Top Security News for Today

Suche Low-Level Entwickler für eigenes Konsolen-Projekt
https://www.reddit.com/r/lowlevel/comments/1rn60z1/suche_lowlevel_entwickler_für_eigenes/

38 researchers red-teamed AI agents for 2 weeks. Here's what broke. (Agents of Chaos, Feb 2026)
https://www.reddit.com/r/netsec/comments/1rn4b6i/38_researchers_redteamed_ai_agents_for_2_weeks/

Walking x86-64 page tables by hand in QEMU + GDB
https://www.reddit.com/r/lowlevel/comments/1rnpoc2/walking_x8664_page_tables_by_hand_in_qemu_gdb/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

From Chrome Extension Supply-Chain Compromise to Host Malware: Technical Breakdown of the ShotBird Campaign
https://www.reddit.com/r/netsec/comments/1rob5no/from_chrome_extension_supplychain_compromise_to/

Fake Claude Code Install Guides Spread Amatera Infostealer in New “InstallFix” Malvertising Campaign
https://www.reddit.com/r/netsec/comments/1robwok/fake_claude_code_install_guides_spread_amatera/

How AI Assistants are Moving the Security Goalposts
https://krebsonsecurity.com/2026/03/how-ai-assistants-are-moving-the-security-goalposts/

AirSnitch: Demystifying and Breaking Client Isolation in Wi-Fi Networks
https://www.reddit.com/r/netsec/comments/1rojhfl/airsnitch_demystifying_and_breaking_client/

DumpBrowserSecrets – Browser Credential Harvesting with App-Bound Encryption Bypass
https://www.darknet.org.uk/2026/03/dumpbrowsersecrets-browser-credential-harvesting-with-app-bound-encryption-bypass/

MCP Security Checklist - 40 controls for securing AI agent tool infrastructure
https://www.reddit.com/r/netsec/comments/1roru4f/mcp_security_checklist_40_controls_for_securing/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Secure agentic AI for your Frontier Transformation
https://www.microsoft.com/en-us/security/blog/2026/03/09/secure-agentic-ai-for-your-frontier-transformation/

New Attack Against Wi-Fi
https://www.schneier.com/blog/archives/2026/03/new-attack-against-wi-fi.html

How We Hacked McKinsey's AI Platform
https://www.reddit.com/r/netsec/comments/1rp0l99/how_we_hacked_mckinseys_ai_platform/

Sign in with ANY password into Rocket.Chat EE (CVE-2026-28514) and other vulnerabilities we’ve found with our open source AI framework
https://www.reddit.com/r/netsec/comments/1rp4lyj/sign_in_with_any_password_into_rocketchat_ee/

9th March – Threat Intelligence Report
https://research.checkpoint.com/2026/9th-march-threat-intelligence-report/

Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643
https://bishopfox.com/blog/cve-2026-21643-pre-authentication-sql-injection-in-forticlient-ems-7-4-4

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Your Duolingo Is Still Talking to ByteDance: How Pangle Fingerprints You Across Apps After You Said No
https://www.reddit.com/r/netsec/comments/1rpqlh2/your_duolingo_is_still_talking_to_bytedance_how/

Jailbreaking the F-35 Fighter Jet
https://www.schneier.com/blog/archives/2026/03/jailbreaking-the-f-35-fighter-jet.html

BeatBanker: A dual‑mode Android Trojan
https://securelist.com/beatbanker-miner-and-banker/119121/

Russian military hackers revive advanced malware to spy on Ukraine, researchers say
https://therecord.media/russia-apt-28-revives-malware-to-spy-on-ukraine

UK plans to shift fraud fight onto telecoms, tech companies
https://therecord.media/uk-plans-to-shift-fraud-fight-to-telecoms-tech

Cybercriminals impersonating city officials to steal permit payments, FBI says
https://therecord.media/cybercriminals-impersonate-city-officials-permit-payments

CISA shortens patch deadline for critical Ivanti, SolarWinds bugs
https://therecord.media/cisa-shortens-patch-deadline-ivanti-solarwinds

Finnish intelligence warns of persistent cyber espionage from Russia, China
https://therecord.media/finnish-intel-warns-espionage-china-russia

Rudd confirmed to head NSA, Cyber Command after near year-long vacancy
https://therecord.media/rudd-confirmed-nsa-cyber-command-chief

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Meta says it culled millions of scam ads amid accusations that it profits from them
https://therecord.media/meta-scam-advertising-crackdown

Cyberattack on ambulance provider affects 235,000
https://therecord.media/235000-affected-cyberattack-ambulance-provider

