All Issues
97 Cyber issues published
North Korea's Supply Chain Is Your Problem Now
North Korean hackers have planted malicious code inside nearly 2,000 public GitHub repositories, targeting software developers through fake job offers and infected packages. A patched authentication bypass in SimpleHelp RMM is being actively exploited to steal credentials from cloud, AI, and developer tools. If your team uses SimpleHelp for remote support, patch it today.
A Spy Tool Was Used to Watch the Spy Investigators
A European Parliament member who sat on the committee investigating Pegasus spyware was himself repeatedly infected with Pegasus while serving on that committee. Meanwhile, a critical Linux kernel flaw gives ordinary users full root control on desktops, servers, and Android devices — and a patch is available now. If you run Linux or Android, this is your cue to update.
Google Takes Down 2 Million Device Proxy Network
Google and the FBI have dismantled a massive residential proxy network that was quietly running through smart TVs and streaming boxes in homes worldwide. A critical flaw in the Cursor AI code editor has been patched — but if you haven't updated yet, you should do that now. And the EU-US data transfer agreement that underpins nearly $2 trillion in annual trade is facing a serious legal challenge.
The First AI That Ransoms and Forgets the Key
An AI agent ran an entire ransomware attack by itself — break-in, credential theft, encryption, ransom note — then lost the decryption key, meaning victims cannot recover their data even if they pay. Adobe has patched six maximum-severity flaws in ColdFusion, all rated CVSS 10.0, and you should update today. If you use Opera browser, a new built-in feature called Paste Protect is already blocking one of the most common malware tricks in use right now.
81 Million Login Attempts and 78 Accounts Gone
Attackers hit Microsoft's Azure login system with over 81 million password attempts, compromising 78 accounts across 64 organisations by exploiting a legacy authentication method that bypasses MFA. Citrix has patched six vulnerabilities in its NetScaler network software, with the most urgent allowing unauthenticated file reads on exposed management interfaces. If you use Microsoft Teams, a new admin policy is worth enabling today to stop unauthorised bots from silently joining your meetings.
Oracle's Payment System Is Under Active Attack
Oracle's enterprise payment software is being actively exploited in the wild, and attackers appear to have figured it out on their own without any public blueprint. Progress Kemp LoadMaster has a critical pre-authentication flaw with a working proof of concept now public, so if you run it, patch immediately. WhatsApp is rolling out usernames today, and reserving yours is a simple step that keeps your phone number private.
14 Million Email Logins Exposed at Japanese ISPs
Japan's largest telecoms operator just confirmed a breach affecting up to 14.2 million email accounts across six ISPs, with passwords potentially in attackers' hands. A critical flaw in the SSH library embedded in curl, Git, and PHP now has a public proof-of-concept — if your software reaches out to external SSH servers, read the Vulnerability Watch section today. And the US insurance regulator confirms a zero-day in Oracle PeopleSoft was behind a breach of credit rating data first detected June 11.
Russian Intelligence Faked Support Texts to Steal Accounts
Ukraine and the FBI have exposed a Russian intelligence campaign using fake messaging support texts to steal credentials from officials, soldiers, and activists across Ukraine, Europe, and the US. Separately, researchers have demonstrated how a clean-looking GitHub repository can trick AI coding agents into running malware with no suspicious code in sight. Schools and universities are also under the microscope — third-party software breaches are hitting the education sector hard, and vendor risk management is no longer optional.
SharkLoader Is Hunting Diplomats Across 9 Countries
A newly uncovered malware campaign called StrikeShark is quietly compromising government agencies, diplomats, and software firms across at least nine countries using a loader that smuggles Cobalt Strike deep into infected systems. A high-severity flaw in Amazon Q Developer let a malicious repository hijack a developer's cloud credentials the moment the workspace was opened — Amazon has patched it, but unpatched extensions remain exposed. If you use Signal, Russian intelligence is after your backup recovery key — and the fix takes thirty seconds in Settings.
Hotels Are Getting Phished Through Booking Complaints
Hackers are targeting hotel front desks across Europe and Asia with fake guest complaint emails that quietly install a remote-access implant on reception computers. A critical vulnerability in industrial engineering software is now being actively exploited in the wild, and Windows 10 users just got a surprise extra year of free security updates. On the AI front, North Korean malware is now trying to confuse the AI tools that security researchers use to analyse it.