Cyber Threat Pulse

A breach of Florida's student financial aid website affected 4.9 million people, and personal information including Social Security numbers was...

Attackers are actively exploiting CVE-2026-76418, a high-severity Remote Access SSL VPN flaw in Cisco ASA and FTD that can crash devices....

A threat intelligence feed reports that SilentRansomGroup attacked Lowenstein Sandler LLP, with discovery dated 2026-10-28. The entry lists the New...

Cisco released fixes for an exploited ASA and FTD vulnerability in the Remote Access SSL VPN service. Unauthenticated attackers can remotely force the...

The Global Secret Group has claimed a ransomware attack on the Anglican International School, listed under aisj.co.il, an education provider in...

The University of New Mexico Health System's cybersecurity incident caused ambulance redirections and canceled or rescheduled appointments. The system...

CISA added CVE-2026-41709 to its KEV catalog after CrowdStrike reported China-nexus Warp Panda exploiting it against the U.S. legal sector. The flaw...

Black Lotus Labs says Silent Train is built on rapidly rotating chains of compromised SOHO, IoT, and enterprise devices.

• Four zero-day campaigns:...

A hacker calling themselves Department of Peace published personal data on more than 40,000 Homeland Security employees, claiming it came from the...

Threat actors have started probing a newly patched, critical Oracle E-Business Suite flaw, according to Defused.

• CVE-2026-101767 (CVSS 9.8) is an...

• GMO urged customers to back up data and disconnect from the internet as hackers began leaking stolen information.
• Attackers reportedly demanded...

The new wave is framed as a warning about AI-driven hacking, but the verified impact is still narrow.

• Reported breach: Daishin Securities reported...

Attackers who breached So-net's member database took personal data on more than 2.58 million current and former customers. Names, phone numbers, email...

CISA's KEV listing cites active exploitation, though ELLIO reported public-exploit traffic and Previdian logged one honeypot attempt. Scope is...

The PeopleSoft flaw ShinyHunters exploited since May is three chained bugs, according to ZDI, yet only one CVE covers them.

• Patch now: Apply...

The cyberattack on the University of New Mexico Health System disrupted patient care on Monday:

• Ambulances diverted: About two hours of diversions...

Apple is extending last month's CoreGraphics fix to older devices with iOS 18.7.11 and iPadOS 18.7.11. Backporting fixes this way is uncommon.

The...

The outage is confirmed, and previously filed records remain searchable.

• Confirmed: The FEC's electronic filing service is unavailable, and...

A critical flaw (CVE_2026-80097) let rogue Android apps silently obtain Microsoft session tokens.

• Account exposure: Researchers reached emails,...

A remote code execution flaw in Meta FAIRChem's pickle-file parsing has been publicly advisoried. Key triage points:

• Affected software: Meta...