The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,236 reports across 7 topics, updated hourly.
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware named Cling. This vulnerability, identified and subsequently patched, allowed attackers to gain unauthorized access…
Google has suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) due to an overwhelming influx of AI-generated spam reports. This decision, announced on May 23, 2024, effectively pauses the program that incentivizes security researchers to find…
A critical security vulnerability affecting Rejetto HTTP File Server (HFS) is currently being exploited by attackers, as reported by VulnCheck. The vulnerability, identified as CVE-2026-61500, carries a high CVSS score of 9.3, indicating its severe impact.
Citrix has issued security advisories and patches for a critical zero-day vulnerability affecting its NetScaler ADC and NetScaler Gateway products. This flaw, identified as CVE-2026-88779, has already been actively exploited in targeted cyberattacks, posing a significant risk to organizations relying…
Citrix has issued urgent security patches to address a critical zero-day vulnerability affecting its NetScaler application delivery controller and network gateway products. The vulnerability, officially designated as CVE-2026-88779, specifically targets the SAML (Security Assertion Markup Language) authentication service within NetScaler.
A China-nexus cyber espionage group identified as TA419 has been linked to a series of sophisticated credential phishing campaigns aimed at individuals involved in United States artificial intelligence (AI) policy development.
A suspected member of the ShinyHunters hacking group, identified online by the handle "Rey," has reportedly been detained in Jordan. This individual is now cooperating with the Federal Bureau of Investigation (FBI) in an effort to locate other members…
Blockchain analytics firm Chainalysis announced on September 24, 2026, that it had successfully used its in-house artificial intelligence tools to trace the $387 million stolen in the Bitget cryptocurrency exchange hack.
The threat actor identified as Warlock, with suspected links to China, continues to exploit vulnerabilities within Microsoft SharePoint to conduct attacks. These exploits are designed to disable security tools and subsequently deploy ransomware, targeting organizations primarily in Portuguese- and Spanish-speaking…
The Technical University of Denmark (DTU), a leading institution for research and education in engineering and natural sciences, announced on March 18, 2024, that it has experienced a significant data security incident.
The cybersecurity sector is undergoing a significant transformation driven by the expansive growth of cloud infrastructure, the pervasive integration of artificial intelligence (AI), the proliferation of distributed systems, and the increasing complexity of digital environments.
Frontline Education, a provider of administrative software for K-12 school districts, has confirmed a data breach that exposed sensitive employee information, including Social Security numbers. The breach occurred after threat actors exploited a vulnerability within third-party software used by Frontline…
The China-linked ransomware group Warlock has been identified as exploiting vulnerabilities in Microsoft SharePoint to gain initial access to target organizations. This tactic was employed in recent attacks against a water utility, a telecommunications provider, a regional government body…
GitLab has released security updates to address a critical vulnerability within its AI Gateway, a component that facilitates connections between GitLab instances and artificial intelligence models. This flaw, identified as CVE-2024-4757, could permit a logged-in user with access…
Government and policy organizations across Asia have become the target of a new espionage campaign orchestrated by a China-nexus threat actor, according to a report by Cisco Talos released on May 29, 2024.
Dell has issued security advisories and released updates to mitigate several critical vulnerabilities discovered within its Container Storage Modules (CSM). These flaws, if exploited, could allow unauthorized actors to gain administrative control over affected systems and achieve root-level privileges…
An argument against the prevalent discourse of artificial intelligence (AI) existential doom has been presented, which instead emphasizes the immediate and sprawling cybersecurity crisis as a more pressing concern. This perspective suggests that the focus on hypothetical future dangers posed…
GitLab issued an urgent security advisory on June 11, 2024, detailing a critical Remote Code Execution (RCE) vulnerability within its AI Gateway service. This vulnerability, identified as CVE-2024-32002, carries a CVSS score of 10.0, indicating the highest possible severity.