Original publisher image · BleepingComputerMetaMask says recent attack didn't affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. [...]
Cyber News
Daily cybersecurity reports from trusted publishers, with original images, source links and publication dates.
Last curated:
- Original publisher image · BleepingComputer
Original publisher image · BleepingComputerRunaway AI hacking agent behind WorkOS breach after escaping sandbox
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims…
Original publisher image · BleepingComputerSonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
Original publisher image · BleepingComputerD-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]
Original publisher image · BleepingComputerOpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for…
Original publisher image · BleepingComputerChainalysis says breach exposed credentials for all customers
Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. [...]
Original publisher image · BleepingComputerFake security tools on GitHub push backdoors and infostealers
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]
Original publisher image · BleepingComputerCISA flags WordPress RCE flaw as actively exploited in attacks
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the…
- Original publisher image · BleepingComputer
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]
Original publisher image · BleepingComputerHackers hijack cPGuard autoupdate to deploy backdoor, steal data
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]
Original publisher image · BleepingComputerGoogle disrupts million-device XCPE Android malware botnet, bans TV box maker
Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says…
Original publisher image · BleepingComputerSynology warns of C3RB3R ransomware attacks targeting NAS devices
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]
Original publisher image · BleepingComputerIvanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at…
Original publisher image · BleepingComputerOver 1,000 GitLab servers vulnerable to ongoing RCE attacks
Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. [...]
Original publisher image · BleepingComputerAlpine Linux rebuilds GitLab after attempted RCE attack
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab…
Original publisher image · BleepingComputerFrom Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
AI-generated vulnerability reports are overwhelming some bug bounty programs, making it harder for aspiring security researchers to know where to start. TryHackMe explains how…
Original publisher image · BleepingComputerNorthflank security breach leads to abuse of customers' AI API keys
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to…
Original publisher image · BleepingComputerChainalysis discloses data breach from "offensive agentic techniques"
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email…
.jpg)
Original publisher image · BleepingComputerNew Android SMS of Death exploit can remotely crash unpatched phones
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets…
Original publisher image · BleepingComputerJapan's GMO urges customers to shut down PCs amid ransomware threat
The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the…
Original publisher image · BleepingComputerUNM Health ransomware attack disrupts patient care, surgeries
The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. [...]
Original publisher image · BleepingComputerMicrosoft releases Windows OOB updates to distrust eMudhra certificates
Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not…
Original publisher image · BleepingComputerWarp discloses breach exposing AI agent logs, user telemetry data
Warp reported that a third-party vendor breach exposed agent decision logs and user telemetry from its development environment.
Original publisher image · BleepingComputerAbandoned Popcorn Time app exposed millions of device to RCE attacks
Researchers found an abandoned Time4Popcorn updater accepting unsigned downloads over HTTP, exposing millions of devices to potential SYSTEM/root code execution. Eye Security disabled the updater on Windows and macOS; users should uninstall the app.
Original publisher image · BleepingComputerBlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
Research on BlackX describes a Secure Boot bypass used in an espionage campaign, with malicious kernel components intended to interfere with defensive monitoring.
Original publisher image · BleepingComputerPHP shares mitigation for new RCE vulnerability with no patch
PHP maintainers have published mitigation guidance for CVE-2026-115560, an RCE issue requiring an unusual combination of session configuration and application behavior.
Selected reports from security publishers. Follow each source for the full story. Images belong to the credited publisher.