Resecurity caught ShinyHunters (SLH) using decoy accounts; the group attacked airlines, telecoms, and law enforcement in Sept 2025.

European Space Agency (ESA) has said further updates will be shared once more information becomes available.

A security alert from SlowMist warns of a critical vulnerability at HitBTC Exchange after failed disclosure attempts.

Sedgwick confirmed a cyber incident at its federal contractor unit after TridentLocker claimed to steal 3.4GB of data.

Organizations running affected versions of IBM API Connect are urged to assess their deployments immediately.

The ManageMyHealth hack affected multiple users. MMH investigates, secures systems, and begins patient notifications.

VVS Stealer is a Python-based malware that steals Discord credentials and tokens and has been sold on Telegram since at least April 2025.

Ilya Lichtenstein, who was sentenced to prison for his role in the Bitfinex hack that occurred in 2016, has been released from prison early.

A zero-day in Quake III Arena engines (ioquake3, OpenArena) allows attackers to read sensitive system files and target players. Check RCON access now!

Riot Games suffers a global League of Legends login outage after a digital certificate expired on Jan 4, 2026—echoing a similar lapse from 2016.

America’s cyber defenses are slipping as China, Russia, Iran, and North Korea escalate attacks. Congress must restore CISA leadership, funding, and partnerships.

The Kimwolf botnet has infected over 2 million Android devices, spreading mainly through residential proxy networks, researchers say.

A hacker who pleaded guilty to conspiring to launder billions of dollars worth of bitcoin stolen in the 2016 Bitfinex hack has been released from prison, a little more than one year after being sentenced to a five-year stint.

After the U.S. capture of Nicholas Maduro, fake AI-driven media quickly flooded the internet, while Trump allies revived debunked theories of rigged voting machines.  

Microsoft confirms Windows 11 SE support ends Oct 2026, leaving schools with underpowered hardware and a forced choice: upgrade or switch to Google.

Researcher Mickey Jin uncovers CVE-2025-43530, a critical TCC bypass in macOS allowing attackers to hijack user data via accessibility tools.

D4mianWayne details CVE-2025-68615, a 9.8 critical flaw in Net-SNMP allowing unauthenticated RCE. Update to v5.9.5 or v5.10.pre2 now!

GlassWorm Wave 4 targets macOS developers via VS Code, using encrypted payloads and a 15-minute fuse to trojanize Ledger and Trezor wallet apps.

MediaTek's Jan 2026 bulletin reveals critical modem flaws and memory corruption risks across dozens of chipsets. Update your device to stay safe!

Adobe patches a critical ColdFusion flaw (CVE-2025-61808) that uses remote SMB shares and CAR files to bypass security and achieve total server takeover.

Apache Kyuubi patches a high-severity 8.8 CVSS flaw (CVE-2025-66518) that allows unauthorized local file access via path traversal. Update to v1.10.3!