Breaking cybersecurity news · rated for what you should do about it.

Enterprise network administrators using Cisco's widely-deployed security appliances face real downtime risk until they apply this patch, making immediate remediation a business continuity priority.

Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.

The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly d…

OpenAI Unveils New Cybersecurity Model GPT-5.6-Cyber    SecurityWeek

Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter's. The flaw sat in the annotation tool, the feature that lets participants draw…

Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-se…

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations.

CDM203 - System Security Analyst    CISA (.gov)

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to…

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks    bleepingcomputer.com

DDoS attacks over 1 Tbps surged fivefold in the second quarter    bleepingcomputer.com

Mozilla updates GPG signing key for Firefox releases after exposure    bleepingcomputer.com

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. "Its recovery ecosystem combines the Ses…

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent.

8 Popular Cybersecurity Certifications in 2026    coursera.org

Mozilla updates GPG signing key for Firefox releases after exposure    BleepingComputer

Mozilla Issues New Firefox GPG Key Following Exposure    SecurityWeek

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found…

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data stora…

Cyber Storm X: 20 Years of Readiness, Resilience, and Real‑World Impact    CISA (.gov)

DDoS attacks over 1 Tbps surged fivefold in the second quarter    BleepingComputer

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks    BleepingComputer

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response. "Built on GPT‑5.6 Sol, it is trained to improve capabilities…