McKesson Breach Exposes Data Through Third-Party Apps
McKesson confirms attackers accessed third-party applications and exfiltrated data, while the scope and number of affected patients remain under investigation.
Read more →Security News
Latest cybersecurity news, vulnerabilities, and threat intelligence
PaperCut Zero-Day Attacks Trigger Emergency Patches
PaperCut confirms active zero-day attacks on all NG and MF versions, releases emergency patches, and urges administrators to restrict server access now.
Read more →
FBI Disrupts QTFY Platforms Used in Chinese Cyber Espionage
U.S. authorities disabled QScan and QTRouter, platforms allegedly used by China-linked QTFY to target critical infrastructure and federal networks now.
Read more →
Zimbra CVE-2026-73570 Attacks Compromise 274 Servers
Active exploitation of Zimbra flaw CVE-2026-73570 has compromised 274 servers. Administrators should patch and inspect systems for malicious files now.
Read more →
Exploited Zimbra CVE-2026-73570 Exposes Email Servers
Actively exploited Zimbra flaw CVE-2026-73570 enables unauthenticated command execution on exposed email servers. Administrators should patch and investigate.
Read more →
ToxicPanda Android Malware Expands to 349 Finance Apps
ToxicPanda Android malware now targets 349 finance apps, abusing VPN, Accessibility and Wireless ADB features to seize deeper control of infected phones.
Read more →
Android Car Head Unit Malware Creates Proxy Botnet
Android car head unit malware spread through a legitimate updater, creating proxy botnet nodes for traffic relaying and online advertising fraud operations.
Read more →
Microsoft Corrects Entra ID CVE-2026-69836 Exploit Claim
Microsoft corrected CVE-2026-69836 records to say the critical Entra ID flaw was not exploited and is fully mitigated with no customer action needed today.
Read more →
CISA Warns of Exploited MLflow CVE-2026-64849 SSRF Flaw
CISA warns attackers are exploiting critical MLflow SSRF flaw CVE-2026-64849, putting internal services and cloud metadata at risk worldwide. Patch now.
Read more →
Rust Crates Poisoned in Build-Time Supply Chain Attack
Three Rust crates were poisoned to run credential-stealing malware during builds, exposing developer and CI systems before crates.io removed the releases.
Read more →