#surge


Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Oct 6, 2026 // 12:47

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers […]

Google halts open-source bug bounty program amid AI spam surge

Oct 5, 2026 // 12:37

Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. The company’s OSS VRP […]

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Sep 21, 2026 // 17:32

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things […]

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Aug 25, 2026 // 14:58

Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate […]

Password spraying attacks surge 155x as hackers exploit MFA gaps

Aug 19, 2026 // 17:17

Huntress has observed a 155x increase in password spraying attacks in the first half of 2026. Brute force is old news, but the spin driving […]

Microsoft warns of surge in ACR Stealer attacks on customers

Jul 18, 2026 // 17:58

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication tokens, and sensitive documents from its enterprise customers. […]

FBI links cybercriminals to sharp surge in cargo theft attacks

May 1, 2026 // 00:17

The U.S. Federal Bureau of Investigation (FBI) warned the transportation and logistics industry of a sharp rise in cyber-enabled cargo theft, with estimated losses in […]

New BlackFile extortion group linked to surge of vishing attacks

Apr 25, 2026 // 00:37

A new financially motivated hacking group tracked as BlackFile has been linked to a wave of data theft and extortion attacks against retail and hospitality […]

NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions

Apr 17, 2026 // 10:44

The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed in its National […]