Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
ESET Links New OceanLotus Campaigns to Domestic Vietnam Spying
ESET researchers have attributed two 2024–2026 campaigns to the OceanLotus (APT32) group, targeting domestic Vietnamese entities: an infrastructure construction corporation ...
Seven Critical Fortinet, Ivanti and SAP Bugs: Risks and Patching
Three major vendors — Fortinet, Ivanti and SAP — simultaneously released security updates that together close seven critical vulnerabilities with ...
Exploited Arista, Cisco SD-WAN and Chrome Bugs Enter CISA KEV
On June 9, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three vulnerabilities to the Known Exploited Vulnerabilities ...
June 2026 Microsoft Patch Tuesday: 206 Vulnerabilities Patched
The June 2026 Patch Tuesday was record-breaking in scope: Microsoft addressed 206 vulnerabilities in its products, 39 of which were ...
Miasma supply-chain attack on Microsoft OSS and PyPI packages
Microsoft has confirmed the temporary removal of a number of repositories on GitHub during an investigation into an incident involving ...
How Attackers Use Google DoubleClick to Deliver a .NET RAT Loader
Researchers at Huntress have documented a large-scale phishing email campaign in which attackers use the legitimate Google DoubleClick domain as ...
How OpenClaw AI Agents Are Compromised via Message Objects and Email
Two independent research teams — Imperva and Varonis — published research findings this week showing that OpenClaw, a self-hosted open-source ...
How Operation Ramz Took Down the Sniper Dz PhaaS Platform
According to Group-IB, an international operation led by INTERPOL has resulted in the dismantling of Sniper Dz, a phishing-as-a-service (PhaaS) ...
How LangGraph Checkpoint Flaws Enable Remote Code Execution
Check Point researchers have disclosed three patched vulnerabilities in LangGraph, the LangChain open framework for building multi-agent AI applications. According ...
Google Patches Actively Exploited Chrome V8 Zero-Day CVE-2026-11645
Google has released a security update for Chrome that fixes 74 vulnerabilities, including the critically dangerous CVE-2026-11645 (CVSS 8.8) in ...
