Breaking coverage of data breaches, ransomware, critical vulnerabilities, privacy and the practical steps that keep American businesses and families safe online.
Attackers are exploiting the four-flaw Plex2Shell chain within a day of public exploit code, installing crypto miners and proxy backdoors on servers still running older builds.
5 min read
The GhostAction GitHub attack has returned in a larger wave that injected malicious workflows into 790 repositories, including Uber's athenadriver, and targets cloud and AI API keys.
5 min read
Attackers briefly rewrote update settings for AOMEI Backupper and AnyViewer from April to July 2026, delivering a backdoor to some Windows users.
6 min read
A China-linked group exploited a critical BeyondTrust Remote Support flaw for about seven weeks before its October 15 disclosure. Patch to the fixed release now.
5 min read
A stolen login let an intruder copy California student records held by testing vendor ETS. The state says the files include disability status, and the total number affected is still unconfirmed.
5 min read
CISA lists Atlassian's CVE-2026-21589 as actively exploited, and its federal patch deadline has already passed. Here are the affected products, fixed versions and what to check on self-hosted servers.
5 min read
Attackers are exploiting a command-injection flaw in SiteGuard Server Edition that can hand them root or SYSTEM access. Here is which versions are affected and what admins should do now.
5 min read
A ransomware group calling itself Storm claims it took data from Merit Financial Group, a US wealth manager. The claim is unverified, with no company statement or second source yet.
5 min read
The N0n ransomware group has posted US fintech firm Finzly Corp to its leak site, claiming it took cloud access keys. Finzly has not confirmed any intrusion.
5 min read
Attackers are chaining two AhsayCBS flaws into unauthenticated SYSTEM-level code execution on backup servers. Ahsay's first fix failed, and its replacement is still being verified.
5 min read
CyberHacker.ai is now open to any company: its AI agents start testing web apps, APIs and chatbots within minutes of sign-up, with human-verified findings, retesting and a shareable certificate.
4 min read
Researchers tied CVE-2025-61624, a FortiOS flaw now on CISA's exploited list, to the PEERSTITCH implant that spread through a telecom provider's FortiManager and reached more than 500 firewalls.
5 min read
Attackers stole patient data from iRhythm's third-party business apps in June. State filings now point to about 8.2 million people, and notices began Oct. 2.
5 min read
Microsoft confirmed that October 2026 Windows Server updates can break OWA sign-in and mail flow on on-premises Exchange. A registry workaround is available now.
5 min read
The White House has reportedly picked FTC Chairman Andrew Ferguson to coordinate AI enforcement, days after the agency subpoenaed OpenAI and Anthropic over AI agent security incidents.
6 min read