Latest Cybersecurity News
View all →
Everyday channels are available in an incident, but you may not want them
What was already said As I discussed in my previous CSO article, putting a lawyer in a large incident channel does not make every conversation…
Streamlining OS and Application Hardening: Revealing Misconfigurations with Wiz’s Agentless Custom Host Configuration Rules
Editor’s note: In our previous blog post, we announced that Wiz was expanding its risk assessment capabilities beyond cloud infrastructure by now including host and…
The long road to root.
Today we are joined by Subhajeet Singha, Senior Security Researcher at Acronis Threat Research Unit, discussing their work on “Red Heron exploits Gitea n-day flaw…
SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
SS7 and Diameter signaling attacks can track, intercept, and impersonate you. Here’s how they work and how to stop them. Your phone can be tracked,…
Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours
Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence threat intelligence snapshot lists 60,471…
Russian Hackers Exploit MDaemon Mail Server Flaw to Install Backdoors Without User Interaction
Russia-aligned threat actors are exploiting a flaw in MDaemon mail server software to run code on the server. Victims don’t have to open or click…
Claude Code extension poisoned with persistent SSH backdoor
A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion…
Hackers steal and publish data on 41,000 Homeland Security workers
In this article Hackers published work details and internal group memberships for more than 41,000 DHS workers. The data could enable targeted scams, harassment, stalking,…
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Ravie LakshmananOct 30, 2026Vulnerability / Web Security Threat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches…