Community icon

Cybersecurity

!cybersecurity@sh.itjust.works

Hot
New Old Active
  • Create post
  • Invite people to join
  • Search
  • About community
  • Join
    • Hot
    New Old Active
    Posts Comments
    List Tile Wide tile

    Microsoft confirms an AI worm is propagating through Copilot and other MS apps | CSO Online

    by
    85
    206
    1

    Critical Azure Cosmos DB flaw risked cross-tenant compromise | news | SC Media

    by
    0
    5

    Cisco FMC static credentials exploited by attackers (CVE-2026-20316) - Help Net Security

    by
    0
    7

    Prisma Browser

    by

    My employer is requiring the use of Prisma Browser to access company resources from a personal device.

    4
    7

    Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

    by
    0
    24

    The 73,000-server market reselling Western frontier AI into China - Infrawatch

    by
    0
    8

    Semiconductor Firm Analog Devices Discloses Data Breach - SecurityWeek

    by
    0
    3

    Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

    by
    0
    6

    LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

    by
    0
    10

    Education department says 607,000 records taken in cyber attack

    by
    0
    22

    Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

    by
    0
    16

    73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack

    by
    0
    14

    New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

    by
    0
    18

    Word worm crawls into Copilot, spreads chaos

    by
    2
    24

    The Average Cost of a Data Breach Rises to $5 Million - Infosecurity Magazine

    by
    0
    11

    Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit | Proofpoint US

    by
    0
    10

    Patch-Resistant Ruflo Flaw Can Unleash Malicious AI Agent Swarms

    by
    0
    3

    24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

    by
    3
    21

    Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

    by
    0
    8

    Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard - Infosecurity Magazine

    by
    0
    17

    Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

    by
    0
    5

    20-Year-Old Vulnerability Enables Takeover of Thousands of Data Centres in Minutes

    by
    2
    22

    Minnesota IT officials disclose 'coordinated cyberattack' at more than 30 local water systems

    by
    0
    23

    Claude chats and workspaces turn up on Google | Cybernews

    by
    6
    28

    Ransomware Groups Increasingly Deploy EDR Kill Techniques

    by
    0
    8

    Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation

    by
    0
    16

    ChatGPT joins the most impersonated brands in phishing attacks - Help Net Security

    by
    1
    17

    OpenAI not part of the new Open Secure AI Alliance | CSO Online

    by
    0
    25

    GitHub Adds 3-Day Dependabot Cooldown to Block Malicious Package Updates

    by
    0
    19

    MedusaHVNC Trojan Creates Hidden Desktops to Hijack Browsers and Steal Data

    by
    0
    6

    Confused Deputy Flaws Persist in Google Cloud, Microsoft Azure

    by
    0
    11

    Health system in South Carolina, Georgia closes offices after malware affects networks

    by
    0
    10

    Did an AI Really Hack Hugging Face? | LiveOverflow

    by
    Video Thumbnail
    0
    15

    What does GitHub’s security team even do?

    by
    5
    19
    2

    Google wants to store a selfie video of your face | Malwarebytes

    by
    15
    40
    2

    Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

    by
    0
    46

    Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials - Infosecurity Magazine

    by
    8
    102

    MCBS Data Breach Affects 1.2 Million Individuals - SecurityWeek

    by
    0
    3

    Iranian hackers continue attacks on US critical infrastructure | news | SC Media

    by
    1
    15

    Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

    by
    0
    11

    DentaQuest sends data breach notices to 15M ​DentaQuest breach notices sent to 15 million after health data theft | Cybernews

    by
    0
    7

    Call of Duty Mobile scam uses fake free points to steal player accounts | Malwarebytes

    by
    0
    9

    Pope's official prayer app commits cardinal sin, leaks 700K+ users' info

    by
    137
    35
    2

    Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

    by
    0
    17

    Year-long Russian attacks infect users as soon as they look at an email

    by

    The highlights:

