…TeamPCP deploys Iran-targeted wiper in Kubernetes attacks TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confirms security breach in TanStack supply chain attack SAP fixes critical vulnerabilities in Commerce…
Chinese hackers hijack auth flow, spy on isolated network for a decade By Bill Toulas June 13, 2026 10:06 AM Chinese hackers took control of a target organization's authentication stack…
The ShinyHunters extortion gang stole personal information from more than 137,000 school staff accounts in a Salesforce data theft attack that targeted the widely used Infinite Campus K-12 student information…
…an extended targeting scope. One interesting aspect of the new version of the malware is the introduction of malformed APK packaging to hinder automated analysis, and potentially also security tools. The APK…
Microsoft Self-Service Password Reset abused in Azure data theft attacks By Bill Toulas May 19, 2026 03:35 PM A threat actor targeting Microsoft 365 and Azure production environments is stealing…
…targeted Kubernetes platforms. If CanisterWorm landed on machines that matched Iran's timezone and locales, it would wipe it. Lists of compromised packages are available in the reports from various security vendors…
…Over the weekend, security researchers released PoC exploits targeting another recently patched Linux LPE (tracked as DirtyDecrypt and DirtyCBC ), which belongs to the same vulnerability class as several other root-escalation flaws…
…agencies to secure vulnerable firewalls by Saturday midnight, May 9. These CVE-2026-0300 zero-day attacks are part of a broader trend in which threat groups are targeting edge network devices…
Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks By Lawrence Abrams June 10, 2026 02:31 PM Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters…
…Secure your identity verification workflows with Specops As attackers continue to target credentials and exploit weaknesses in authentication workflows, reviewing and modernizing identity verification controls should remain a priority for security teams…
