Cybersecurity Hacking News

No significant updates today.

• 5-year study found 30,515 of 65,907 exposed databases carried ransom notes, hitting 215 billion records.
• MongoDB and MySQL instances showed...

• Foreign actor stole over 600,000 records from Lithuania’s Real Estate and Legal Entities Registers using misused institutional credentials.
  -...

AI is exposing vulnerabilities faster than traditional defenses can respond, forcing a multi-pronged crisis response.

• Microsoft's emergency fix:...

Three simultaneous developments reveal the expanding software supply chain battlefield:

• $60M defense funding targets AI-driven code risks and...

Financial services saw 43% more hands-on intrusions in 2025 as e-crime groups reset MFA through help-desk vishing or steal tokens via tools like...

A decade after dumping sophisticated NSA hacking tools, the Shadow Brokers remain completely unidentified with no arrests or confirmed motives. Their...

• Iran-linked Nimbus Manticore debuted MiniFast backdoor during conflict, showing AI-assisted code patterns like verbose error handling and modular...

Reported ransomware incidents are just the tip of the iceberg, indicating that incomplete data severely hampers accurate threat intelligence and coordinated incident response.

CVE-2026-26980 SQL injection flaw lets attackers steal Admin API keys without authentication.

• Technical breakdown details injection mechanics and...

Supply chain attacks have shifted from rare events to systematic campaigns targeting open-source packages, maintainers, and CI/CD pipelines.

Claude...

Device-code attacks abuse legitimate OAuth flows: attackers email a code for microsoft.com/devicelogin, poll for approval, and harvest tokens that...

• Play group struck at least four organizations on May 25, 2026: GW Mechanical, MyPillow, Legend Networking and Telecom, and Round Hill Country Club
  -...

A massive data exposure of over 116,000 records from major US newsrooms highlights serious personal safety threats.

• Compromised details including...

AI is rapidly making business email compromise far harder to detect through realistic impersonation and organized operations.

• Generative AI now...

A newly discovered zero-click exploit lets attackers hijack WhatsApp accounts on iOS 16 devices to send fake money requests while showing no linked...

Ubuntu has released critical patches for the Linux kernel in Intel IoT real-time platforms, fixing a Copy Fail vulnerability in the algif_aead module...

AI tools are creating more problems than they solve for the Linux kernel. Torvalds called out developers for flooding RC5 with AI-generated trivial...

A single unauthenticated SQL injection in Ghost CMS (versions 3.24.0–6.19.0) let attackers steal Admin API keys and hijack 700+ education/tech sites with ClickFix malware. Update to 6.19.1 now.

Microsoft impersonation phishing attacks surged sharply in 2026 with AI-driven tactics.

• Attack Methods: Lookalike domains, AI voices, and deepfakes...