All Issues
97 Cyber issues published
27 Million Stolen Passwords Just Got Rescued
Law enforcement shut down the criminal networks behind two major malware tools, recovering 27 million stolen login credentials in the process. A critical flaw in Lantronix network hardware is being actively exploited right now, with a CVSS score of 9.8 — patch or isolate today. And a new piece of North Korean macOS malware is trying to trick AI security tools into ignoring it entirely.
110 Million Credentials Stolen From Your Firewall
A Russian-speaking hacker group has been quietly draining credentials from FortiGate firewalls since February 2026, harvesting over 110 million credentials across hundreds of thousands of devices. Cisco's enterprise phone system has a critical flaw now being actively exploited in the wild — patch it today. The US government has also set a hard 2030 deadline to upgrade federal encryption before quantum computers make today's secrets tomorrow's open books.
WordPress Plugins Backdoored in Supply Chain Attack
Three ShapedPlugin WordPress Pro plugins were backdoored through a supply chain attack (where attackers tamper with software before it reaches end users), exposing site owners who trusted official update channels. A high-severity flaw in the FFmpeg video library, dubbed PixelSmash, can crash media apps like Kodi and OBS Studio and, under specific conditions, allow attackers to run commands on Jellyfin servers. If you run any ShapedPlugin Pro plugins, assume you are compromised and rotate every password today.
Fake Google Ads Are Hiding Password Thieves
North Korean hackers hijacked a popular developer package and exposed 8 million weekly downloads to malware, while a new info-stealing campaign is hiding inside fake Google Ads. A decades-old memory leak flaw in Squid Proxy, nicknamed "Squidbleed," can expose other users' traffic on shared networks like offices and schools — patch today if you run an affected version. Here is everything that happened, and what to do about it.
The Ransomware That Skips the Ransom Note
A new ransomware strain called Prinz Eugen is quietly encrypting victims' most recent files and walking away without leaving a note. A WordPress email plugin flaw is being exploited at massive scale — if you run Gravity SMTP, update it right now. North Korean state hackers also poisoned over 140 packages in a popular AI development framework, targeting developers' crypto wallets and API keys.
North Korea Hit the AI Dev Toolkit
North Korean state hackers poisoned over 140 packages in a popular AI development framework, targeting developers' crypto wallets and API keys. A WordPress email plugin flaw is being exploited at massive scale — if you run Gravity SMTP, update it right now. A new ransomware strain called Prinz Eugen is quietly encrypting your most recent files and walking away without leaving a note.
FortiBleed Exposes 86,644 Fortinet Logins
A massive credential-harvesting campaign called FortiBleed has compromised login details for over 86,000 Fortinet firewalls and VPNs across 194 countries, mostly by exploiting default and never-rotated passwords. F5 has patched two critical NGINX Open Source flaws that let an unauthenticated attacker run their own code on affected servers. There's also a clever phishing trick disguising malicious links as IPv6 addresses worth knowing about before you click anything today.
FortiBleed Exposes 73,000 VPN Logins
A new leak called FortiBleed has exposed VPN login credentials for over 73,000 Fortinet devices worldwide, with major companies among the victims. Cisco also patched a critical flaw that lets a logged-in attacker take over the underlying server. If you run a Fortinet VPN, today's move is simple: rotate your credentials and turn on multi-factor authentication (MFA) now.
Three Fortinet Flaws Exploited, One Patched Last Week
Hackers are actively exploiting three critical vulnerabilities in Fortinet's threat detection software — one of which was only patched last week. A cardiac monitoring company called iRhythm has disclosed a data breach after attackers stole patient health data and demanded a ransom. The FBI is warning that crypto scammers are now sending physical couriers to collect cash from victims in person — if anyone asks you to hand money to a stranger for an investment, walk away.
Trusted WordPress Plugins Were Planting Back Doors
Three popular WordPress plugins were secretly modified to hand attackers full admin access to any site where an administrator was logged in — if you run WordPress, check your admin accounts now. Palo Alto's GlobalProtect VPN has an authentication bypass under active exploitation that enterprise teams need to patch today. The FBI and Google dismantled a $1.9 billion AI-powered phishing operation this week, and a proposed FCC rule could make anonymous phone plans history in the US.