Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Mini Shai-Hulud/Miasma npm campaign expands to Go and CI/CD secrets
Security researchers from several companies have recorded a new wave of supply chain attacks linked to the Mini Shai-Hulud, Miasma, ...
Node.js TonRAT campaign abusing Calendly in hotel phishing
Since April 2026, an active phishing campaign has been targeting hotel organizations in Europe and Asia, using archives with “photos” ...
Lantronix EDS5000 and Ubiquiti UniFi OS Exploited, CISA Warns
On June 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four vulnerabilities to the Known Exploited Vulnerabilities ...
CVE-2026-20230 in Cisco Unified CM: SSRF to Root Exploit
A critical vulnerability CVE-2026-20230 (CVSS 8.6) has been discovered in Cisco Unified Communications Manager and Unified CM Session Management Edition. ...
How a Fake Skill Bypassed Scanners in AI Agent Marketplaces
The company AIR Security conducted an experiment that demonstrated a structural vulnerability in the skill ecosystem for AI agents: a ...
CSIS allowed to remotely clean Canadian routers and IoT botnets
The Federal Court of Canada has published a redacted version of a ruling confirming that the Canadian intelligence service CSIS ...
JFrog uncovers PostCSS npm typosquats installing a modular Windows RAT
JFrog researchers discovered three malicious npm packages — aes-decode-runner-pro, postcss-minify-selector and postcss-minify-selector-parser — that masquerade as legitimate build tools and ...
WhatsApp Desktop and Web Targeted in Global VBScript RMM Campaign
According to researchers at Kaspersky, an active campaign has been identified in which malicious Visual Basic Script (VBScript) files are ...
How OpenAI’s GPT-5.5-Cyber Targets Software Vulnerabilities
OpenAI has announced the release of an updated GPT-5.5-Cyber model for trusted security professionals as part of the Daybreak initiative, ...
DifyTap: Cross-Tenant Data Exposure in the Dify AI Platform
Four vulnerabilities have been discovered in the open platform for building AI agents Dify, collectively dubbed DifyTap — two of ...
