Security news

Headlines from security news sites, newest first. Each opens the original article in a new tab.

Today

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
BleepingComputer · 7 hours ago
Drupal patches critical RCE flaws, warns exploits may emerge soon
BleepingComputer · 8 hours ago
Cybercrims go beyond stealing data to attack physical building systems
The Register Security · 11 hours ago
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
The Hacker News · 11 hours ago
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
SecurityWeek · 11 hours ago
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
The Hacker News · 16 hours ago

Yesterday

BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Dark Reading · 1 day ago
Critical BlockStrap flaw lets hackers run code on Magento servers
BleepingComputer · 1 day ago
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Dark Reading · 1 day ago
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Dark Reading · 1 day ago
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
Dark Reading · 1 day ago
AI Takes Control of Robotic Arm in 16 Minutes Flat
Dark Reading · 1 day ago
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
The Hacker News · 1 day ago
Targeted ads installed Candiru spyware in zero-click attacks
BleepingComputer · 1 day ago
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
The Hacker News · 1 day ago
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
The Hacker News · 1 day ago
Networking problems after the October 2026 Windows update? NTLM might be to blame
The Register Security · 1 day ago
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
SecurityWeek · 1 day ago
OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract
The Hacker News · 1 day ago
When Your Ransomware Negotiator Works for the Other Side
Dark Reading · 1 day ago
Employees using personal ChatGPT at work? Here's what IT admins need to do
BleepingComputer · 1 day ago
Attack on BAE-managed system disrupts US bankruptcy courts
The Register Security · 1 day ago
When AI Agents Commit Breaches, Humans May Not Be Held Liable
Dark Reading · 1 day ago
Hackers disguise phishing as promising business opportunities
Help Net Security · 1 day ago
Burger King Japan data breach exposes 11 million customer records
BleepingComputer · 1 day ago
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
CISA Advisories · 1 day ago
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Advisories · 1 day ago
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
CISA Advisories · 1 day ago
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
CISA Advisories · 1 day ago
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
SecurityWeek · 1 day ago
Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
Help Net Security · 1 day ago
AI Decision Models and Their Impact on AI SOC Platforms
The Hacker News · 1 day ago
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
SecurityWeek · 1 day ago
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks
SecurityWeek · 1 day ago
Fake Arch Linux AUR packages exploit typos to run malware with root privileges
Help Net Security · 1 day ago
F5, Juniper Networks Patch Critical Vulnerabilities
SecurityWeek · 1 day ago
Thief snatches school snapper's SD cards in smash & grab
The Register Security · 1 day ago
Android adds AI-powered scam alerts, hangs up on bank impostors
Help Net Security · 1 day ago
Microsoft: October Windows update may break Smart App Control
BleepingComputer · 1 day ago
Microsoft Patches Two Dozen RCE Flaws in Office
SecurityWeek · 1 day ago
BAE Systems cyberattack disrupts US federal court operations
BleepingComputer · 1 day ago
User refused to change her password because everyone already knew it
The Register Security · 1 day ago
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
SecurityWeek · 1 day ago
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The Hacker News · 1 day ago
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
The Hacker News · 1 day ago
BeyondTrust patches zero-day exploited in attacks since August
BleepingComputer · 1 day ago
Why Active Directory weaknesses stay open for years in teams with one or two admins
Help Net Security · 1 day ago
The cyber talent shortage? Job postings just hit a four-year low
Help Net Security · 1 day ago
Stolen AI API keys are paying for hackers’ autonomous scans
Help Net Security · 1 day ago
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
The Hacker News · 1 day ago