Stay Informed

Cybersecurity News

Home / News

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

DataBreaches.net
DataBreaches.net Breaches & leaks

KR: HYBE data breach exposes employee medical records, financial details

Lee Hae-rin reports: HYBE, the music agency behind K-pop group BTS, disclosed a cyberattack that exposed personal information of current and former employees a…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles

A Chmod Calculator That Makes Linux Permissions Clearer

David Goguen’s free chmod calculator shows what Linux permission numbers mean before you copy a command.

Linux

The Record
The Record Breaches & leaks

Largest crypto exchange in Brazil confirms cyberattack as millions flow out of platform

Blockchain security companies said more than $46 million left the Mercado Bitcoin platform.

BleepingComputer
BleepingComputer

Chinese hackers use ARTEX AI in automated attacks against 200 orgs

Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries.…

The Record
The Record Breaches & leaks

Michigan State cyber incident claimed by ransomware gang behind recent hospital attack

A recent post by the BYOD gang appears to line up with a security incident that prompted campus-wide action at Michigan State University. BYOD drew attention i…

BleepingComputer
BleepingComputer Breaches & leaks

Fintech platform Sageworks taken offline after suspected cyberattack

Financial technology company Abrigo has restored its Sageworks risk management application, except for borrower-facing capabilities, following an outage trigge…

BleepingComputer
BleepingComputer

Google disrupts million-device XCPE Android malware botnet, bans TV box maker

Google and industry partners have dismantled the XCPE malware botnet consisting of more than 1.3 million Android TV streaming TV boxes that Google says its man…

Android

The Record
The Record Breaches & leaks

Polymarket pledges to give $3.9 million back to victims after site compromise

In a post-mortem about an October 29 incident, prediction market Polymarket said it will pay people back what they lost, as well as compensate them for the sit…

The Hacker News
The Hacker News Breaches & leaks

⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

Some attacks this week didn't need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that pe…

Linux Android

The Record
The Record Breaches & leaks

Russia's statistics agency confirms cyberattack claimed by Belarusian and Ukrainian hackers

An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia's federal statistics agency, Rosstat, and stolen vast amounts of sensitive…

The Hacker News
The Hacker News

Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access

A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google. Google say…

Android

BleepingComputer
BleepingComputer Alerts

BTCPay Server warns of hot wallet crypto thefts on outdated instances

The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "…

BleepingComputer
BleepingComputer Breaches & leaks

Your Mobile Carrier Stores Your Call Logs for Years

Mobile carriers can retain years of call and text metadata, exposing sensitive details about customers' relationships, locations, and daily routines if breache…

The Hacker News
The Hacker News Breaches & leaks

DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud Environment

Cybersecurity researchers have disclosed details of a cyber espionage campaign targeting Israel and the Kurdistan Region of Iraq by an Iran state-aligned threa…

The Record
The Record Alerts

Apple warns users in 99 countries of mercenary spyware

Apple does not attribute attacks or the notices to specific malicious actors or geographical regions, the notification said, due to the “extreme cost, sophisti…

Apple

The Record
The Record Breaches & leaks

Russian and Ukrainian hackers hijack emergency apps to spread fake nuclear attack warnings

A popular Ukrainian air raid alert system was hacked over the weekend, prompting a cyber group to breach a similar Russian system in retaliation.

BleepingComputer
BleepingComputer Breaches & leaks

Hackers disrupt refrigeration systems at European supermarkets

A cyberattack on refrigeration systems has disrupted stores run by multiple supermarket chains across several European countries after hackers remotely changed…

BleepingComputer
BleepingComputer

Microsoft fixes Smart App Control broken by October Windows update

Microsoft has resolved a known issue that prevented some users from activating the Smart App Control security feature after installing the October 2026 KB51276…

Windows

The Record
The Record Breaches & leaks

Second wave of suspected cyberattacks hits supermarket freezers across Europe

Supermarket and grocery store refrigerators across Europe appear to have been hacked early Monday — the second such incident in recent weeks where attackers ha…

BleepingComputer
BleepingComputer Vulnerabilities

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks.…

GitLab

The Hacker News
The Hacker News Vulnerabilities

Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open…

The Hacker News
The Hacker News

Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy

Forty percent of security teams now use AI every day, and another 56% are testing it. Only 4% have no plans to adopt it, according to Prophet Security's State …

BleepingComputer
BleepingComputer Breaches & leaks

Synology warns of C3RB3R ransomware attacks targeting NAS devices

Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware atta…

The Hacker News
The Hacker News Breaches & leaks

Attackers Pose as IT Support on Microsoft Teams, Abuse AD CS to Steal Company Data

Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certi…