95% of Security Teams Blindsided by Vulnerabilities Between Tests
The vast majority of enterprise security teams are being blindsided by vulnerabilities that scheduled testing never catches, according to new research from Synack, which describes…
Latest Cybersecurity News — Page 294
View all →
A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now
As modern cars have evolved into multi-ton computers on wheels, drivers are beginning to learn they need to install security updates for their vehicles’ code,…
AWS wants GuardDuty to automate the first steps of threat investigations
Amazon GuardDuty investigation agent is now in public preview. The feature provides AI-powered investigations of GuardDuty findings, AWS accounts and AWS organizations, helping security teams…
AI nudify apps spark legal scrutiny of Apple and Google’s profits
You expect all kinds of apps on Apple’s App Store and Google’s Play Store, from weather monitors to home automation apps and games. What you…
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable…
UK regulator crackdown on finfluencers gathers pace
The UK financial services regulator took enforcement action against 74 “finfluencers” last year, as it continues to target unregulated individuals who use social media to…
Estée Lauder Data Breach Linked To Oracle EBS Flaw
The Estée Lauder data breach has prompted the global cosmetics company to notify affected individuals after hackers exploited a vulnerability in Oracle E-Business Suite, a platform used…
Clover Health Investments Discloses Data Breach
Healthcare technology company Clover Health Investments has disclosed a data breach impacting customers’ personal and health information. Discovered on July 4, the incident was the…
Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875
Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875 Pierluigi Paganini July 21, 2026 Attackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on…
White hat hacker Park Chan-am zeros in on the AI era’s key security challenges
The ever-widening blast radius of AI testing Local AI testing environments are becoming a dangerous security blind spot that information security leaders often overlook. Rapid…
Exploitation in the Wild of wp2shell
What are CVE-2026-63030 & CVE-2026-60137? These vulnerabilities comprise a critical pre-authentication remote code execution (RCE) chain in WordPress Core, dubbed “wp2shell”, discovered by Searchlight Cyber…
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. Last…