SecurityWeek

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Hackers start exploiting critical WordPress flaw for code execution

CISA alerts of active exploitation of three Linux kernel flaws

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Exclusive | Gemini Hacked Three Companies in First Known Breakout by Google’s AI

iOS 26.7—Apple Issues New Update Warning To iPhone Users

Microsoft patches a record 972 vulnerabilities, 112 of them critical

OpenAI’s AI agents secretly used a German wiki website as a message board. OpenAI stayed quiet about it for weeks.

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Lords call for AI 'kill switch' powers in UK

Recently patched PaperCut zero-days used in data theft attacks

AI Burnout Hits the People Charged With Defending Hospitals and Banks From Hackers

Hackers claim millions of patient records stolen during data breach at healthcare giant McKesson

PaperCut warns of NG, MF flaw exploited in zero-day attacks

White House to unveil program to protect water systems against hackers

CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw

If you're not using AI to attack your own systems, your adversaries will

Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution

Critical Zimbra RCE flaw now actively exploited in attacks

iOS 26.6.1 and macOS Tahoe 26.6.2 Fix Nearly 30 Security Vulnerabilities

Everyone is talking about AI ‘escaping’, but cyber experts say the real threat is far more serious

Unpatched GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

Broadcom falls amid VMware security vulnerability reports

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

Chrome adopts what may be the best protection yet against account takeovers

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

Microsoft Plugs Nearly 400 Security Holes

‘Zoomsday’ hack uncovered using fewer than 20 AI prompts

Apple’s latest macOS updates address a serious Screen Sharing vulnerability

AI helps Microsoft bug hunters chase a record $20M payday

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

Hotel Wi-Fi phishing attack targets Microsoft logins

JetBrains warns of critical TeamCity remote code execution flaw

6 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Google is working on Chrome updates that don’t require restarts

iOS and macOS 26.6 arrive today, paving the way for iOS and macOS 27

8 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC

10 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

A vulnerability identified as 'WP2Shell' is facilitating remote takeovers of millions of WordPress sites, drawing urgent warnings from security researchers.

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

Zoom warns of critical account takeover vulnerability

Zoom warns of critical Windows vulnerability enabling account takeover

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

7 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

CISA Urges SharePoint Hardening After New Exploitations

9 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

New phishing kits target Microsoft 365 accounts, evade MFA

9 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

SonicWall is urging users of its SMA1000 series appliances to apply patches immediately following reports of active zero-day exploits.

Google Confirms New And Critical Chrome ‘Use-After-Free’ Memory Update

Google has released rapid-fire updates to address critical vulnerabilities, including a 'use-after-free' memory flaw in the Chrome browser.

New Januscape Linux flaw allows VM escape on Intel, AMD devices

5 news sources are covering this Technology story right now — Newsylist is tracking how fast it spreads.

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

A critical Linux kernel vulnerability known as "Bad Epoll" or "DirtyClone" allows unprivileged users to gain root access on servers and Android devices.

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts