#news


Ukraine identifies infostealer operator tied to 28,000 stolen accounts

May 21, 2026 // 10:37

The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odesa suspected of running an infostealer malware operation targeting […]

GitHub links repo breach to TanStack npm supply-chain attack

May 21, 2026 // 10:36

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last […]

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

May 21, 2026 // 10:26

Drupal has released security updates for a “highly critical” security vulnerability in Drupal Core that could be exploited by attackers to achieve remote code execution, […]

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

May 21, 2026 // 10:26

GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an employee device involving a poisoned […]

Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

May 20, 2026 // 20:10

Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the security of artificial intelligence (AI) agents. RAMPART, […]

Grafana breach caused by missed token rotation after TanStack attack

May 20, 2026 // 18:56

The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following the TanStack npm supply-chain attack last […]

Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks

May 20, 2026 // 17:40

Microsoft on Tuesday said it disrupted a malware-signing-as-a-service (MSaaS) operation that weaponized the company’s Artifact Signing system to deliver malicious code and conduct ransomware and […]

Identity Alone Isn’t Enough: Why Device Security Has to Share the Load

May 20, 2026 // 17:16

Identity has long been the load-bearing wall of cybersecurity. The logic was simple: verify the employee, secure the access. But as professionalized threat actors weaponize […]

Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API

May 20, 2026 // 16:00

Cybersecurity researchers have flagged fresh activity from a China-aligned threat actor known as Webworm in 2025, deploying custom backdoors that employ Discord and Microsoft Graph […]

Drupal critical update to fix bug with high exploitation risk

May 20, 2026 // 15:56

Drupal has announced a “core security release” scheduled for later today, warning that threat actors might develop exploits within hours of the update disclosure. Administrators […]

Previous 1 … 294 295 296 297 298 … 388 Next