Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
False Extreme Alert Sent via Brazil’s Defesa Civil System
On June 20, 2026, an unidentified attacker gained unauthorized access to Brazil’s national emergency alert system Defesa Civil Alerta and ...
How Adblock for YouTube Put 10 Million Chrome Users at Risk
Researchers at Island reported that the browser extension Adblock for YouTube (identifier cmedhionkhpnakcndndgjdbohmhepckk) contains a dormant mechanism that allows arbitrary ...
Russian intelligence shifts Signal phishing to backup recovery keys
FBI and CISA have updated their March warning about a Russian intelligence phishing campaign targeting Signal users. According to the ...
Unit 42 Links TinyRCT Backdoor to CL-STA-1062 Asian Government Attacks
Researchers at Palo Alto Networks Unit 42 have linked a cluster of intrusions tracked as CL-STA-1062 to a previously undocumented ...
Russian SMS Phishing Campaign Targeting Signal and WhatsApp
Security Service of Ukraine (SBU) together with the FBI have uncovered a long-running cyber operation which, according to the Ukrainian ...
Local Privilege Escalation via Linux act_pedit Page Cache Bug
The CVE-2026-46331 vulnerability in the Linux kernel traffic control subsystem allows a local unprivileged user to gain root privileges on ...
CISA Confirms Active RCE Exploits Targeting PTC Windchill and FlexPLM
On June 25, 2026, CISA added vulnerability CVE-2026-12569 (CVSS 9.3) to the Known Exploited Vulnerabilities catalog, confirming active exploitation in ...
CVE-2026-20245: Zero-Day Attack on Cisco Catalyst SD-WAN Analyzed
The CVE-2026-20245 (CVSS 7.8) vulnerability in Cisco Catalyst SD-WAN was exploited by an unknown attacker at least two months before ...
DirtyClone Linux Kernel Vulnerability Enables Stealthy Root Escalation
The CVE-2026-43503 vulnerability (CVSS 8.8), dubbed DirtyClone, allows a local user to corrupt file contents in the Linux kernel page ...
Mini Shai-Hulud/Miasma npm campaign expands to Go and CI/CD secrets
Security researchers from several companies have recorded a new wave of supply chain attacks linked to the Mini Shai-Hulud, Miasma, ...
