Evanston, Illinois - In a stark reminder of the growing vulnerability of educational institutions to cyber threats, Evanston Township High School District 202 (ETHS) was hit by a ransomware attack on...
On June 5, 2026, cybersecurity monitoring platforms reported a significant new offering in underground forums: approximately one million lines of personal information belonging to Chinese...
A ransomware listing is not the same thing as a confirmed breach. That distinction matters in the Pearson Ford case. The automotive dealership has reportedly appeared in ransomware.live tracking...
The job offer is the lure. The interview is the collection channel. Five Eyes intelligence agencies have warned that Chinese military intelligence services are using professional networking sites...
UNC3753 is not trying to win with malware first. It is winning by getting employees to do the attacker’s work for them. Mandiant has reported a fast-moving data theft and extortion campaign...
In a developing cybersecurity incident that highlights the persistent threats facing American manufacturing, the Play ransomware group has publicly claimed responsibility for an attack on Corley...
In a significant cybersecurity incident that has sent ripples through the global aviation sector, Avcon Jet, one of Europe’s leading private aviation companies, has been targeted by the notorious...
The lure is intentionally harmless: a party invite, a familiar host name, and a button to RSVP. That is what makes the latest wave of fake e-vite phishing scams effective. Instead of using fear,...
The attack did not need a malicious app, a browser exploit, or direct access to Google’s model. SafeBreach showed that a message notification could be enough. In research published on June 3,...
A Cisco voice platform bug has moved from advisory text to exploit-ready risk. Cisco has patched CVE-2026-20230, a server-side request forgery vulnerability in Unified Communications Manager and...
In a significant cybersecurity incident that has raised serious concerns about the protection of vulnerable populations, the United Nations World Food Programme (WFP) has confirmed a data breach...
HTTP/2 was built to make the web faster. HTTP/2 Bomb shows how the same efficiency features can become a memory-exhaustion weapon when servers accept compressed headers faster than they can safely...
A container escape bug from 2022 is back in the defender spotlight because CISA now says attackers are exploiting it in the wild. The issue, tracked as CVE-2022-0492, sits in the Linux kernel’s...
Redis is not just a cache sitting quietly behind applications. In many environments, it holds sessions, tokens, queues, transient business data, and cloud-adjacent secrets close enough to become a...
In the latest development underscoring the vulnerability of India's healthcare sector, KillSecurity, a known ransomware-as-a-service operation, has publicly claimed responsibility for breaching ACE...
One leftover debug flag is all it took to turn trusted Microsoft Android apps into a potential token exposure path. SecurityWeek reported on June 2, 2026, that researchers at Enclave found a...
Enterprise phones rarely sit at the top of the patching queue. That is exactly why this bug matters. A critical vulnerability in HP Poly VoIP phones can give an unauthenticated attacker remote...
A trusted package namespace is exactly where defenders least want to find a credential-stealing worm. On June 1, 2026, security researchers reported that multiple official npm packages under Red...
On June 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-21182, a high-severity vulnerability in Oracle WebLogic Server, to its Known Exploited Vulnerabilities...
CVE-2026-41940 is the kind of control-panel vulnerability defenders cannot afford to treat as “just another hosting bug.” Once attackers can bypass authentication on cPanel or WebHost Manager, the...