CYBER ATTACKS

Cyber Attacks

Attackers Are Already Probing a Critical SonicWall SMA 1000 Flaw Days After the Patch

Sneha Gupta - 0
A critical, CVSS 10.0 SSRF flaw in SonicWall's SMA 1000 appliances (CVE-2026-102255) is already being probed in the wild, just two days after SonicWall shipped a fix.
Cyber Attacks

GhostAction Campaign Plants Secret-Stealing GitHub Actions Workflows in Tens of Thousands of Repositories

Sneha Gupta - 0
The GhostAction campaign is back: attackers using stolen GitHub credentials have pushed fake 'security audit' workflows that steal repository secrets and cloud keys, with Socket counting more than 500 accounts involved since October 7.

FBI Arrests Another Suspected ShinyHunters Member After FBI Jobs Portal Breach

FBI and International Partners Disrupt Hacking Tools Behind China-Linked Flax Typhoon

Alleged Leading Qilin Ransomware Member Arrested in Japan and Extradited to Germany

Warlock Ransomware Breaches Water Utility and Telecom Provider Using Year-Old SharePoint Flaws

Security News

New Way of Work

AI Coding Tools Leaked Over 13,000 Internal Screenshots to Public GitHub Repositories

Sneha Gupta - 0
Security researchers at Glow found that AI coding assistants were uploading screenshots to public repositories as a workaround for a missing feature, exposing billing systems, treasury consoles and unreleased products at more than 300 organizations.
General

Critical Keycloak Flaw Let Attackers Reset Any Password Without Email Access

Sneha Gupta - 0
A critical bug in Keycloak's password reset flow, tracked as CVE-2026-18963 with a CVSS score of 9.1, could have let attackers take over any account without ever accessing the victim's email.

Four-Year Study Finds Over 9,300 Exposed AWS Keys Are Still Active, Hundreds With Full Admin Rights

Critical GitLab Vulnerability Already Under Attack Days After Patch Release

Microsoft Patches Maximum-Severity Entra ID Flaw Already Exploited in Attacks

CVSS is Dead. CISA Just Made It Official.

Subscribe

* indicates required

Intuit Mailchimp

Security Standards

Documents

DNS4EU – A Whitepaper

Amit Gupta - 0
DNS4EU is a European Union initiative aimed at strengthening digital sovereignty and cybersecurity. Unlike foreign DNS services that often lack GDPR compliance and transparency,...

The real Cost Of A Free Wi-Fi Connection

Bug Bounty Programs: March 2022

Regional

New Way of Work

AI Coding Tools Leaked Over 13,000 Internal Screenshots to Public GitHub Repositories

Sneha Gupta - 0
Security researchers at Glow found that AI coding assistants were uploading screenshots to public repositories as a workaround for a missing feature, exposing billing systems, treasury consoles and unreleased products at more than 300 organizations.

CVSS is Dead. CISA Just Made It Official.

The U.S.  SEC takes a strong stance on Cybersecurity Risk Management, Incident Disclosure, Strategy, and Governance by Public Companies

Vulnerabilities

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Root Access on Fully Patched Devices

Sneha Gupta - 0
Security firm Volexity found an attacker chaining three Ivanti Connect Secure flaws, including one still unpatched, to get root access on fully updated VPN appliances starting October 3, 2026. Ivanti has fixed two of the three bugs, and the lead flaw is marked as actively exploited.

GitLab Fixes Maximum-Severity Flaw That Let Outsiders Run Code on CI/CD Servers

Sneha Gupta - 0
GitLab has patched a maximum-severity, CVSS 10.0 flaw (CVE-2026-97229) that could let unauthenticated attackers run code on self-managed servers through a crafted CI/CD regular expression.

Citrix Patches Critical NetScaler Flaw That Could Allow Remote Code Execution in SAML Setups

Sneha Gupta - 0
Citrix urged customers to upgrade NetScaler ADC and Gateway after fixing CVE-2026-107406, a CVSS 9.5 memory overflow that can lead to remote code execution when appliances are configured for SAML.

Maximum-Severity SonicWall SMA1000 Flaw Draws Exploitation Attempts Days After Patch

Sneha Gupta - 0
Security firm Previdian detected exploitation attempts against CVE-2026-102255, a CVSS 10 server-side request forgery flaw in SonicWall SMA1000 appliances, days after SonicWall released fixes.

Critical Atlassian Data Center Flaw Exploited Two Hours After Technical Details Went Public

Sneha Gupta - 1
Attackers began probing CVE-2026-21589, a CVSS 9.3 file access flaw in eight Atlassian Data Center products including Jira and Confluence, within two hours of researchers publishing technical details. Patches are available.

Data Breaches

Malware at Nippon Columbia Puts Data of 8.6 Million Japanese Karaoke Customers at Risk

Sneha Gupta - 0
Data Breaches
Japanese karaoke giant Daiichi Kosho says malware found at its data-handling contractor Nippon Columbia may have exposed names, birth dates, emails and phone numbers of 8.6 million customers and 93,000 employees.

LATEST ARTICLES

123...15Page 1 of 15

Most Popular

Load more

Stay Connected

1,321FollowersFollow
61,453SubscribersSubscribe

Write to Us

Want to report a concern or publish a security incident on our channel?

Write to us