Security
Security headlines
Breaches, scams, patches, and guidance — from security reporters, researchers, and CISA.
Auto-collected from our source list and updated with each morning run; every headline links to the original reporting. For our editor-reviewed daily briefing, read the digest.
- Possible Vulnerability in Apple’s Automatic Reboot
- Hitachi Energy RTU500
- Savannah lwIP SMTP client
- Hitachi Energy SOI
- Johnson Controls EasyIO FG
- Hitachi Energy Asset Suite
- Hitachi Energy REB500
- ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
- Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
- FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
- Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
- Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
- Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
- Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
- LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
- Engineer sentenced for locking over 3,000 devices on employer network
- Nikkei discloses breaches of employees’ Microsoft, Google email accounts
- Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
- How to secure RMM software: 8 controls MSPs should test
- Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
- ASOS confirms data breach after “HACKED” in-app notifications
- Atlassian warns of critical file-access flaw in Jira, Confluence
- Rejetto HFS servers now actively scanned for critical RCE flaw
- OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU
- Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
- IQVIA fined $7.8 million for failing to properly anonymize health data
- Introducing the New Small Business Cybersecurity Support Program Finder
- Hackers steal 8 million citizens’ records from Danish government database
- Another Historic Cipher Falls to AI
- New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline