ENCN
BLEEPINGCOMPUTER
ChatGPT share links abused to host fake outage pages to deliver malware1h
California AG sues 23andMe over 2023 breach exposing health data1h
From $5 Attacks to Botnet-Powered Platforms: Inside the DDoS-as-a- Service Market5h
CYBERSCOOP
Tennessee man linked to 764 accused of series of crimes against children dating back to 20221h
Federal audit reveals NIST’s NVD is plagued by poor planning and duplication3h
House panel poised to hold hearing centered on AI impact on cyber1d
DARK READING
Asia's Cyber Insurance Market Shows Signs of Life5h
With Complex Cloud Integrations, Small Errors Lead to Major Compromises6h
'The Com' Cyberattacks Support Violence & Sexploitation7h
THE RECORD
Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more6h
Cruise giant Carnival confirms data breach affecting nearly 6 million people1d
Canadian man gets 33 years for using social media to coerce US children into sending sexual content1d
THE HACKER NEWS
New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks8h
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets10h
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer1d
TLDR INFOSEC
Seedworm DLL Attack 🐛, Gitea Image Leak Bug 📦, Starlette ASGI Flaw 🤖19h
Jailbroken Gemini Used For Hack 🤖, MyPillow Ransomware 🛏️, UK Visa Portal Leak 🛂1d
600K Lithuanian Records Leaked 🇱🇹, KnowledgeDeliver 0-Day RCE 💥, Google Family Link Hijack 📱2d
INFOSECURITY
Silent Ransom Group Uses In-Person IT Impersonation to Breach Systems6h
Infosecurity Europe: CyCOS Project Expands to Support UK SMEs as CIISec Takes Over9h
Chinese Hackers Exploit Iran War to Target Maritime and Energy Companies10h
GRAHAM CLULEY
Police arrest man following hack of Ajax football club11h
MyPillow listed on ransomware gang’s leak site, but denies it has been breached1d
Smashing Security podcast #469: What your Oura ring won’t tell you1d
HELP NET SECURITY
Humanix expands detection to identify live violations of security procedures12h
Hottest cybersecurity open-source tools of the month: May 20261d
Hackers are knocking on office doors pretending to be IT staff2d
INDICATOR
Briefing: YouTube stops hiding its AI labels8h
Tips for images, geolocation, and visualization that I learned from 5 OSINT videos1d
8 AI bots now write 50% of X’s Community Notes3d
SECURITYWEEK
In Other News: Trump Mobile Data Breach, FIFA World Cup Phishing, CISA Responds to Supply Chain Attacks3h
Charter Communications Data Breach Could Impact Nearly 5 Million4h
MokN Raises $15 Million for Phish-Back Platform5h
SOPHOS
Canvas attack aftermath: What risks come next?1d
Encore Performance: Sophos ranked #1 Overall in Endpoint, EDR, XDR, MDR, and Firewall for the 2nd consecutive time in the G2 Summer 2026 Reports1d
Sophos named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection for the 17th consecutive report2d
SOCIAL
R/PRIVACY
Aptive Pest Control scheduled my for appointments I didn't make and wouldn't delete my data - what can I do? [NY]3h💬 3▲ 5
Papers, Please: Online Age Checks Create a Pointless Privacy Risks— One of the world’s leading age verification providers(clients include Meta, OnlyFans, Sony PlayStation, and TikTok) collect and share highly sensitive personal data—including facial photos and device fingerprints—with third parties.4h💬 5▲ 111
Inkjet Printer Tracking?7h💬 3▲ 6
R/CYBERSECURITY
Zero Trust is Overrated? Navigating the Complexity1h💬 54▲ 13
Warning on MAD20 Subscriptions: $500 Blind Auto-Renewals and Hostage Certifications2h💬 3▲ 5
How Do You Handle the Massive Amount of Information in the CPTS Path?2h💬 4▲ 6
R/MALWARE
Kali365 Activity Surges: Device Code Phishing Is Scaling Fast2d💬 1▲ 7
Not a security person... got hit by an undocumented macOS stealer campaign, reverse engineered it, and tried to take the whole operation down.3d💬 18▲ 45
R/HACKING
Do you think this is legit or has the website been compromised?25min💬 29▲ 9
Do you guys take paper notes or digital ones during studying ?3h💬 15▲ 6
How do people actually modify mobile games to increase their power?12h💬 17▲ 6
R/REVERSEENGINEERING
Ghidra 12.1.1 has been released!3h💬 0▲ 9
How 2004 RuneScape fit a multiplayer RPG into 56k dial-up1d💬 0▲ 13
reverse engineering need for speed most wanted for modding sdk1d💬 5▲ 35
R/INFOSECNEWS
Dutch Government just said no to an American firm buying the keys to their digital State2d💬 0▲ 10
R/NETSEC
1,001 IPs, 64 countries, one operation: mapping a botnet by its back end · HoneyLabs blog10h💬 2▲ 41
