Cybersecurity
Latest news, analysis, and updates in cybersecurity.

Attackers Pounce on Oracle Payments CVE-2026-46817
Attackers hit Oracle Payments decoys six weeks after the CVE-2026-46817 patch, before public exploit code surfaced.

Ransomware Crews Weaponize BlueHammer Vulnerability
BlueHammer was exploited before Microsoft patched Defender. CISA now says ransomware crews used the flaw.

Old Bash Tricks Crack AI Coding Agents for Repo Attacks
GuardFall shows 10 of 11 open source AI coding agents can be fooled by old Bash quirks, turning repos into attack surfaces.

AI Token Costs Threaten to Break Cybersecurity Budgets
Palo Alto Networks spent over $1 million testing Claude, showing agentic AI can expose flaws while blowing up SOC budgets.

Russian Signal Phishing Hijacks VIP Accounts in Support Scam
Russian actors are phishing Signal users for recovery keys, targeting officials, military figures and journalists without breaking encryption.

200,000 Tata Files Expose iPhone 18 Pro Leak on Dark Web
A Tata Electronics breach reportedly put iPhone 18 Pro test photos and supplier maps on the dark web, raising Apple's supply-chain risk.

AI Threats Push Apple Security Updates Into Overdrive
Apple is shipping security fixes faster as AI threatens to turn bugs into attacks before scheduled updates arrive.

Private Key Crypto Hacks Bleed $6.7B From Web3's Vaults
Private key theft, not code bugs, now accounts for about 40% of crypto's $16.69B hack losses.

CI/CD Vulnerabilities Hand Attackers Keys to Millions of Repos
Cordyceps could let outsiders hijack CI/CD workflows, steal secrets, and compromise millions of open source repositories.

14.2 Million Email Accounts Exposed by KDDI Data Breach
A third-party software flaw may have exposed 14.2 million email accounts across six Japanese ISPs using KDDI's platform.

Cardano Wallet Exploit Rips $2.4M From SecondFi Users
SecondFi lost $2.4M after a Cardano wallet flaw exposed 374 wallets, while 129M ADA was moved to custody before worse damage.

Klue Supply Chain Hack Spirals After Hackers Rob Icarus
Klue's breach has morphed into a thief-robs-thief extortion fight, with customers stuck between Icarus and a second hacker group.