Cybersecurity Hacking News

Cybernews uncovered an unsecured Elasticsearch cluster holding 24 billion plaintext credential records across 8.3 terabytes, complete with usernames,...

ShinyHunters turns single intrusions into domino effects through vishing, stolen SSO tokens, and supply-chain OAuth abuse.

• Ecosystem hits multiply...

Attackers now weaponize decades-old flaws faster than scanners detect them, making vulnerability management answer the wrong questions.

• Legacy...

FulcrumSec's leak of Novo Nordisk's proprietary AI models alongside 1.3TB of data reveals how hackers now target trained models as high-value IP in drug development. This escalates risks beyond traditional clinical data theft.

AI impersonation attacks target credentials and actions, not just perception. Detection-based training can't keep pace as AI improves faster than...

A Cloud Security Alliance report shows 80% of organizations missing the 24-hour patch window experience security incidents tied to known...

• Cisco SD-WAN zero-day gave root access to a service provider network from late 2025 into March 2026, patched only on June 4
• Oracle PeopleSoft flaw...

Microsoft paired AI analysis with RICO to treat StealC and Amadey as one conspiracy, linking their shared infrastructure and suing five defendants.
-...

• Bajaj Auto suffered a ransomware attack on June 23, 2026, days after Tata Electronics faced a breach exposing over 630 GB of data linked to Apple...

Palo Alto Networks, IBM, and Red Hat are integrating virtual patching with Project Lightwell to deliver same-day network protections before official...

International authorities seized €41 million in crypto and disrupted 326 servers plus 142 domains tied to Amadey, StealC, and SocGholish.

• Microsoft...

• LastPass breach via Klue vendor exposed customer contact and support data through compromised OAuth tokens, without touching password vaults.
  -...

Scammers are impersonating trusted entities like tax authorities, software vendors, and email providers to exploit urgency and trust.

• Fake tax...

AI-powered attacks now reach data exfiltration in under 72 minutes, down from nearly five hours the prior year.

• Kill chain compression: AI agents...

Modern malware shows striking diversity in families and tactics, all leveraging MaaS models and evasion techniques.

• StealC infostealer and Amadey...

The FortiBleed operation has harvested more than 110 million credentials since February 2026 by targeting exposed FortiGate appliances through...

Germany leads Europe as the top ransomware target, with attacks often tracing back to Russia and growing nearly twice as fast as in France. This...

Attackers are exploiting CVE-2026-20230 in Cisco Unified CM weeks after the June 3 patch, with Defused detecting the first activity from a single...

ShadowPad's modular backdoor architecture allows remote plugin deployment for customized attacks, evolving from its 2015 origins as a PlugX...

Fraud begins quietly with data gathering, not fake invoices.

• OSINT phase: Public websites, LinkedIn profiles, press releases, and job postings...