Inside the Modern SOC: The Identity Front Door
The Identity Gap: Why Trust Has Become the New Attack Surface In The 72-Minute Race, we explored how attackers are compressing the time between initial…
Latest Cybersecurity News — Page 167
View all →
Snowflake attacker pleads guilty to hack of 165 companies’ data
Moucka and other members of the group used stolen login credentials to compromise data belonging to at least 165 customers of a US-based software-as-a-service company.…
Announcing Cloudflare Ambassadors, Community Engineers, and another $1M in open-source funding
As a platform for helping build a better Internet, Cloudflare helps turn ideas into real products and experiences around the world. Across communities and backgrounds,…
Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.…
18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host
A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even…
Google Chrome 151 Update Fixes 41 Security Vulnerabilities, Including 6 Critical Flaws
Google has released Chrome version 151.0.7922.108/.109 for Windows and macOS, and version 151.0.7922.108 for Linux. This update delivers 41 security fixes across various components of…
US fuel gauge exposure fell by more than half in three months
Every month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak.…
AI chat bots are sliding into League of Legends friend requests
Lina K., a co-worker, recently shared a firsthand account of how bots are adding League of Legends players via the Riot client friends list immediately…
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware…
Aussie Broadband actively exploring AI in customer service
Aussie Broadband is actively exploring AI as a handoff technology for routine and repetitive customer support requests. The telco has traditionally championed a human-centred ethos…
Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix
Black Hat — The National Motor Freight Traffic Association (NMFTA) says a 2024 safety recall for Bendix’s EC80 heavy-truck brake controller quietly fixed a set…
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover Pierluigi Paganini August 07, 2026 WordPress XSS2Shell flaw enables admin takeover and remote code…