I evaluated 5 LLM agents on patching real-world CVEs. Here is what I found.12h💬 6▲ 13
Fooling around with encrypted reasoning blobs15h💬 1▲ 24
R/ASKNETSEC
How to prepare Incident Response Testing?1d💬 13▲ 9
Secure base images that dont need an enterprise contract or a massive budget?1d💬 11▲ 9
Has anyone replaced their VPN with ZTNA and was it worth it?4d💬 62▲ 20
HACKER NEWS
💬Rsync: Commits co-authored by Claude break –compare-dest in security update12h💬 0▲ 7
💬GitHub bans security researcher who posted zero-day Windows exploits21h💬 242▲ 506
💬Project Lightwell: Securing the open source supply chain1d💬 0▲ 10
💬CIFSwitch: A non-universal Linux local root vulnerability1d💬 0▲ 6
💬Microsoft's stance on zero day exploits is a dumpster fire of their own making1d💬 30▲ 75
ENTERPRISE
ZDNET SECURITY
Amazon just dropped this 75-inch Hisense TV to under $850 - and I'd recommend it1h
After using this Windows laptop for work and play, I'm wondering why I still need my PC tower3h
Open-source security is a mess - IBM and Red Hat bet $5 billion and 20,000 engineers can fix it3h
TECHCRUNCH SECURITY
Microsoft under fire for threatening security researcher with criminal investigation2h
Final 24 hours to save up to $410 on your TechCrunch Disrupt 2026 ticket5h
Hackers are trying to steal Signal users’ backups in new wave of widespread attacks1d
NEXTGOV CYBER
Commercial location data is being used to target US servicemembers, lawmakers warn2h
Iran’s hackers are coordinating more closely, Israel’s top cyberdefense official says1d
State leaders renew call for cyber grant program’s renewal2d
CSO ONLINE
DNS-AID will make AI agents easier to discover, says Linux Foundation3h
Certifiably random: Swiss researchers claim perfect random number source4h
Notepad++ vulnerabilities could enable arbitrary code execution on Windows systems9h
FEDERAL NEWS CYBER
The same data that’s out there about you can also be used against you and now it is2h
Agencies need to first move slow with their data to then move fast into AI4h
‘Detect, understand, respond’ driving OMB, CISA’s latest cyber efforts23h
THE REGISTER SECURITY
No fix yet for critical RCE bug in open-source Git service Gogs - exploit module is out1h
23andMe inherits lawsuit over 'disturbing' DNA data breach3h
Dutch cops wrest 17M devices from mystery botnet's clutches6h
CYBERSECURITY DIVE
CISA urges security teams to check for software development compromises4h
How CISOs can manage sovereign-cloud security risks1d
IBM’s new $5B initiative will help enterprises rapidly patch open-source vulnerabilities1d
VENDORS
OX SECURITY
7 AI Security Testing Tools for LLMs, Agents, and AI Pipelines (2026)7h
AI Security Testing: How to Validate LLMs, Agents, and AI Pipelines in Production1d
Vibe Coding Security: Why 62% Of AI-Generated Code Ships With Vulnerabilities2d
REVERSINGLABS
Forrester Names RL in Agentic Development Security Market1d
5 lessons from vulnerability management's front lines1d
Dependency attack takes down ed-tech platform at scale2d
KASPERSKY SECURELIST
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant12h
Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years1d
SENTINELONE
The Good, the Bad and the Ugly in Cybersecurity – Week 224h
RAPID7
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)2h
Experts on Experts: Why Compliance is becoming Continuous1d
Authenticated RCE via Argument Injection in Gogs (NOT FIXED)1d
CROWDSTRIKE
CrowdStrike Named a Leader in 2026 Gartner® Magic Quadrant™ for Endpoint Protection for Seventh Consecutive Time14h
CrowdStrike Named a Leader in Identity Threat Detection and Response3d
Disrupting Glassworm: Inside CrowdStrike’s Takedown of a Developer-Targeting Botnet3d
UNIT 42
2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface1d
Out of the Crypt: The Evolving Cyber Extortion Economy1d
DATADOG SECURITY LABS
From Exploit Code to Production Detection: Building a CVE-2026-31431 (Copy Fail) detection with Agents1d
CISCO TALOS
Less panic patching, more precision1d
DICOM, Pydicom, GDCM, and Orthanc: A technical tour of what really happens in the heap1d
MediaArea heap-based buffer overflow vulnerabilities2d
WELIVESECURITY
ESET APT Activity Report Q4 2025–Q1 20261d
What to consider before asking an AI chatbot for health advice2d
BTMOB: A stealthy RAT burrowing deep into Android devices3d
CHECK POINT RESEARCH
AI Threat Landscape Digest March-April 20263d
25th May – Threat Intelligence Report4d
ELASTIC SECURITY
Detecting Tycoon 2FA AiTM attacks across Entra ID and Google Workspace3d