Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Android Apps Leaked 100+ Million Users' Data Due To Misconfigured Cloud Services
Misconfigured databases have long been a reason for exposing sensitive data. This time, however, the…Android Apps Leaked 100+ Million Users' Data Due To Miscon…
WhatsApp Bug (Or Maybe A Feature) Leaks Users Numbers In Google Search
While WhatsApp is becoming popular for online businesses, especially amidst the global lockdown due to COVID-19, a glitch has raisedWhatsApp Bug (Or Maybe A Fe…
Cloud Backups Aren't Always Safe Against Ransomware Attacks
Ransomware attacks have inflicted billions of dollars of damage on internet users and companies. And that's only during the lastCloud Backups Aren't Always Saf…
Many Users Hacked Via Fake Google Chrome Update From Compromised WordPress Websites
Hackers are exploiting various websites to conduct phishing attacks. These websites redirect users to fake sites prompting a malicious ChromeMany Users Hacked …
3 Google Play Store Apps Exploit Android Zero-Day Used by NSO Group
Watch out! If you have any of the below-mentioned file managers and photography apps installed on your Android phone'even if downloaded from the official Googl…
Google Chrome Will Now Alert You If Your Passwords Have Been Hack
Google yesterdayÂrolled a new stable version of the company's web browser, Chrome 79 for Windows, Mac, Linux, Android, and iOS. The new web browser comes with …
NextCry Ransomware Targets NextCloud Linux Servers and Remains Undetect
A new and particularly troublesome ransomware variant has been identified in the wild. Dubbed NextCry, this nasty strain of ransomware encrypts data on NextClo…
Adobe Leaked 7.5 Million Records Of Creative Cloud Users' Data
Once again, a prominent technology firm has made a blunder with regard to users' privacy. This time, Adobe inadvertently exposedAdobe Leaked 7.5 Million Record…
Apple iTunes and iCloud for Windows 0-Day Exploited in Ransomware Attacks
Watch out Windows users!The cybercriminal group behind BitPaymer and iEncrypt ransomware attacks has been found exploiting a zero-day vulnerability affecting a…
Google launches leaked-password checker, will bake it into Chrome in December
Google plans to add a hacked-password alert system into its browser by the end of year; Firefox aims to do much the same thing this month. Learn more in an inf…
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousand…
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-inte…
Linux Kernel Module Rootkits: How Attackers Hide After Compromising Cloud Workloads
If you think you know what’s running on your Linux host, you’re probably wrong. Not because you’re bad at your job—but because the kernel is lying to you.
Azure CLI Password Spraying: Why Cloud Identity Is Now Linux Security
Over the span of just 14 days, threat actors unleashed more than 81 million login attempts against Microsoft’s Azure command-line interface (CLI). The campaign…
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil's largest coope…
New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials
Cybersecurity researchers have disclosed details of a stealthy Python-based backdoor framework called DEEP#DOOR that comes with capabilities to establish persi…
Fedora 42 hcloud 1.59.0 Moderate Info Leak FEDORA-2026-9af71a53ce
Update to 1.59.0
Evolving Linux Malware Threats: A Guide for Admins in Cloud-Native Contexts
For a long time, Linux malware followed a familiar pattern. A compromised host. A binary written to disk. Persistence through cron, systemd, or a quiet modific…
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories
The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere.This week’s stories show how fast attackers change their …
ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories
The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defende…
China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services
The China-linked advanced persistent threat (APT) group known as APT31 has been attributed to cyber attacks targeting the Russian information technology (IT) s…
Cloud Linux Enhances E-Commerce Security and Performance
E-commerce businesses live and die by trust. A single data breach, a few minutes of downtime during peak traffic, or failure to meet compliance can sink custom…
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
The maintainers of the nx build system have alerted users to a supply chain attack that allowed attackers to publish malicious versions of the popular npm pack…
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEs
Cyber threats don't show up one at a time anymore. They’re layered, planned, and often stay hidden until it’s too late.For cybersecurity teams, the key isn’t j…