ChainDrop npm Worm Compromises Hundreds of Packages
ChainDrop compromised hundreds of npm packages tied to Keyv and Cacheable, stealing developer credentials and spreading through trusted publishing access.
Read more →Security News
Latest cybersecurity news, vulnerabilities, and threat intelligence
CaptiveCrunch Hotel Wi-Fi Attacks Target Microsoft 365
CaptiveCrunch hijacks hotel Wi-Fi traffic to steal Microsoft 365 access and deliver CornFlake surveillance malware, Microsoft warns travelers worldwide.
Read more →
CaptiveCrunch Hotel Wi-Fi Attacks Target Microsoft 365
CaptiveCrunch hijacks hotel Wi-Fi traffic to steal Microsoft 365 access and deliver CornFlake surveillance malware, Microsoft warns travelers worldwide.
Read more →
Coldcard Wallet Flaw Linked to $88.6 Million Bitcoin Theft
Coldcard's weak seed generation flaw is linked to suspected thefts of $88.6 million in bitcoin, with affected wallet owners urged to migrate funds now.
Read more →
wp2shell POST Variant Bypasses URL-Only WordPress Defenses
Cloudways reports a wp2shell variant hiding the WordPress batch route in POST bodies, bypassing URL-only defenses and reinforcing the need to patch now.
Read more →
CISA Warns of PLC Attacks on Minnesota Water Systems
CISA warns utilities to disconnect exposed PLCs after cyberattacks targeted more than 30 Minnesota water systems, disrupting some automated controls.
Read more →
OWAReaper Exploits Exchange Flaw for Persistent Mailbox Access
Laundry Bear is deploying OWAReaper through an Exchange OWA flaw to keep persistent mailbox access across government and critical industry targets in Europe.
Read more →
Fastjson RCE Flaw CVE-2026-16723 Exploited in Attacks
Attackers are exploiting critical Fastjson flaw CVE-2026-16723 for unauthenticated remote code execution, leaving unsupported 1.x deployments at risk.
Read more →
DentaQuest Data Breach May Affect 23.4 Million People
DentaQuest says at least 15 million people were affected by a breach that may involve personal and dental health data for more than 23.4 million in 2026.
Read more →
MCBS Healthcare Data Breach Affects 1.2 Million People
The MCBS healthcare data breach exposed personal and medical information tied to 1.2 million people after unauthorized network access in September 2025.
Read more →