multiple self-hosted Data Center products. The vulnerability, tracked as CVE-2026-21589, affects widely used Atlassian applications including Confluence, Jira Software…