A newly discovered Android flaw, dubbed the SMS of Death, allows attackers to remotely crash unpatched phones or disrupt cellular service with a single specially crafted text message, potentially even interrupting emergency calls. This zero-click vulnerability can wreak havoc without the victim even seeing the malicious message.
A security breach at Chainalysis has compromised customer identity data, including user IDs, full names, email addresses, and organization role labels, after an external actor used AI-powered tools to gain unauthorized access to the company's internal systems. The incident highlights the vulnerability of even the most trusted players in the blockchain analysis space.
Blockchain intelligence firm Chainalysis recently uncovered a sneaky data breach, where hackers used clever tactics to gain unauthorized access to its internal systems and sensitive user info. The breach exposed user metadata, including IDs, names, email addresses, and job roles, but thankfully, no evidence of compromised investigation content or login credentials was found.
A chain of Ivanti vulnerabilities can be exploited together to gain unauthenticated root access, posing a significant threat to security. This alarming exploit chain combines multiple flaws, including authentication bypass, remote code execution, and privilege escalation, to wreak havoc.
DDoS attacks are getting shorter and sneakier, with brief, low-bandwidth strikes under 10 minutes and 1 Gbps surging by a whopping 208%. This shift towards quick, compact attacks signals a new wave of automated and relentless threats.
Meet John Allen Kurrle Jr., a cleared defense contractor who got caught up in a shocking scheme: allowing others to use his identity and top-secret security clearance to land lucrative remote jobs with national security implications. He pleaded guilty to conspiracy to commit wire fraud after admitting to his role in a plot that produced 88 job applications and nine offers with salaries up to $190,000.
Apple just alerted users in 99 countries to a sophisticated spyware threat that's targeting their devices, warning them of highly advanced digital attacks that are difficult to defend against. This latest notification wave brings the total number of countries affected to over 150.
Meet Vapor Panda, a China-backed group that's taking threat actor tactics to the next level with AI-powered attacks, compromising 140 targets at lightning speed. This marks the first large-scale use of an "agentic" AI tool by a nation-state threat actor, and experts warn it won't be the last.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
A shocking security blunder has been uncovered: a ransomware gang spent over $7,200 on AI services, yet carelessly left their entire workspace exposed on a public server, revealing their clever - and questionable - tactics.
Binance revealed a staggering $6.3 billion crypto theft, but fortunately, deposits are still secure and the company is working to resume withdrawals soon. The hack was quickly addressed, with $3 billion in assets frozen and customer losses fully covered.
Meet Vapor Panda, a China-based hacking group that's been wreaking havoc on over 200 global organizations with an AI-powered tool called ARTEX, starting October 17, 2026. Their targets have included government ministries, defense agencies, and major industries across the globe.
Anthropic is investigating a malicious Claude Code extension with Cursor, confirming it wasn't a breach of their own systems or employee laptops. A bad actor hijacked Cursor's marketplace to publish a tampered extension, Anthropic says, which they didn't build or publish.
In just 24 hours, 62,969 attack attempts were blocked after patches were released for a high-severity WordPress flaw that allowed hackers to execute code on vulnerable sites. This widespread vulnerability, affecting WordPress Core versions 4.7 through 7.1.3, was fortunately fixed on October 28, 2026.
A Trezor Safe 5 hardware wallet purchased from a reseller in Southeast Asia was found to contain a suspicious extra circuit board with a cellular module and antenna, sparking concerns of a potential crypto-theft implant. This shocking discovery raises questions about the security of the supply chain and the safety of cryptocurrency storage.
A malicious version of the popular Claude Code extension was compromised, putting 5,000 developers at risk of a persistent SSH backdoor malware that was served from a trusted VS Code marketplace for nearly 11 hours. The sneaky malware was cleverly hidden in a JavaScript loader, allowing it to execute immediately without requiring any user interaction.
Millions of people are vulnerable to phone tracking and hacking due to flaws in the signaling systems that route calls and texts, allowing attackers to intercept, impersonate, or silence phones without ever touching them. These attacks, uncovered by Citizen Lab, have targeted thousands of people in dozens of countries.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
GitLab patched a critical flaw that allowed hackers to run malicious code on its servers, thanks to a warning from CISA. The vulnerability, known as CVE-2026-97229, was caused by a weakness in GitLab's CI/CD Regular Expression Compiler that wasn't properly validating user input.
Trezor has uncovered a potential security threat in some of its hardware wallets sold by CryptoBilis, revealing a possible hardware implant that could compromise users' sensitive information. A customer in Indonesia discovered an extra circuit board in their Trezor Safe 5 wallet, which could be sending confidential data, including wallet backups, over a mobile network.
In a shocking breach, a Chinese actor exploited a chain of vulnerabilities in under 15 minutes to gain persistent root access to 25 Palo Alto Networks servers and infiltrate a US government-affiliated Active Directory domain. The attack combined the PHP2Shell and Fragnesia exploits into a single, automated request, highlighting the devastating potential of chained vulnerabilities.
Binance revealed a massive $6.3 billion hack, but in a major win, the company managed to freeze around $3 billion of the stolen funds, ensuring customers won't bear the brunt of the loss. The crypto exchange is covering the losses from its own funds, reassuring users that their assets remain safe.
A malicious VS Code extension infected up to 5,000 users after the Cursor Marketplace was compromised, putting their systems at risk. The malware has since been removed and affected users will be contacted directly.
A critical flaw in the popular Commerce Core module, known as CVE-2026-118539, is under active exploitation - and Drupal is urging administrators to upgrade immediately to protect against potential financial losses. This vulnerability allows unauthenticated attackers to bypass access controls, putting your online store at risk.
Binance's investigation reveals that the massive crypto heist, valued at $6.3 billion, was a sophisticated attack involving a compromised DevOps laptop and unauthorized access to a service container, rather than a simple one-click exploit. The exchange is still gathering facts, but has found no evidence of a leaked wallet private key.
Drupal warns of a highly critical flaw in its Commerce Core component that's already being exploited in the wild, allowing unauthorized access that could have serious financial implications. This vulnerability affects Commerce Core releases from 0.0.0 to 2.41 and 3.0.0 to 3.3.13.