Contagious Interview: Malware delivered through fake developer job interviews
https://www.microsoft.com/en-us/security/blog/2026/03/11/contagious-interview-malware-delivered-through-fake-developer-job-interviews/

Iran-linked hackers claim cyberattack on Albania’s parliament email systems
https://therecord.media/iran-linked-hackers-claim-cyberattack-albania-parliament

Medical device giant Stryker confirms cyberattack as employees say devices were wiped
https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/

Forensic analysis of LummaC2 infection unmasks DPRK operative behind Polyfill.io supply chain attack and Gate.us infiltration
https://www.reddit.com/r/netsec/comments/1rredk3/forensic_analysis_of_lummac2_infection_unmasks/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

MicroStealer Analysis: A Fast-Spreading Infostealer with Limited Detection
https://www.reddit.com/r/netsec/comments/1rrmv9i/microstealer_analysis_a_fastspreading_infostealer/

A Video Chat That Leaves No Trace
https://www.reddit.com/r/netsec/comments/1rrmshq/a_video_chat_that_leaves_no_trace/

Alipay (1B+ users) DeepLink+JSBridge Attack Chain: Silent GPS Exfiltration
https://www.reddit.com/r/netsec/comments/1rrl3au/alipay_1b_users_deeplinkjsbridge_attack_chain/

CVE-2026-21509: Actively Exploited Microsoft Office Security Feature Bypass — PoC Public, CISA KEV Listed
https://www.reddit.com/r/netsec/comments/1rrof59/cve202621509_actively_exploited_microsoft_office/

Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft
https://www.microsoft.com/en-us/security/blog/2026/03/12/storm-2561-uses-seo-poisoning-to-distribute-fake-vpn-clients-for-credential-theft/

Fake government and Starlink apps used in malware campaign targeting Brazil
https://therecord.media/fake-gov-apps-malware-android-brazil

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Ransomware incident responder gave info to BlackCat cybercriminals during negotiations, DOJ alleges
https://therecord.media/ransomware-blackcat-doj-incident-responder

Winning CTFs: A Proving Ground at HackMex & Ekoparty
https://bishopfox.com/blog/winning-ctfs-a-proving-ground-at-hackmex-ekoparty

European Council includes ban on nudification tools in its proposal for amending AI Act
https://therecord.media/european-council-includes-nudification-ban-ai-act

Alipay (1B+ users) DeepLink vulnerability allows silent GPS extraction via URL - 6 regulators now investigating, vendor says normal functionality
https://www.reddit.com/r/netsec/comments/1rstjkp/alipay_1b_users_deeplink_vulnerability_allows

RegPwn - Windows LPE vulnerability (now fixed)
https://www.reddit.com/r/netsec/comments/1rstavq/regpwn_windows_lpe_vulnerability_now_fixed

CrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root
https://www.reddit.com/r/netsec/comments/1rsqt48/crackarmor_critical_apparmor_flaws_enable_local

OSS Cartography can now map AI agents to cloud attack paths
https://www.reddit.com/r/netsec/comments/1rsw301/oss_cartography_can_now_map_ai_agents_to_cloud

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Upcoming Speaking Engagements
https://www.schneier.com/blog/archives/2026/03/upcoming_speaking_engagements_54.html

Analysis of 1,808 MCP servers: 66% had security findings, 427 critical (tool poisoning, toxic data flows, code execution)
https://www.reddit.com/r/netsec/comments/1rtxacu/analysis_of_1808_mcp_servers_66_had_security/

Quick question for people running CrowdStrike, Zscaler, Netskope or similar in production.
https://www.reddit.com/r/netsec/comments/1ru4cwc/quick_question_for_people_running_crowdstrike/

CVE-2024-45163: Remote DoS in Mirai C2 – research writeup + what it led me to build
https://www.reddit.com/r/netsec/comments/1ru6xxl/cve202445163_remote_dos_in_mirai_c2_research/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

CVE-2024-45163: Remote DoS in Mirai C2 – research writeup + what it led me to build
https://arxiv.org/abs/2410.09076

Post AI Agent Hacked Amazon & McKinsey, I compiled a list of 5 situations where deploying agents can be catastrophic
https://www.reddit.com/r/netsec/comments/1ruadi9/post_ai_agent_hacked_amazon_mckinsey_i_compiled_a/

The rise of malicious repositories on GitHub
https://www.reddit.com/r/netsec/comments/1ruphzh/the_rise_of_malicious_repositories_on_github/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

South Korean Police Accidentally Post Cryptocurrency Wallet Password
https://www.schneier.com/blog/archives/2026/03/south-korean-police-accidentally-post-cryptocurrency-wallet-password.html

