Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
How UNC6671 Uses Vishing and AitM to Breach Okta and Microsoft 365
The extortion group UNC6671 is conducting a large-scale voice phishing (vishing) campaign against financial, legal and technology organizations in North ...
Prompt-injection bugs let low-priv bots trigger privileged CI in Google ADK
Researchers at Pillar Security identified two vulnerabilities in the automation of the Google Agent Development Kit (ADK) for Python GitHub ...
Arctic Wolf exposes MFA-bypassing BEC against Microsoft 365
Researchers at Arctic Wolf Labs have recorded a large-scale phishing campaign targeting Microsoft 365 accounts. The attackers use an adversary-in-the-middle ...
Solidity Pro: malicious VS Code extension targeting Web3 developers
Researchers from Yeeth Security discovered the malicious Solidity Pro extension for Microsoft Visual Studio Code which, while masquerading as a ...
Progress Kemp LoadMaster CVE-2026-8037 Actively Exploited
On August 7, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerability CVE-2026-8037 to the Known Exploited Vulnerabilities ...
Snowflake Data Theft: Canadian Behind UNC5537 Admits Guilt
26-year-old Canadian Connor Riley Moucka
Mass False Positives Lock Blogger Sites After August 4, 2026 Glitch
On August 4, 2026, the automatic moderation system of Google Blogger began massively blocking legitimate blogs, mistakenly classifying them as ...
Attackers Abuse ScreenConnect and Fake Roblox Cheats to Deliver Malware
Researchers at Securonix have uncovered an active multi-wave campaign dubbed SMOKE#SCREEN, in which attackers use phishing lures — fake Adobe ...
HashiCorp, Veeam and Django patch 11 new CVEs in 2026
HashiCorp, Veeam and the Django Software Foundation released fixes in early August 2026 for 11 vulnerabilities, three of which are ...
Active Exploitation of CVE-2026-63077 in JetBrains TeamCity Confirmed by CISA
CISA on August 5, 2026 added the vulnerability CVE-2026-63077 to the Known Exploited Vulnerabilities (KEV) catalog, confirming its active exploitation. ...
