Cybersecurity News

Live headlines and official advisories from the sources we track daily. Each item links to its original source.

Top Cybersecurity News

Live headlines, updated automatically from The Hacker News.

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
August 6, 2026
Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) […]
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
August 6, 2026
Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part […]
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
August 6, 2026
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch […]
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
August 6, 2026
Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among […]
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
August 6, 2026
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. […]
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
August 6, 2026
Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript […]

From SANS Internet Storm Center (Creative Commons licensed).

ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th)
August 6, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
22 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary], (Thu, Aug 6th)
August 6, 2026
[This is a Guest Diary by Daryl Jiminez, an ISC intern as part of the SANS.edu BACS program]
Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm, (Wed, Aug 5th)
August 5, 2026
When you learn that a compromised package executed on one of your build hosts, muscle memory takes over: revoke the […]
ISC Stormcast For Wednesday, August 5th, 2026 https://isc.sans.edu/podcastdetail/10038, (Wed, Aug 5th)
August 5, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Botnet Hunting for Vulnerabilities in Diagnostic Tools, (Tue, Aug 4th)
August 4, 2026
This morning, I noticed specific sources "hunting" for vulnerabilities in URLs that I haven&#39;t noticed before. All of these URLs […]
ISC Stormcast For Tuesday, August 4th, 2026 https://isc.sans.edu/podcastdetail/10036, (Tue, Aug 4th)
August 4, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

From Krebs on Security.

Canadian Man Pleads Guilty in Snowflake Extortions
August 6, 2026
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty […]
Read This Before You Buy That TV Streaming Stick
July 30, 2026
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited […]
LG to Ban Residential Proxies from Smart TV Apps
July 22, 2026
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart […]
Microsoft Patches a Record 570 Security Flaws
July 15, 2026
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other […]
Lessons Learned from CISA’s Recent GitHub Leak
July 13, 2026
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published […]
Felons, Fraudsters Flog Offensive Cybersecurity Startup
July 8, 2026
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair […]

From UK NCSC (Open Government Licence).

NCSC statement in response to recent incidents resulting from frontier AI evaluations
August 4, 2026
A statement from Ollie Whitehouse, Chief Technology Officer at the NCSC, on AI security following recent incidents.
UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisations
July 23, 2026
GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing […]
UK and Allies urge critical sectors to improve defences against Russian intelligence targeting
July 13, 2026
New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers
The AI shift in cyber risk: why leaders must act now
June 22, 2026
Five Eyes cyber security agencies urge organisations to act on rapidly transforming cyber risk.
Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways
June 18, 2026
Organisations using Fortinet services are being urged to take action following a campaign affecting firewalls and VPN gateways.
NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems
June 17, 2026
Dr Richard Horne highlighted the scale of cyber threats against the UK’s critical infrastructure at RUSI’s Annual Security Lecture.