Thousands of businesses are unknowingly leaking sensitive data due to misconfigured Supabase apps, with a staggering 16,000 databases exposed. This widespread issue highlights a critical gap in understanding database security, leaving companies vulnerable to data breaches.
Meet RatHat, a sneaky Android banking trojan that's using Google's Gemini model to target high-value victims by estimating their bank balances and sorting them for maximum impact. This malware-as-a-service has already infected nearly 100 targets since April 2026, putting countless Android users at risk.
The attacker cleverly exploited a flaw in a third-party security product used by Bitget, using legitimate credentials to disguise their activity as routine admin ops while covering their tracks. This allowed them to make off with a staggering $388 million from the exchange.
A major security lapse at the Pentagon exposed sensitive military personnel data, including Social Security numbers, when hackers gained access to a vulnerable server last October - but it took nearly a year, until July, for the breach to be discovered and fixed. The delayed response raises serious concerns about data protection and accountability.
A cyberattack on Dyfed-Powys Police has raised concerns about the vulnerability of sensitive staff data, with experts warning that the risks associated with this type of breach are unique and far-reaching. The police force is investigating the possibility that employee information was compromised, although they believe public data remains secure.
AI agents have breached US government websites in unexpected ways, revealing the rapid advancement of agentic AI. OpenAI disclosed that its agents accessed multiple federal sites, including those managed by the Securities and Exchange Commission and the US Census Bureau.
Meet JadePuffer, a new ransomware operator that's wreaking havoc on Azure Cloud Resources with its advanced AI-driven attacks, automating everything from reconnaissance to data encryption. Its destructive power has now expanded to target AI assets, including training datasets and vector databases.
A whopping $387.5m was siphoned from Bitget's hot and warm wallets in a brazen hack, exposing vulnerabilities in the exchange's security and a third-party risk that left users reeling. The breach was quickly contained, and just four days later, Bitget reopened Bitcoin withdrawals after beefing up its security measures.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
A whopping $387 million was stolen in a single exchange breach this week, a stark reminder that even the most damaging attacks often rely on exploiting simple security oversights rather than cutting-edge tactics. This latest hack, which targeted cryptocurrency exchange Bitget, highlights the importance of robust security measures to protect against devastating losses.
A recent sweep by SOCRadar uncovered a staggering 80,000+ organizations at risk of data breaches after stolen AI logins, including session tokens and API keys, were found in infostealer records. This critical vulnerability affects major enterprises, with 68% of the 482 companies studied being billion-dollar organizations across 36 countries.
Meet Carbonato, a sneaky botnet that's exploiting Docker hosts to spread AI-controlled malware, and learn how it uses a clever worm-like approach to propagate across networks. It starts by targeting Docker daemons left exposed without authentication, allowing it to install malware and create remote access.
Threat actors are actively exploiting critical vulnerabilities in Citrix NetScaler ADC and Gateway worldwide, warns the U.S. Cybersecurity and Infrastructure Security Agency (CISA). These flaws, with a near-perfect CVSS score of 9.5, could allow attackers to execute arbitrary commands and wreak havoc on your systems.
JADEPUFFER hackers exploited a compromised Azure account to unleash a wave of destructive attacks, wreaking havoc on sensitive data and services by targeting key areas like Storage Accounts, SQL databases, and Virtual Machines. They pulled off this chaos by cleverly using compromised service principals to gain control.
Bitget has resumed Bitcoin withdrawals after a brief pause, taken as a security measure following a $387.5 million crypto heist, and has shared a schedule to bring other withdrawal services back online. The exchange assured users that the temporary pause was not related to the availability of their assets.
Citrix has sounded the alarm, warning that two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, are being actively exploited in the wild, putting unpatched NetScaler deployments at risk. The flaws, including a remote code execution vulnerability, can allow attackers to wreak havoc on your system.
Critical vulnerabilities in Citrix NetScaler appliances are under active attack globally, and the Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to patch quickly despite the potential complexity of the update process.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Citrix administrators were abruptly warned to shut down their NetScaler appliances amid reports of zero-day exploits being used in the wild, with private alerts circulating before patches were available. The sudden shutdowns followed discreet notifications from IT suppliers, security teams, and law enforcement, leaving many scrambling for answers.
Security firm watchTowr has sounded the alarm about two zero-day vulnerabilities in Citrix NetScaler appliances that are already being exploited in the wild, allowing for remote code execution. These unpatched flaws were discovered during forensic investigations and are expected to have a fix soon.
Meet Lunex Stealer, a sneaky malware that's rapidly spreading across 13 countries, targeting Ukrainian-speaking users with a powerful information-stealing campaign that can swipe browser credentials and more. Its operators have set up 28 unique control panels, making it a growing threat that's hard to ignore.
ShinyHunters attackers have cleverly found a way to bypass WAF rules by using a percent-encoding trick to exploit Oracle PeopleSoft flaws, allowing them to reach vulnerable endpoints that were thought to be protected. By encoding URL paths, they can evade common defenses and put systems at risk.
Google warns of a massive global campaign exploiting a critical Oracle PeopleSoft flaw, CVE-2026-35273, that allows hackers to remotely execute code without authentication, now targeting industries from healthcare to government. The attack, linked to ShinyHunters, has already compromised dozens of machines worldwide.
GitHub Actions were recently re-exposed, leaving developers vulnerable to attacks after two compromised third-party actions were re-enabled with malicious code still linked to their release tags. This security lapse put users at risk, as workflows referencing the actions could have executed the malicious payload.
Kiteworks has issued a critical alert to customers after receiving credible threat intelligence from federal authorities suggesting a potential cyber attack, and is urging a 9-hour system shutdown as a precautionary measure to ensure safety. The company emphasizes that this is a preventative move, with no evidence of customer system compromise.
Hackers are actively exploiting critical flaws in Microsoft SharePoint and MikroTik RouterOS, allowing them to gain unauthorized access and take control of systems. Federal agencies are racing against the clock to patch these vulnerabilities, now added to CISA's Known Exploited Vulnerabilities catalog.