Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Bugs in Managed DNS Services Cloud Let Attackers Spy On DNS Traffic
Cybersecurity researchers have disclosed a new class of vulnerabilities impacting major DNS-as-a-Service (DNSaaS) providers that could allow attackers to exfil…
Nasty macOS Malware XCSSET Now Targets Google Chrome, Telegram Software
A malware known for targeting macOS operating system has been updated once again to add more features to its toolset that allows it to amass and exfiltrate sen…
Android Apps Leaked 100+ Million Users' Data Due To Misconfigured Cloud Services
Misconfigured databases have long been a reason for exposing sensitive data. This time, however, the…Android Apps Leaked 100+ Million Users' Data Due To Miscon…
WhatsApp Bug (Or Maybe A Feature) Leaks Users Numbers In Google Search
While WhatsApp is becoming popular for online businesses, especially amidst the global lockdown due to COVID-19, a glitch has raisedWhatsApp Bug (Or Maybe A Fe…
Cloud Backups Aren't Always Safe Against Ransomware Attacks
Ransomware attacks have inflicted billions of dollars of damage on internet users and companies. And that's only during the lastCloud Backups Aren't Always Saf…
Many Users Hacked Via Fake Google Chrome Update From Compromised WordPress Websites
Hackers are exploiting various websites to conduct phishing attacks. These websites redirect users to fake sites prompting a malicious ChromeMany Users Hacked …
3 Google Play Store Apps Exploit Android Zero-Day Used by NSO Group
Watch out! If you have any of the below-mentioned file managers and photography apps installed on your Android phone'even if downloaded from the official Googl…
Google Chrome Will Now Alert You If Your Passwords Have Been Hack
Google yesterdayÂrolled a new stable version of the company's web browser, Chrome 79 for Windows, Mac, Linux, Android, and iOS. The new web browser comes with …
NextCry Ransomware Targets NextCloud Linux Servers and Remains Undetect
A new and particularly troublesome ransomware variant has been identified in the wild. Dubbed NextCry, this nasty strain of ransomware encrypts data on NextClo…
Adobe Leaked 7.5 Million Records Of Creative Cloud Users' Data
Once again, a prominent technology firm has made a blunder with regard to users' privacy. This time, Adobe inadvertently exposedAdobe Leaked 7.5 Million Record…
Apple iTunes and iCloud for Windows 0-Day Exploited in Ransomware Attacks
Watch out Windows users!The cybercriminal group behind BitPaymer and iEncrypt ransomware attacks has been found exploiting a zero-day vulnerability affecting a…
Google launches leaked-password checker, will bake it into Chrome in December
Google plans to add a hacked-password alert system into its browser by the end of year; Firefox aims to do much the same thing this month. Learn more in an inf…
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims…
100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript t…
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousand…
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-inte…
Linux Kernel Module Rootkits: How Attackers Hide After Compromising Cloud Workloads
If you think you know what’s running on your Linux host, you’re probably wrong. Not because you’re bad at your job—but because the kernel is lying to you.
Azure CLI Password Spraying: Why Cloud Identity Is Now Linux Security
Over the span of just 14 days, threat actors unleashed more than 81 million login attempts against Microsoft’s Azure command-line interface (CLI). The campaign…
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil's largest coope…
New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials
Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEP#DOOR that comes with capabilities to establish persi…
Fedora 42 hcloud 1.59.0 Moderate Info Leak FEDORA-2026-9af71a53ce
Update to 1.59.0
Evolving Linux Malware Threats: A Guide for Admins in Cloud-Native Contexts
For a long time, Linux malware followed a familiar pattern. A compromised host. A binary written to disk. Persistence through cron, systemd, or a quiet modific…
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories
The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere.This week’s stories show how fast attackers change their …
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defende…