TAS-GNN: A Status-Aware Signed Graph Neural Network for Anomaly Detection in Bitcoin Trust Systems
https://arxiv.org/abs/2603.13290

Accelerating Suffix Jailbreak attacks with Prefix-Shared KV-cache
https://arxiv.org/abs/2603.13420

Agent Privilege Separation in OpenClaw: A Structural Defense Against Prompt Injection
https://arxiv.org/abs/2603.13424

Technical Case Study of Privacy-Enhancing Technologies (PETs) for Public Health
https://arxiv.org/abs/2603.13444

Purifying Generative LLMs from Backdoors without Prior Knowledge or Clean Reference
https://arxiv.org/abs/2603.13461

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1rwzs83/the_most_organized_threat_actors_use_your_itsm/

The SOC Files: Time to “Sapecar”. Unpacking a new Horabot campaign in Mexico
https://securelist.com/horabot-campaign/119033/

IdentityGuard: Context-Aware Restriction and Provenance for Personalized Synthesis
https://arxiv.org/abs/2603.15679

Quantum Key Distribution Secured Federated Learning for Channel Estimation and Radar Spectrum Sensing in 6G Networks
https://arxiv.org/abs/2603.15649

State-Dependent Safety Failures in Multi-Turn Language Model Interaction
https://arxiv.org/abs/2603.15684

BadLLM-TG: A Backdoor Defender powered by LLM Trigger Generator
https://arxiv.org/abs/2603.15692

Remarks on the Relevance of Privacy Expectations for Default Opt-out Settings
https://www.schneier.com/blog/archives/2026/03/metas-ai-glasses-and-privacy.html

Observability for AI Systems: Strengthening visibility for proactive risk detection
https://www.microsoft.com/en-us/security/blog/2026/03/18/observability-ai-systems-strengthening-visibility-proactive-risk-detection/

Bank software vendor Marquis says more than 670,000 impacted by August breach
https://therecord.media/marquis-bank-vendor-data-breach

From Misconfigured Spring Boot Actuator to SharePoint Exfiltration: How Stolen Credentials Bypass MFA
https://www.trendmicro.com/en_us/research/26/c/from-misconfigured-spring-boot-actuator-to-sharepoint-exfiltrati.html

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Russian hackers exploit Zimbra flaw to breach Ukrainian maritime agency
https://therecord.media/russia-hackers-ukraine-zimbra-breach

When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures
https://www.microsoft.com/en-us/security/blog/2026/03/19/when-tax-season-becomes-cyberattack-season-phishing-and-malware-campaigns-using-tax-related-lures/

Interlock ransomware gang exploited Cisco firewall zero-day weeks before disclosure: Amazon
https://therecord.media/cisco-ransomware-interlock-firewalls

Hacking a Robot Vacuum
https://www.schneier.com/blog/archives/2026/03/hacking-a-robot-vacuum.html

Adversarial attacks against Modern Vision-Language Models
https://arxiv.org/abs/2603.16938

DeepStage: Learning Autonomous Defense Policies Against Multi-Stage APT Campaigns
https://arxiv.org/abs/2603.17100

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Man pleads guilty to $8 million AI-generated music scheme
https://therecord.media/man-pleads-guilty-8-million-ai-music-scheme

US seizes domains and infrastructure used in sprawling botnet campaigns
https://therecord.media/us-seizes-botnet-infrastructure-four-large-networks

Police dismantle dark web network exploiting child sexual abuse material
https://therecord.media/police-dismantle-dark-web-network-exploiting-child-abuse-images

California city reports ransomware attack as LA transit agency finds ‘unauthorized activity’
https://therecord.media/california-city-reports-ransomware-attack-la-metro

Secure agentic AI end-to-end
https://www.microsoft.com/en-us/security/blog/2026/03/20/secure-agentic-ai-end-to-end/

CTI-REALM: A new benchmark for end-to-end detection rule generation with AI agents
https://www.microsoft.com/en-us/security/blog/2026/03/20/cti-realm-a-new-benchmark-for-end-to-end-detection-rule-generation-with-ai-agents/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Evaluating AI and ML in Network Security: A Comprehensive Literature Review
https://www.reddit.com/r/netsec/comments/1rzji68/evaluating_ai_and_ml_in_network_security_a/

Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets Attackers
https://www.reddit.com/r/netsec/comments/1rziu2w/trivy_under_attack_again_widespread_github/

ONNX Hub silent=True suppresses all trust verification, enabling supply chain attacks on ML model loading (CVE-2026-28500, CVSS 9.1, no patch available)
https://www.reddit.com/r/netsec/comments/1s02jrq/onnx_hub_silenttrue_suppresses_all_trust/

