Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Backdoored Injective Labs SDK Targets Private Keys and Seed Phrases
Attackers compromised the official GitHub repository of the Injective Labs project and published a malicious version of the SDK package ...
Why Progress Is Forcing ShareFile Storage Zone Controllers Offline
Progress Software has instructed ShareFile customers to immediately shut down Windows servers running the Storage Zone Controller component, citing a ...
Tangem Hardware Wallets Exposed to Costly Laser PIN Reset Attack
The Ledger Donjon research team has disclosed a vulnerability in Tangem cryptocurrency wallets: a precisely timed laser pulse aimed at ...
BeyondTrust Remote Support and PRA: four flaws and AI discovery
BeyondTrust has released updates for its Remote Support (RS) and Privileged Remote Access (PRA) products that fix four vulnerabilities, two ...
How Device Code Phishing-as-a-Service Threatens Microsoft 365 Tenants
In late June – early July 2026, a phishing campaign using the Device Code Flow mechanism was observed, targeting Microsoft ...
Windows Device ID Links Scattered Spider Suspect to Jewelry Retailer Hack
US prosecutors linked an alleged member of the Scattered Spider group to the breach of a major jewelry retailer, using ...
How the GitLost Attack Can Leak Private GitHub Repositories via AI Agents
Researchers from Noma Security have demonstrated the GitLost attack technique, which makes it possible to extract the contents of an ...
Targeted Attacks on Roundcube Mail Servers in US and Canada
A group presumably linked to China and tracked by Proofpoint as UNK_MassTraction has, since May 2026, been conducting targeted attacks ...
CERT/CC warns of hidden admin backdoor in Tenda router firmware
The CERT Coordination Center (CERT/CC) has published an advisory about an undocumented backdoor in the firmware of several router models ...
How CVE-2026-53359 Lets KVM Guests Crash the Host
A use-after-free vulnerability (CVE-2026-53359) has been discovered in the KVM hypervisor of the Linux kernel, allowing a guest virtual machine ...
