1+ week, 1+ day ago   (382+ words) CISA added seven exploited flaws to its KEV catalog, including LiteLLM, Kestra, Starlette, and SonicWall vulnerabilities under active attack. AI gateways are becoming high-value attack surfaces. CISA added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on…...

1+ week, 4+ day ago   (695+ words) China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. Compromising a server can expose one machine. Compromising the right router can give attackers visibility into an entire network....

3+ week, 1+ day ago   (151+ words) Federal courts will report spyware authorizations: Beginning with 2028 data published in 2029, the annual U.S. Wiretap Report will include a category for spyware and hacking. The change will create a public tracking baseline, but it will not identify individual operations, include pre…...

3+ week, 2+ day ago   (486+ words) T-Mobile physically cut a network cable to disrupt Salt Typhoon’s access. T-Mobile’s cybersecurity team reportedly turned to an unusually simple containment measure during its fight against the Chinese state-backed Salt Typhoon hacking group. The team physically cut a network cable…...

3+ week, 3+ day ago   (534+ words) Bluesky suffered its second major DDoS attack in months, causing hours of disruption as a threat group claimed responsibility for the outage. Bluesky was knocked offline for hours by a distributed denial-of-service attack, marking the social network’s second major DDoS…...

4+ week, 1+ day ago   (187+ words) Weekly summary of Cybersecurity Insider newsletters in August 2026. Samsung patches 56 Galaxy vulnerabilities: The Samsung August 2026 Galaxy security update contains 38 Google fixes and 18 Samsung-specific patches, including remediation for eight critical Android flaws. Users and enterprise mobility teams should install the update…...

4+ week, 2+ day ago   (521+ words) Cisco patches an actively exploited ASA and FTD flaw that can remotely crash vulnerable firewalls, prompting security teams to prioritize updates now. Attackers are already exploiting a high-severity flaw that can force vulnerable Cisco ASA and FTD firewalls to restart…...

1+ mon, 2+ day ago   (752+ words) DEF CON 34 research exposed Pyodide sandbox flaws affecting seven products and potentially exposing sensitive host resources. As AI agents and automation platforms increasingly execute code generated by models or users, the security boundaries surrounding that code have become critical. Research…...

1+ mon, 5+ day ago   (557+ words) LightSpy, a China-linked surveillance platform, has grown into an operation using at least 117 servers with verified router infections. At Black Hat USA, Arctic Wolf researchers Dmitry Bestuzhev and Dmitry Melikov said LightSpy has been identified in more than 13 countries, growing…...

1+ mon, 1+ week ago   (686+ words) We reveal a TSA security flaw that allowed hackers to bypass protocols and access cockpits. Explore the implications of this breach and what can be done. Microsoft warns Russian hackers are exploiting hotel Wi-Fi to deliver malware, steal credentials, and…...