Meet the sneaky spyware that can infect your device with just a single online ad - no clicks required. Citizen Lab researchers uncovered a cunning ad-delivery chain used by Discover-Tech to spread zero-click spyware, infecting targets with alarming precision.
Healthcare organizations are being hit with a staggering 3.33 ransomware attacks per day, making them a treasure trove for hackers seeking sensitive information and massive payouts. This surge in attacks highlights the sector's alarming vulnerability to cyber threats.
Infoblox has uncovered a tech support scam network run by Help TDS, which tricks users into calling centers where scammers use social engineering to get them to install remote desktop tools. This scam has been linked to a Russian affiliate program called Hotejka, which may be a rebrand of the traffic monetization operation ROI777.
A security breach at CenterPoint Energy has put the personal data of around 1 million Texans at risk, with hackers gaining unauthorized access to customer information through an externally facing system. The incident was discovered after hackers claimed to have stolen a dataset, prompting an investigation that confirmed the breach.
Meet Discover-Tech, an Israeli adtech firm with a shady secret: its Controlium platform has been caught exploiting online ads to spy on users across over 70,000 mobile apps and 120,000 websites.
A massive 71% of internet-exposed Danfoss StoreView control panels in France vanished within just three days following a cyber-attack that crippled hundreds of supermarkets, suggesting a frantic effort to pull systems offline rather than fix them. This sudden disappearance was tracked by Censys researchers, who monitored the dramatic decline from 1,825 exposed hosts on October 11 to just 537 by October 14.
In a major move to safeguard the US midterm elections, X has proactively removed over 13,000 accounts linked to foreign influence operations from Iran, Russia, and China. These accounts were using fake identities to spread and amplify divisive political content targeting candidates and public figures.
Stolen AI coding assistant credentials can be a goldmine for attackers, allowing them to resell or rack up usage charges on the victim's account, and even gain a foothold into the developer's broader environment. The Aoki infostealer has evolved to target these valuable credentials, expanding its reach beyond browser data and cryptocurrency wallets.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
US companies are under attack by fake AI campaigns that impersonate trusted brands like Claude, ChatGPT, and Copilot, spreading malware and stealing sensitive data. Attackers are using clever tactics, such as sponsored search results and fake download websites, to trick victims into compromising their business accounts.
A massive data breach at the UK's Legal Aid Agency has exposed a staggering 250,000 personal records, including information dating back to 1978, forcing a major reassessment of the government's data security. The breach, detected in April 2025, reveals that decades-old personal data was surprisingly still accessible on government systems.
The Air Force's use of CDs and later USB drives to transfer mission data between unclassified and classified systems created a vulnerability that allowed malware to slip into sensitive areas, reveals Justin Henkel, former Air Force IT security expert. This simple habit, born from convenience, ended up bridging the gap between secure and unsecure environments.
Microsoft and Japanese police have joined forces to take down a notorious phishing network, known as Yam Store or Storm-3119, that was responsible for a staggering 1 billion phishing emails and texts sent to over 75,000 organizations since January 2026. This underground marketplace was selling compromised accounts, licenses, and storage to threat actors, fueling a massive wave of cyber scams.
Don't wait until it's too late - apply the AhsayCBS hotfix immediately to shield your environment and customer data from severe vulnerabilities that can be exploited for unauthenticated remote code execution. Reboot your server after applying the fix to ensure you're fully protected.
Authenticated hackers are on the hunt, with 1,423 attempts recorded to exploit a critical remote-code-execution flaw in Langflow, a vulnerability that scores a near-perfect 9.9 on the CVSS scale. This alarming spike highlights how quickly attackers pounce on high-risk weaknesses.
Malicious actors launched a massive attack, dubbed GhostAction, that compromised nearly 1,900 GitHub accounts and infected over 30,000 repositories with a malicious workflow. The concentrated surge, which occurred on October 8-9, 2026, put thousands of users and organizations at risk.
A massive breach at the UK's Legal Aid Agency has exposed sensitive records spanning nearly five decades, with stolen data dating as far back as 1978 and affecting around 250,000 records from before 2007. The breach, which occurred in April 2025, compromised a vast trove of applicant, recipient, and provider data.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongThe FBI and North Macedonian authorities have joined forces to take down a major cybercrime ring, charging a 20-year-old suspect with computer fraud, misuse of personal data, and producing and distributing child sexual abuse material. This crackdown comes after the OLVX platform was dismantled, safeguarding the digital security of thousands of American citizens.
Palo Alto Networks has patched a critical vulnerability, CVE-2026-0322, that allowed hackers to execute malicious code with root privileges on its firewalls - and it was under active attack. This authenticated remote code execution flaw, scoring 8.6 in severity, could be exploited by anyone with network access to the PAN-OS management interface.
Palo Alto Networks has patched a high-severity zero-day flaw, CVE-2026-0322, that lets hackers execute code as root on vulnerable firewalls and appliances. The company says only limited exploitation has been observed so far, but urges users to update their PAN-OS management interface ASAP.
Cisco is urging customers to upgrade to a fixed software release after a critical vulnerability in its Secure Email Gateway was exploited in active zero-day attacks, allowing hackers to gain root access with just a malicious email. The flaw, scored 9.8 out of 10 on the CVSS scale, enables remote attackers to write files and execute commands with root privileges on the appliance operating system.
Microsoft swooped in to dismantle a massive Chinese-language phishing kit network that had been bombarding over 75,000 organizations worldwide with a staggering 1 billion+ emails and SMS messages since January. The campaigns, tracked as Storm-2990, were fueled by a commercial ecosystem of customizable phishing kits.
In a major crackdown, the FBI swooped in on a North Korean remote IT worker network in Texas, seizing nearly 187 laptops in a multi-day operation dubbed the "Lonestar Roundup." This bold move marks the beginning of a broader effort to dismantle the notorious Famous Chollima threat group's US infrastructure.
In just six days, a team of four researchers harnessed the power of a publicly available AI model to craft a Chrome exploit that earned them a whopping $250,000 bounty from Google. With the help of OpenAI's GPT-5.6 Sol model, they chained together three zero-day Chrome vulnerabilities, proving that innovation and speed can pay off big time.
Microsoft and its partners have struck a major blow against cybercrime, disrupting three notorious phishing kits responsible for over 1 billion scam messages sent to 75,000 organizations worldwide. This significant takedown targets the tools behind a massive phishing operation.