Federal bankruptcy courts dealing with outages after contractor cyberattack
The incident, which involved a government contractor, has halted all production of bankruptcy notices.
The Record 36m ago
critical
Vulnerabilities
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Dark Reading 39m agoCritical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's…
The Hacker News 57m ago CVE-2026-99999Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
BleepingComputer 1h agoZero-click spyware infecting devices through online ads, researchers say
Powerful zero-click spyware is infected devices worldwide through targeted ads, new research shows — an alarming development in the spread of surveillance technology.
The Record 2h agoThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories…
The Hacker News 2h agoHackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
BleepingComputer 3h agoContext Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. The post Context Is King in the Fight Against Modern Cyberattacks appeared first on…
SecurityWeek 3h agoFake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
BleepingComputer 4h agoWatch Now: Zero Trust Strategies Summit – All Sessions Available on Demand
This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies. The post Watch Now: Zero Trust Strategies Summit – All Sessions…
SecurityWeek 4h agoMeasuring Human Cryptanalysis Effort
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key assumption…
Schneier on Security 4h agoPatch first
- Broadcom VMware vCenter — CVE-2026-59310, used in ransomware
- JetBrains TeamCity — CVE-2026-63077, used in ransomware
- Cisco Secure Firewall Management Center (FMC) — CVE-2026-20316, used in ransomware
- SonicWall SMA1000 Appliances — CVE-2026-15409, used in ransomware
Check your exposure
- Mail and firewall management interfaces reachable from the internet
- Appliances still on end-of-support branches
- Anything on the KEV catalogue with no owner assigned
In numbers
- 1746 known exploited vulnerabilities tracked
- 361 of them linked to ransomware campaigns
- 212 wire items in the last 90 days