Latest Cyber Security News

Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

Swati KhandelwalAug 11, 2026AI Security / Cyber Attack A malicious tool server connected to an AI coding assistant can quietly walk off with...

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizations across the...

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over...

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

Ravie LakshmananAug 11, 2026Supply Chain Attack / Vulnerability Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting...

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

Ravie LakshmananAug 10, 2026Ransomware / Cybercrime Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously...
1...242526...37Page 25 of 37

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

Individuals and organizations in Cambodia have emerged as...

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Threat actors linked by Arctic Wolf to Dark...

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

Academic researchers have disclosed a Rowhammer attack impacting...

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

Ravie LakshmananAug 27, 2026Vulnerability / Web Security The...

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The U.S. Department of Justice (DoJ) on Wednesday...

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

Ravie LakshmananAug 26, 2026Malware / Cyber Espionage Cybersecurity...

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new...

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing

Swati KhandelwalAug 26, 2026Red Teaming / Security Operations...