Critical Next.js vulnerability exposes servers to unauthorized requests and potential data leaks.

The hacker group "ShinyHunters" in a new wave of cyberattacks has gained access to data from large companies such as Google, Sony, AMD, and Rockstar.

A new version of the "Kazuar" malware; a tool attributed to Russian hackers designed for covert infiltration, espionage, and information gathering.

The 4th Linux kernel flaw this month can lead to stolen SSH host keys.

NorthC data center outside Amsterdam suffers fire.

ESET details new Ghostwriter activity targeting Ukrainian government.

Loopscale Breach Twist: Hacker Offers to Return Funds for 20%.

Australians among 560 million users around the world caught in Ticketmaster hack.

Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt.

Russian hackers turn Kazuar backdoor into modular P2P botnet.

INTERPOL’s Operation Ramz led to 201 arrests across 13 MENA countries, with 382 suspects and 3,867 victims identified.

Authorities seized 53 servers while targeting phishing, malware, and cyber scam operations.

Clean-looking phishing emails are bypassing filters and hitting US orgs hard.

Fake invitations + CAPTCHA tricks lead to credential theft, OTP capture & RMM tools.

Four malicious npm packages with 3,006 downloads were found delivering infostealers and Phantom Bot DDoS malware.

One package clones leaked Shai-Hulud worm code, while others steal SSH keys, cloud credentials and wallet data.

NGINX bug (CVE-2026-42945) now under active exploitation.

Critical heap overflow in rewrite module. Attackers can crash workers with one request (possible RCE).

New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords.

AudioHijack: adversarial audio attacks on generative voice models transfer from open weights to Microsoft and Mistral production systems.

Public Amazon bucket leaks sensitive guest data from Japanese hotel platform Tabiq.

Hacktivists, Ransomware, and a 124% Surge Across DACH.

Millions Impacted Across Several US Healthcare Data Breaches.

‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery.

Poland directs officials to ditch Signal in favor of 'secure' state-developed alternative.