LLVM Adventures: Fuzzing Apache Modules
https://www.reddit.com/r/netsec/comments/1s03z8j/llvm_adventures_fuzzing_apache_modules/

Agent skill marketplace supply chain attack: 121 skills across 7 repos vulnerable to GitHub username hijacking, 5 scanners disagree by 10x on malicious skill rates (arXiv:2603.16572)
https://www.reddit.com/r/netsec/comments/1s0dmuv/agent_skill_marketplace_supply_chain_attack_121/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Agent skill marketplace supply chain attack: 121 skills across 7 repos vulnerable to GitHub username hijacking, 5 scanners disagree by 10x on malicious skill rates (arXiv:2603.16572)
https://www.reddit.com/r/netsec/comments/1s0dmuv/agent_skill_marketplace_supply_chain_attack_121/

CanisterWorm Gets Teeth: TeamPCP's Kubernetes Wiper Targets Iran
https://www.reddit.com/r/netsec/comments/1s0lvk9/canisterworm_gets_teeth_teampcps_kubernetes_wiper/

Observations on AI generated Remote DuckDB via HTTP with mTLS
http://diablohorn.com/2026/03/22/observations-on-ai-generated-remote-duckdb-via-http-with-mtls/

No Zero-Day Needed: Russian Phishers Swipe Signal & WhatsApp Accounts with Plain Old Lies
https://www.reddit.com/r/netsec/comments/1s0ouoe/no_zeroday_needed_russian_phishers_swipe_signal/

A YC-Backed Startup Left Production AWS Keys Public for 5 Months.
https://www.reddit.com/r/netsec/comments/1s1ab3n/a_ycbacked_startup_left_production_aws_keys/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

A YC-Backed Startup Left Production AWS Keys Public for 5 Months.
https://www.reddit.com/r/netsec/comments/1s1ab3n/a_ycbacked_startup_left_production_aws_keys/

US soldier sentenced for helping North Korean IT workers
https://therecord.media/us-soldier-sentencer-for-helping-nk-it-workers

Microsoft Xbox One Hacked
https://www.schneier.com/blog/archives/2026/03/microsoft-xbox-hacked.html

The Verifier Tax: Horizon Dependent Safety Success Tradeoffs in Tool Using LLM Agents
https://arxiv.org/abs/2603.19328

Benchmarking Post-Quantum Cryptography on Resource-Constrained IoT Devices: ML-KEM and ML-DSA on ARM Cortex-M0+
https://arxiv.org/abs/2603.19340

A Novel Solution for Zero-Day Attack Detection in IDS using Self-Attention and Jensen-Shannon Divergence in WGAN-GP
https://arxiv.org/abs/2603.19350

The Broken Physics of Remediation
https://blog.qualys.com/vulnerabilities-threat-research/2026/03/23/the-broken-physics-of-remediation

California-based semiconductor testing company reports ransomware attack to SEC
https://therecord.media/ransomware-trio-tech-semiconductor-sec

Education company Kaplan reports data breach impacting more than 230,000
https://therecord.media/kaplan-data-breach-hack-notification

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Russian hacker who helped Yanluowang ransomware gang gets nearly 7-year prison sentence
https://therecord.media/hacker-russian-ransomware-sentenced-doj

Alleged OVHcloud data of 1.6M customers and 5.9M websites posted on popular forum for sale. CEO Comments
https://www.reddit.com/r/netsec/comments/1s2awo7/alleged_ovhcloud_data_of_16m_customers_and_59m/

Forensic Readiness Is Becoming a Strategic Security Discipline
https://www.reddit.com/r/netsec/comments/1s2alc9/forensic_readiness_is_becoming_a_strategic/

Anime streaming giant Crunchyroll says hacker stole data related to customer service tickets
https://therecord.media/crunchyroll-hacker-anime-data-theft

Dutch Finance Ministry probing cyber breach affecting internal systems
https://therecord.media/netherlands-finance-ministry-cyberattack-breach

Iran-linked ransomware gang targeted US healthcare org amid military conflict
https://therecord.media/iran-linked-ransomware-gang-targeted-us-healthcare-org

We rewrote SoftHSMv2 (the default PKCS#11 software HSM) in Rust — 617+ tests, PQC support, memory-safe key handling
https://www.reddit.com/r/netsec/comments/1s2f3le/we_rewrote_softhsmv2_the_default_pkcs11_software/

With the rise of SaaS and cloud applications, the browser has become the new workplace. That's where net-security comes in.
https://www.reddit.com/r/netsec/comments/1s2cryp/with_the_rise_of_saas_and_cloud_applications_the/

