U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
U.S.
general
20 articles
AI butterfly effects, Chuds, CISA, FBI, FreeBSD, Ghost Accounts, Pervs, Josh Marpet - SWN #619
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatc...
Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities ind...
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Confirmed exploitability — not severity scores — is emerging at the strongest signal for deciding what to fix first.
5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming
Researchers have developed 5G-Shark to lure phones onto rogue base stations, collect subscriber IDs, force network downgrades and…
Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings
Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an ...
Was the Australia health portal incident a misconfiguration error?
Questions emerge over whether a reported AI hack was actually a basic government portal misconfiguration.
Gemini hacked three companies. The AI isn't the part that should scare you.
AI exposes old access problems faster, turning leaked credentials and standing trust into bigger risks.
Elementor WordPress flaw lets attackers create admin accounts
A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accou...
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
Bitget says suspected North Korea-linked actors stole $351.6M from hot and warm wallets.
Supreme Court permits states to use SAVE database for citizenship checks
Three justices wrote in a dissent that longstanding privacy laws protecting sensitive personal data held by the government should prevent the use of the data...
Kiteworks warns customers to shut down servers due to possible imminent attack
Kiteworks’ CISO cited “credible threat intelligence from law enforcement” for the urgent alert.
CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks
The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) ...
Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions
Anthropic now allows you to run Claude Code via cloud sessions without signing up for the research preview, and it's offering up to $250 in free usage credit...
The four AI questions CISOs will hear from the board the next time they meet
Every CISO has to answer these four questions from today’s boards with actual evidence – here’s how to do it.
Workload identity and Non-human identity in cloud environments
Privileged Access Management: vaulting, session control, and break glass
Crypto CEO accuses North Korea of stealing $387 million from Bitget platform
The CEO said the company has a User Protection Fund that has over $464 million and those funds will be used to cover the losses.
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptim...