OAuth grants pile up faster than you can review them. Here's how to keep up.
Severity: HighAction: Be aware
Live feed
Important stories
Everything we publish, newest first. This feed is never personalized or filtered unless you choose a filter.
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
ProFTPD Improper Access Control Vulnerability (CVE-2015-3306) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
ONLYOFFICE Docs Server Path Traversal Vulnerability (CVE-2021-3199) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Strapi Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-22894) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Apache Struts Command Injection Vulnerability (CVE-2016-3081) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
ISC BIND Data Processing Errors Vulnerability (CVE-2015-5477) is being actively exploited, CISA warns
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Grid Protection Alliance openPDC and openHistorian
Severity: CriticalAction: Review
Satel Netco Design
Severity: HighAction: Review
Red Lion Controls N-Tron 700 Series
Severity: CriticalAction: Review
ASOS links data breach to social engineering attack, credential theft
Severity: HighAction: Be aware
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
Severity: HighAction: Be aware
Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
Severity: HighAction: Be aware
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
Severity: HighAction: Be aware
Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
Severity: HighAction: ReviewExploitation: Suspected
Ransomware recovery CEO charged over secret ransom payments
Severity: HighAction: Be aware
Evolution of Web3 in Cloud Supply Chain Attacks
Severity: HighAction: Be aware
Hackers hijack Google domains after breaching ccTLD registries
Severity: HighAction: Be aware
US posts $10 million reward for accused Chinese ‘Hafnium’ hacker
Severity: HighAction: Be aware
Arizona courts say hackers stole info on more than 1.3 million people
Severity: HighAction: Be aware
Long Term Support Channel Update for ChromeOS
Severity: CriticalAction: Patch
PoeLLM malware infects exposed AI servers in cryptomining attacks
Severity: HighAction: Be aware
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Severity: HighAction: Be aware
Ransomware has a new target. Is your backup ready?
Severity: HighAction: Be aware
Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach
Severity: HighAction: Be aware
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Severity: HighAction: Be aware
Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
Severity: HighAction: Be aware
Advantest Discloses Data Breach Months After Ransomware Attack
Severity: HighAction: Be aware
SonicWall warns of max severity SSRF flaw in SMA1000 gateways
Severity: CriticalAction: Act nowExploitation: Exploited
Advantest confirms personal information stolen in ransomware attack
Severity: HighAction: Be aware