Live Threat Intelligence
REAL-TIME CYBERSECURITY NEWS
Live feed of breaking cybersecurity threats, data breaches, and security incidents from top industry sources.
Live Threat IntelLive
Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation(Infosecurity Magazine)Bitwarden NPM Package Hit in Supply Chain Attack(SecurityWeek)LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure(The Hacker News)Researchers find cyber-sabotage malware that may predate Stuxnet by five years(The Register)Tropic Trooper APT Takes Aim at Home Routers, Japanese Targets(Dark Reading)Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia(Dark Reading)Newly Deciphered Sabotage Malware May Have Targeted Iran’s Nuclear Program—and Predates Stuxnet(WIRED Security)Hackers exploit file upload bug in Breeze Cache WordPress plugin(Bleeping Computer)Bitwarden CLI npm package compromised to steal developer credentials(Bleeping Computer)CISA: US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March(The Record)UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware(The Hacker News)South Korea’s regulator fines matchmaking service Duo $830,000 over data breach(DataBreaches.net)Trigona ransomware attacks use custom exfiltration tool to steal data(Bleeping Computer)New Checkmarx supply-chain breach affects KICS analysis tool(Bleeping Computer)With AI’s help, North Korean hackers stumbled into a near-undetectable attack(Help Net Security)Hacker with a special interest in breaching sports institutions ends behind bars(Help Net Security)Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign(The Hacker News)Half a million Britons’ medical data were offered for sale on Alibaba in major UK Biobank breach(DataBreaches.net)Mile Bluff Medical Center says security incident that involved data encryption disrupted phone, computer systems(DataBreaches.net)Chinese Cybersecurity Firm’s AI Hacking Claims Draw Comparisons to Claude Mythos(SecurityWeek)Hybrid clouds have two attack surfaces and you’re not paying enough attention to either(The Register)New GopherWhisper APT group abuses Outlook, Slack, Discord for comms(Bleeping Computer)FIRESTARTER Backdoor(CISA Advisories)Defending Against China-Nexus Covert Networks of Compromised Devices(CISA Advisories)The Behavioral Shift: Why Trusted Relationships Are the Newest Attack Surface(SecurityWeek)CISA orders feds to patch BlueHammer flaw exploited as zero-day(Bleeping Computer)Cosmetics giant Rituals discloses data breach affecting customers(Bleeping Computer)If malware via monitor cables is a matter of national security, this might be the gadget for you(The Register)RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace(DataBreaches.net)Can AI Attack the Cloud? Lessons From Building an Autonomous Cloud Offensive Multi-Agent System(Palo Alto Unit 42)'Zealot' Shows What AI's Capable of in Staged Cloud Attack(Dark Reading)GopherWhisper: A burrow full of malware(ESET Research)Vercel Finds More Compromised Accounts in Context.ai-Linked Breach(The Hacker News)Recent Microsoft Defender Vulnerability Exploited as Zero-Day(SecurityWeek)Microsoft Graph API misused by new GoGra Linux malware for hidden communication(Security Affairs)'The Gentlemen' Rapidly Rises to Ransomware Prominence(Dark Reading)DDoS wave continues as Mastodon hit after Bluesky incident(Security Affairs)Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers(Security Affairs)Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API(The Hacker News)BlueLeaks 2.0: 7,300+ Schools, Referral Systems Reported, and a Breach Navigate360 Still Hasn’t Publicly Confirmed(DataBreaches.net)Npm Supply Chain Malware Attack Targets Developers With Worm-Like Propagation(Infosecurity Magazine)Bitwarden NPM Package Hit in Supply Chain Attack(SecurityWeek)LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure(The Hacker News)Researchers find cyber-sabotage malware that may predate Stuxnet by five years(The Register)Tropic Trooper APT Takes Aim at Home Routers, Japanese Targets(Dark Reading)Chinese APT Abuses Multiple Cloud Tools to Spy on Mongolia(Dark Reading)Newly Deciphered Sabotage Malware May Have Targeted Iran’s Nuclear Program—and Predates Stuxnet(WIRED Security)Hackers exploit file upload bug in Breeze Cache WordPress plugin(Bleeping Computer)Bitwarden CLI npm package compromised to steal developer credentials(Bleeping Computer)CISA: US agency breached through Cisco vulnerability, FIRESTARTER backdoor allowed access through March(The Record)UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware(The Hacker News)South Korea’s regulator fines matchmaking service Duo $830,000 over data breach(DataBreaches.net)Trigona ransomware attacks use custom exfiltration tool to steal data(Bleeping Computer)New Checkmarx supply-chain breach affects KICS analysis tool(Bleeping Computer)With AI’s help, North Korean hackers stumbled into a near-undetectable attack(Help Net Security)Hacker with a special interest in breaching sports institutions ends behind bars(Help Net Security)Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign(The Hacker News)Half a million Britons’ medical data were offered for sale on Alibaba in major UK Biobank breach(DataBreaches.net)Mile Bluff Medical Center says security incident that involved data encryption disrupted phone, computer systems(DataBreaches.net)Chinese Cybersecurity Firm’s AI Hacking Claims Draw Comparisons to Claude Mythos(SecurityWeek)Hybrid clouds have two attack surfaces and you’re not paying enough attention to either(The Register)New GopherWhisper APT group abuses Outlook, Slack, Discord for comms(Bleeping Computer)FIRESTARTER Backdoor(CISA Advisories)Defending Against China-Nexus Covert Networks of Compromised Devices(CISA Advisories)The Behavioral Shift: Why Trusted Relationships Are the Newest Attack Surface(SecurityWeek)CISA orders feds to patch BlueHammer flaw exploited as zero-day(Bleeping Computer)Cosmetics giant Rituals discloses data breach affecting customers(Bleeping Computer)If malware via monitor cables is a matter of national security, this might be the gadget for you(The Register)RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace(DataBreaches.net)Can AI Attack the Cloud? Lessons From Building an Autonomous Cloud Offensive Multi-Agent System(Palo Alto Unit 42)'Zealot' Shows What AI's Capable of in Staged Cloud Attack(Dark Reading)GopherWhisper: A burrow full of malware(ESET Research)Vercel Finds More Compromised Accounts in Context.ai-Linked Breach(The Hacker News)Recent Microsoft Defender Vulnerability Exploited as Zero-Day(SecurityWeek)Microsoft Graph API misused by new GoGra Linux malware for hidden communication(Security Affairs)'The Gentlemen' Rapidly Rises to Ransomware Prominence(Dark Reading)DDoS wave continues as Mastodon hit after Bluesky incident(Security Affairs)Mirai Botnet exploits CVE-2025-29635 to target legacy D-Link routers(Security Affairs)Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API(The Hacker News)BlueLeaks 2.0: 7,300+ Schools, Referral Systems Reported, and a Breach Navigate360 Still Hasn’t Publicly Confirmed(DataBreaches.net)