Cybersecurity Hacking News

• Oracle released 1,449 patches in July, yet none stopped credential theft via SQL injection followed by Java source code execution inside the...

Kali365, a phishing-as-a-service platform first seen in April 2026, lets attackers steal OAuth tokens to access Microsoft 365 accounts without...

An IP address leak in iCloud Private Relay exposed users' real locations despite the privacy feature being enabled, prompting a swift but unannounced...

• At least 274 internet-facing Zimbra instances have been compromised via CVE-2026-73570
• The flaw affects only non-default setups with the...

An alleged data breach at US home builder Kirbor Homes involving 18 million records has surfaced via a Dark Web Intelligence post.

IBM released Patch 11 for Watson Data Intelligence 5.3.1, fixing multiple high-severity CVEs including data amplification flaws in Apache Thrift (CVSS...

Attackers are tailoring phishing campaigns to specific sectors with customized lures and sophisticated tools.

• Healthcare patients: Scams...

Cybercriminals increasingly trick users into executing malware themselves through ClickFix commands and legitimate RMM tools.

• Fake developer tools:...

AI is removing old scam tells while scaling attacks like never before.

• GenAI erases fingerprints in emails and scripts, while deepfakes enable...

• Malware spreads silently via DoFun head unit firmware updates, installing without user interaction.
• Infected units join proxy botnets for ad fraud...

A massive DDoS assault disrupted Norway's critical government services.

Autonomous AI agents are shifting from research demos to practical offensive tools across vulnerability exploitation, CTF competitions, and AI...

Thousands of Zimbra servers stayed vulnerable weeks after the July 20, 2026 patch for CVE-2026-73570, enabling remote code execution and compromise of...

A federal judge's approval of Comcast's $117.5 million settlement for its 2023 breach—covering 31.7 million potential class members—ranks among the...

Third-party vendors continue to pose major risks in healthcare data security, as The Health Trust's breach involved sensitive files shared with FASS,...

AI cuts the time and expertise needed to exploit existing weaknesses in utilities.

• Pro-Russia hackers breached a Quebec water plant, raised chlorine...

• Business impersonation: AI helps attackers study workflows, hijack vendor emails, and craft phishing that looks like routine activity
• AI agent...

Traditional vulnerability management relied on days or weeks to patch, but modern attacks exploit disclosures within hours. AI accelerates this by...

A network misconfiguration in NVIDIA's NemoClaw exposes its Ollama API on port 11434, letting attackers use DNS rebinding from a malicious webpage to...

• Beyond IT: Breaches now disrupt operations, finance, compliance, and reputation as systems underpin every function.
• Attacker economics win:...