The latest cybersecurity threats, patches, and advisories, tracked daily for small business owners.
Cloud Security Alert: JadePuffer Attacks Azure A new, dangerous breed of cyberattack is targeting businesses using the Microsoft Azure cloud platform. Security researchers have identified JadePuffer…
Urgent Patch Required for Citrix NetScaler Citrix has officially confirmed that two critical remote code execution (RCE) vulnerabilities— CVE-2026-88771 and CVE-2026-88772 —are currently being active…
Urgent Patching Required for Oracle PeopleSoft Servers Threat actors, specifically the ShinyHunters group, are successfully bypassing Web Application Firewalls (WAFs) to exploit a critical vulnerabil…
Security Alert: Massive Crypto Theft at Bitget The cryptocurrency exchange Bitget has confirmed a major security breach, reporting that approximately $351.6 million was stolen from its hot and wa…
The Growing Threat of AI-Driven Exploits Modern cyber threats are shifting toward autonomous exploitation. Recent reports highlight a sophisticated campaign leveraging AI harnesses to orchestrate vul…
Large-Scale Skimming Campaign Leverages AI Agents A sophisticated threat actor is utilizing open-source AI agent frameworks to automate cyberattacks against online retailers. This campaign has succes…
Microsoft Cracks Down on EvilTokens Phishing-as-a-Service Microsoft's Digital Crimes Unit has successfully disrupted EvilTokens , a sophisticated phishing-as-a-service (PhaaS) platform. The service…
Data Privacy Enforcement Action Google has been hit with a massive €403 million (approximately $463 million) fine by Ireland’s Data Protection Commission. The penalty stems from GDPR violations rel…
OpenAI Codex Sandbox Bypassed Security researchers have successfully escaped the OpenAI Codex sandbox environment, demonstrating the ability to execute unauthorized commands directly on host machin…
Global Campaign Targets 30,000 Devices A new law enforcement advisory has exposed a massive cyber campaign by the North Korean hacking group WaterPlum . Between December 2025 and July 2026, the grou…
Security Alert: Mass Data Breach at Gyazo The image-sharing platform Gyazo has confirmed a significant security incident resulting in the theft of 23.6 million user records . The breach occurred a…
Security Alert: Revolut Data Breach Financial technology giant Revolut has been hit by a significant data breach, resulting in the compromise of 680 high-profile accounts over a five-month period.…
Autonomous AI Agents Pose New Data Security Risks Security experts have confirmed the first instance of an AI-powered data breach reported to the Spanish Data Protection Agency (AEPD). Unlike tradi…
Critical VMware Vulnerability Targeted by Ransomware The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to businesses: a critical Remote Code Execution (RCE…
Critical Vulnerability Discovered in GitLab A maximum-severity vulnerability ( CVE-2026-85706 ) has been identified in both GitLab Community and Enterprise editions. With a CVSS score of 10.0, this p…
Critical Flaw in Tencent Software Targeted Security researchers have discovered that threat actors, linked to a China-aligned espionage group, are actively exploiting a critical vulnerability ( CVE-2…
Urgent Patching Required: CISA KEV Catalog Updates The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five high-risk vulnerabilities to its Known Exploited Vulnerabilities (K…
Urgent Patch Required for GitLab Servers GitLab has released a critical security update to address CVE-2026-85706 , a path traversal vulnerability that allows unauthenticated attackers to read arbit…
Critical Infrastructure Under Attack Security researchers have uncovered a sophisticated campaign where threat actors leveraged AI-powered agents to develop, test, and launch exploits against vulne…
Data Theft via AI Model Distillation U.S. intelligence and cybersecurity agencies have issued a major warning regarding the systematic extraction of proprietary technology from American frontier AI m…
Urgent Patching Required Microsoft has released its largest security update to date, addressing a staggering 974 vulnerabilities across its software portfolio. This record-breaking Patch Tuesday in…
A phishing-as-a-service kit called BigBear bypassed multi-factor authentication at 258 organizations, stealing thousands of Microsoft 365 credentials. Here's what SMBs should lock down today.
N-able N-central needs Hotfix 4 immediately, MikroTik routers are being hijacked over exposed SSH, and a new malware strain is stealing session cookies to bypass MFA.
Active exploitation is hitting WordPress plugins, Citrix NetScaler, and Chrome, while ID verification service IDScan.net exposed 153 million driver's license records.