3+ week, 1+ day ago   (445+ words) Sakura Internet has disclosed a potential breach involving its sales management system, placing the personal records of up to 1.36 million customer accounts at risk. The Japanese cloud and hosting provider said the incident was identified during its ongoing investigation into…...

2+ week, 6+ day ago   (823+ words) On the defensive side, Anthropic expanded Claude Security’s vulnerability-scanning capabilities, underscoring how the same technology is being pulled in opposite directions by attackers and defenders alike. Identity and access management dominated the vulnerability news cycle, with a critical Entra ID…...

3+ week, 3+ day ago   (702+ words) MacSync Stealer is expanding the risk facing Mac users by turning everyday web browsing and Terminal activity into a route for password theft. The macOS-focused malware uses short-lived online infrastructure, making simple blocklists less effective and leaving victims exposed to…...

6+ day, 12+ min ago   (1228+ words) Weekly Cybersecurity Newsletter Bulletin - CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and... CyberSecurityNews This edition of the weekly cybersecurity newsletter bulletin covers critical zero-day discoveries, nation-state router compromises, emerging autonomous AI attack vectors, and major cloud identity incidents. Below…...

1+ week, 1+ day ago   (564+ words) NodeStealer has returned with a more invasive toolkit. The Python-based information stealer can now record keystrokes, watch copied text, and capture victims’ screens, turning an account-stealing infection into continuous surveillance. The change raises the stakes for people whose browsers hold…...

1+ week, 4+ day ago   (571+ words) Threat actors are impersonating web crawlers from OpenAI, Anthropic, DeepSeek, and other major organizations to scan websites for exposed credentials and sensitive configuration files, targeting misconfigured servers that may leak cloud keys, API tokens, passwords, and private keys. GreyNoise observed…...

2+ day, 18+ hour ago   (647+ words) Hackers have used commercial AI models to help break into government, transport and financial networks across Latin America. The activity shows how chat-based tools can speed up familiar intrusion work, from fixing faulty scripts to moving stolen information out of…...

3+ day, 14+ hour ago   (645+ words) Cybercriminals are using autonomous AI agents to turn compromised cloud systems into fast-moving credential theft platforms. In one recent case, attackers planned, built, and launched a large-scale campaign in less than six hours, stealing thousands of third-party credentials. The operation…...

2+ week, 3+ day ago   (657+ words) A new remote access trojan called CoreRAT is giving the Core Werewolf threat group a way to take over infected Windows systems. The malware appeared in campaigns observed from June through July 2026, though evidence shows it has been active since…...

1+ week, 5+ day ago   (595+ words) A widely used npm package has become a credential-stealing delivery channel after attackers planted a self-spreading Shai-Hulud payload in its releases. The malicious releases can run while a developer installs dependencies or when npm processes a specially crafted build configuration…...