We scanned 900 MCP configs on GitHub. 75% had security problems.
https://www.reddit.com/r/netsec/comments/1s2j0zl/we_scanned_900_mcp_configs_on_github_75_had/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

UK cyber chief urges ‘full court press’ to counter rising cyber threats
https://therecord.media/uk-cyber-chief-urges-full-court-press-to-counter-risks

Russian botnet operator linked to major ransomware attacks sentenced in US
https://therecord.media/russian-botnet-operator-sentenced-ransomware

Navia breach exposed HackerOne employee PII due to a BOLA-style access in third-party system
https://therecord.media/navia-breach-exposed-hackerone-employee-pii-due-to-a-bola-style-access-in-third-party-system

Puerto Rico government agency cancels driver’s license appointments after cyberattack
https://therecord.media/puerto-rico-gov-agency-cancels-driver-license-appointments-cyber-incident

Ransomware attack disrupts operation at major Spanish fishing port
https://therecord.media/port-of-vigo-ransomware

Identity security is the new pressure point for modern cyberattacks
https://www.microsoft.com/en-us/security/blog/2026/03/25/identity-security-is-the-new-pressure-point-for-modern-cyberattacks/

Supply chain attack hits widely-used AI package, risks impacting thousands of companies
https://therecord.media/supply-chain-attack-hits-widely-used-ai-package

CISA's acting chief warns shutdown is increasing cyber risks, causing resignations
https://therecord.media/cisa-acting-chief-warns-shutdown-increasing-risks-leading-to-retention-issues

Weaponizing Windows Toast Notifications for Social Engineering
https://www.reddit.com/r/netsec/comments/1s3edze/weaponizing_windows_toast_notifications_for/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

UK sanctions Chinese crypto marketplace tied to scam compounds
https://therecord.media/xinbi-crypto-marketplace-sanctioned

Magento PolyShell – Unauthenticated File Upload to RCE in Magento (APSB25-94)
https://www.reddit.com/r/netsec/comments/1s42kqx/magento_polyshell_unauthenticated_file_upload_to/

As the US Midterms Approach, AI Is Going to Emerge as a Key Issue Concerning Voters
https://www.schneier.com/blog/archives/2026/03/as-the-us-midterms-approach-ai-is-going-to-emerge-as-a-key-issue-concerning-voters.html

RedLine malware developer extradited to US, faces up to 30 years
https://therecord.media/redline-malware-developer-extradited-to-us-faces-30-years

Apple rolls out age verification to UK iPhone users
https://therecord.media/apple-rolls-out-age-verification-uk-iphone-users

Russia detains alleged admin of LeakBase cybercrime forum weeks after global crackdown
https://therecord.media/leakbase-russia-admin-arrest-cyber

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

China-linked Red Menshen using BPFdoor kernel backdoor in telecom networks
https://www.reddit.com/r/netsec/comments/1s4uxxq/chinalinked_red_menshen_using_bpfdoor_kernel/

Abusing Modern Browser Features for Phishing
https://www.reddit.com/r/netsec/comments/1s4zk4v/abusing_modern_browser_features_for_phishing/

DVRTC: intentionally vulnerable VoIP/WebRTC lab with SIP enumeration, RTP bleed, TURN abuse, and credential cracking exercises
https://www.reddit.com/r/netsec/comments/1s506og/dvrtc_intentionally_vulnerable_voipwebrtc_lab/

Testing AprielGuard Against 1,500 Adversarial Attacks
https://www.reddit.com/r/netsec/comments/1s51ac8/testing_aprielguard_against_1500_adversarial/

TeamPCP strikes again - telnyx popular PyPI library compromised
https://www.reddit.com/r/netsec/comments/1s52kq7/teampcp_strikes_again_telnyx_popular_pypi_library/

Latvia accuses Russia of disinformation campaign targeting Baltic states
https://therecord.media/latvia-accuses-russia-of-disinformation-campaign-ukraine-war

FBI confirms theft of director’s personal emails by Iran-linked hacking group
https://therecord.media/fbi-confirms-theft-of-directors-personal-emails-iran-group

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Chaining file upload bypass and stored XSS to create admin accounts: walkthrough with Docker PoC lab
https://www.reddit.com/r/netsec/comments/1s5zzw1/chaining_file_upload_bypass_and_stored_xss_to/

The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1s6bdxi/the_sequels_are_never_as_good_but_were_still_in/

OAuth Consent and Device Code Phishing for Red Teams
https://www.reddit.com/r/netsec/comments/1s6ig2y/oauth_consent_and_device_code_phishing_for_red/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman