Threats tracked
2,528
Breaches analyzed
20
Countries affected
19
Critical alerts
144
Global threat level
66/100
APT
CYBERCRIME
RANSOMWARE
CVE-2025-10748
Remote code execution vulnerability in WebLogic allowing unauthenticated attackers to execute arbitrary code in Oracle deployments.
CVE-2024-10731
Remote code execution vulnerability in iOS allowing unauthenticated attackers to execute arbitrary code in Apple deployments.
CVE-2023-10714
Remote code execution vulnerability in Chrome allowing unauthenticated attackers to execute arbitrary code in Google deployments.
CVE-2025-10697
Remote code execution vulnerability in IOS XE allowing unauthenticated attackers to execute arbitrary code in Cisco deployments.
CVE-2024-10680
Remote code execution vulnerability in vCenter allowing unauthenticated attackers to execute arbitrary code in VMware deployments.
Active
378
victims
Disrupted
654
892
412
Inactive
291
In this article Attackers stole $6.3 billion from the Binance cryptocurrency exchange Binance says user funds are safe, but watch out for fake support or recovery offers from scammers Users should check their accounts and use official Binance channels. Binance says a security inc
In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as products and which will become f
Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first half of 2026 oc
Police in 21 countries arrested 1,462 suspects and took down 10,909 malicious networks in Operation Serengeti III, an INTERPOL-coordinated cybercrime sweep across Africa that ran from June 29 to August 31, 2026. Investigators recovered more than $105 million in illicit funds. Fin
View CSAF Summary Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of
CISA Alerts
Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles.
BleepingComputer
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners.
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia.
Ads promoted browser extensions as tools to find manuals, convert PDFs, or make searches safer. But many of these extensions sent users’ search queries through servers controlled by their operators. Socket researcher John Tuckner identified 319 extensions with an estimated 13.4 m
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors.
Flaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit trust between networks and how its secur
A Syrian man who used a hijacked news agency Twitter account to post a fake report of explosions at the White House has been sentenced to 42 months in prison, the US Department of Justice has announced. Ahmad Umar Agha, also known as “Th3Pr0”, was sentenced on Thursday by a feder
As preparation for the UK’s planned social media ban, Ofcom has set out four ways social media platforms could check whether users are aged 16 or over. The government and Parliament will decide how the ban works in practice. Ofcom is the regulator for the communications services
Shufti launches Know Your Agent (KYA), an AI agent verification solution designed to verify autonomous AI agents acting on behalf of individuals and businesses. Agentic commerce enables AI agents to open accounts, place orders, and move funds for their owners. A business receivin
Bedrock Data has announced AI-assisted remediation, which federates the work of fixing data exposure to the data owners across the enterprise. Bedrock Data discovers who owns each exposed dataset, opens a ticket for that owner in the Jira or ServiceNow workflow the enterprise alr
30 active incidents mapped
New high report: Smart TVs can harbor unpatched security flaws and track what you watch
New critical report: Fake IT help desk callers got by on little more than names and email addresses
New high report: Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
New high report: Bedrock Data routes data exposure fixes to owners and verifies results
Fake IT help desk callers got by on little more than names and email addresses
Hitachi Energy CoreTec Product
Northflank security breach leads to abuse of customers' AI API keys
New Android SMS of Death exploit can remotely crash unpatched phones
From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.
Chainalysis discloses data breach from "offensive agentic techniques"
Daily briefing
Read today's intelligence briefing→
Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements. In one case, that access end