    0
    27

    Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

    by
    0
    16

    JetBrains Fixes Critical IntelliJ IDEA Code Execution Flaw and Four TeamCity Vulnerabilities

    by
    0
    10

    Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

    by
    0
    16

    WhatsApp Web chats exposed by Adobe's Acrobat extension flaw | Malwarebytes

    by
    2
    29

    Millions of cars could be tracked and unlocked by a hidden security flaw | Malwarebytes

    by
    7
    65

    French fleet manager data leak allowed unlocking of doors | Cybernews

    by
    0
    10
    1

    Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232) - Help Net Security

    by
    0
    9

    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

    by
    0
    7

    TA488 Targets Zimbra Mailservers with Half-Click Exploits | Proofpoint US

    by
    2
    5
    1

    Operation RoundPress Rolls on with More Half-Click Webmail Zero-Days from TA458 | Proofpoint US

    by
    0
    5

    Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign

    by
    0
    6

    Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

    by
    0
    21

    Chick-fil-A loyalty accounts hijacked using stolen passwords | Malwarebytes

    by
    8
    49

    IRGC Claims It Destroyed Amazon's Bahrain Data Center

    by
    12
    50
    2

    Security teams keep finding critical flaws after scheduled testing ends - Help Net Security

    by
    1
    5

    Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

    by
    0
    7

    Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft - SecurityWeek

    by
    0
    8

    Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

    by
    0
    10

    Public PoC Released for Windows NT OS Kernel Privilege Escalation Vulnerability

    by
    0
    11

    Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569) | Ransom-ISAC Blog - Ransom-ISAC

    by
    0
    4

    Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack

    by
    0
    16

    CISA Adds Four Known Exploited Vulnerabilities to Catalog | CISA

    by

    CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability

    1
    7

    Oracle Patches 1,400+ Vulnerabilities, Critical Flaws Expose Enterprise Servers to Remote Attacks

    by
    3
    15

    Estée Lauder discloses data breach tied to Oracle EBS vulnerability - Help Net Security

    by
    0
    10

    Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

    by
    0
    11

    Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities

    by
    2
    11

    Breach of AI music platform Suno affected 55M+ user accounts

    by
    0
    31

    Qilin exploits Palo Alto Networks GlobalProtect VPN firewalls | news | SC Media

    by
    0
    3

    OpenAI says AI models went rogue during testing, triggering 'unprecedented' breach at startup

    by

    Blog Post by OpenAi:

    30
    5
    1

    AgentBaiting: How Fake AI Skills Deliver Malware at Scale

    by
    0
    15

    Hackers Hide Malware Commands in Outlook Events Dated 2050 and Use as C2 Channel

    by
    0
    19

    Hugging Face confirms breach affected internal datasets and credentials, urges users to take action | TechCrunch

    by
    0
    17

    Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

    by
    0
    11

    LG monitors criticized for silently installing McAfee ads via Windows Update | brief | SC Media

    by
    17
    143

    Scammers impersonate FBI on social media, prey on crime victims

    by
    1
    44

    FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

    by
    0
    5

    Cruciferra Crypter Uses Process Ghosting to Evade Detection - Infosecurity Magazine

    by
    0
    4

    CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

    by
    0
    8

    Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

    by
    1
    18

    EY data breach exposes client tax documents | Cybernews

    by
    0
    5

    A cyberattack hit Nichirei, one of Japan's largest food companies - Security Affairs

    by
    0
    3

    Attackers target critical FortiSandbox flaws as CISA issues patch order

    by
    0
    1

    Researcher poisons open-weight AI model for under $100

    by
    1
    49

    Wordpress remote code execution vulnerability July 17

    by

    The vulnerability reportedly allows an unauthenticated attacker to execute code via the WordPress REST API batch endpoint, potentially resulting in complete compromise of the website and its underlying data. No valid account or user interaction is required.

    3
    28

    Moroccan intelligence insider reveals widespread use of Pegasus hacking software

    by

    A former agent of the DGST, Morocco’s domestic intelligence agency, provides unprecedented insight into mass surveillance targeting journalists and opponents of the regime.

    0
    31
    4

    Romania's land registry hit by cyber attack, data allegedly for sale - Help Net Security

    by
    0
    11

    1M+ Emails Use Hidden Text to Dupe AI Security Filters

    by
    1
    25

    Nightmare Eclipse Drops 'LegacyHive' Windows Zero-Day  - SecurityWeek

    by
    4
    14

    Teen hackers jailed after live streaming cyber attack on TfL

    by
    6
    44
    1

    UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

    by
    0
    8

    Multiple Splunk Enterprise Vulnerabilities Enables path Traversal and Information Disclosure Attacks

    by
    2
    3

    F5 Patches Multiple NGINX Vulnerabilities Enabling Heap Buffer Overflow and Code Execution Attacks

    by
    0
    12

    Claude Flaw Automatically Sends Malicious Prompts to AI Agents

    by
    0
    15

    Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries

    by
    2
    41

    CVE-2026-62314 - Anubis: Policy bypass via client controlled X-Original-URI header

    by
    0
    6