News
Microsoft 365 Device Code Phishing Campaign Bypasses Password Theft With Legitimate Login Flow
4+ hour, 14+ min ago (766+ words) A new phishing campaign targeting Microsoft 365 users has been uncovered, and it takes a different approach than most attacks seen in the wild. Instead of trying to steal a victim's password directly, this campaign tricks users into completing a real…...
App View X Launches Agent Identity Security to Govern Agents for the AI and Quantum Era
4+ hour, 30+ min ago (828+ words) New York, United States of America, June 16th, 2026, Cyber Newswire Agent Identity Security combines AI agent governance with a native PKI foundation, directly targeting ungoverned AI agents, enterprise security's fastest-growing blind spot" App View X today announced"Agent Identity Security, a…...
Critical Fortinet Forti Sandbox Vulnerabilities Actively Exploited in Attacks
1+ hour, 44+ min ago (367+ words) Threat actors are actively exploiting multiple critical vulnerabilities in Fortinet's Forti Sandbox platform, with live attack telemetry confirming exploitation attempts over the past 24 hours. Security researchers have flagged three CVEs under active targeting " including one, CVE-2026-39813, with no previously recorded…...
Interlock and Rhysida Ransomware Operations Share Supper Backdoor and Malware Codebase
6+ hour, 14+ min ago (679+ words) Two of the more active ransomware groups operating today, Interlock and Rhysida, have more in common than previously thought. New research shows both groups share a backdoor called Supper, and that several of their malware tools appear to have grown…...
Microsoft Teams Analyze the Wi-Fi Hotspot Data Connected to an Employee's Device
7+ hour, 15+ min ago (506+ words) Microsoft has introduced a new capability in its Microsoft 365 ecosystem that enables Microsoft Teams to analyze Wi-Fi hotspot data on an employee's device, raising both security benefits and privacy considerations. The feature, highlighted on the Microsoft 365 roadmap, aims to improve…...
Infinite Campus Data Breach Exposes 137, 000 Users Personal Details
9+ hour, 45+ min ago (401+ words) Infinite Campus, a widely used student information system in U. S. K-12 schools, has disclosed a data breach affecting approximately 137, 000 individuals. The incident has been linked to the Shiny Hunters cybercriminal group, known for carrying out large-scale data theft and extortion campaigns. The…...
Optin Monster Plugin Hack Exposes 1. 2 Million Wordpress Sites to Cyberattack
11+ hour, 20+ min ago (532+ words) A large-scale supply chain attack targeting widely used Word Press plugins has exposed more than 1. 2 million websites to potential compromise after attackers injected malicious code into legitimate Java Script files distributed through trusted CDN infrastructure. These plugins are installed on…...
Ransomware Ecosystem Consolidates Around Lock Bit Alumni, Qilin, Hyflock, and The Gentlemen
11+ hour, 46+ min ago (676+ words) The global ransomware landscape shifted noticeably in the first quarter of 2026, as former operators from well-known criminal groups began launching their own competing programs. Data leak sites tracked 2, 122 new victims during Q1 2026, making it the second-highest first-quarter total on record. Despite…...
Lite Speed c Panel Plugin 0-Day Vulnerability Actively Exploited in the Wild
12+ hour, 18+ min ago (504+ words) A critical zero-day vulnerability in the Lite Speed c Panel user-end plugin is being actively exploited in the wild, posing a serious threat to shared hosting environments worldwide. The flaw, tracked as CVE-2026-54420, enables privilege escalation to root level, allowing…...
Cisco SD-WAN v Manage Vulnerability Exploited in Zero-Day Attacks
12+ hour, 53+ min ago (415+ words) Cisco has disclosed a critical security issue in its Catalyst SD-WAN Manager (formerly v Manage) that is now being actively exploited in zero-day attacks, raising concerns for enterprise network environments worldwide. The vulnerability, tracked as CVE-2026-20262, is an arbitrary-file-write flaw…...