Cybersecurity News Hero

Combing the world for the cybersecurity stories you need to know.

Cybersecurity News
NSPM-12 NSS cyber defense https://www.pexels.com/photo/white-concrete-building-with-flags-on-top-7017138/
NSPM-12 Rewires the Governance of America's Most Sensitive Cyber Networks
July 09, 2026
For over 35 years, the framework governing the National Security Systems (NSS) of the United States has been governed by National Security Directive (NSD) 42, a policy set by the Bush administration in 1990. This…
Read More >
IDTC TIR trends in identity https://www.pexels.com/photo/person-holding-debit-card-50987/
How Hacked Devices Are Rewriting the Threat Landscape
July 07, 2026
The nationally-recognized nonprofit Identity Theft Resource Center recently published its 2026 Trends in Identity Report (TIR), the fifth installment in the annual series exploring the current state of the identity threat landscape. The report outlines…
Read More >
Five Eyes Chinese intelligence job recruiters https://www.pexels.com/photo/chinese-national-flag-waving-against-clear-blue-sky-32469234/
Five Eyes Warns Chinese Intelligence Is Using Job Platforms to Recruit Sources
July 06, 2026
Chinese military intelligence operatives are posing as online recruiters to reach people with sensitive government or military knowledge, according to a joint warning from the Five Eyes intelligence-sharing alliance. The joint advisory from the United…
Read More >
DragonForce ransomware Microsoft Teams https://www.pexels.com/photo/black-and-silver-laptop-computer-8284722/
How DragonForce Weaponized Microsoft Teams to Outlast Its Own Ransomware
July 03, 2026
In a recent attack, threat actors compromised a U.S. services firm’s network using malware tactics unseen prior to this incident. The attackers’ initial access was traced to an unidentified vulnerability in either an SQL or…
Read More >
FTC bank fraud scams https://www.pexels.com/photo/1-us-dollar-bill-163056/
Fake Banks and Phantom Agencies Draining Billions from U.S. Bank Accounts
July 01, 2026
New Federal Trade Commission (FTC) data shows how imposter scams have become the most reported form of fraud in the U.S. Financial losses nearly tripled from 2020 to 2025, and last year, Americans lost $3.5…
Read More >
Rokarolla Android Zimperium https://www.pexels.com/photo/young-businessman-using-phone-and-credit-card-30535634/
Rokarolla Malware Can Block Alerts and Manipulate Android Banking Sessions
June 30, 2026
Zimperium researchers have identified an Android banking trojan that targets 217 banking and cryptocurrency apps and can help attackers manipulate infected phones during fraud attempts. The malware, called Rokarolla, is distributed through malicious websites that…
Read More >
ShinyHunters PeopleSoft ERP zero day https://www.pexels.com/photo/3d-colorful-bricks-12651144/
Inside the PeopleSoft Zero-Day That Let Attackers Look Like Legitimate Users
June 25, 2026
Threat researchers have discovered a campaign by the cybercrime group known as ShinyHunters, historically known for carrying out massive data breaches and extortion attacks. This most recent campaign, based on activity observed between May 27th…
Read More >
FIFA World Cup tickets https://www.pexels.com/photo/vancouver-stadium-and-giant-fifa-soccer-ball-38104078/
How Cybercriminals Turned Ticket Mania Into a Global Attack Surface
June 23, 2026
With 48 teams playing 104 matches in three countries, the FIFA World Cup 2026 is an event of unprecedented scale and ticket scarcity. Dynamic pricing of tickets can push seats at the final match to…
Read More >
Anthropic Fable 5 frontier AI https://www.pexels.com/photo/red-button-on-the-chrome-finished-trim-9661246/
Frontier AI Just Got a Kill Switch for Hackers
June 22, 2026
On June 9th, Anthropic AI announced the public release of Claude Fable 5, a version of the Mythos model with additional safeguards for general use. Until recently, Mythos-class AI models were confined to use only…
Read More >
Dataminr Handala water breach https://www.pexels.com/photo/water-flowing-from-pipes-17882783/
Handala’s Cal Water Breach Claim Exposes Hidden Risk in Utility Networks
June 20, 2026
Threat intelligence firm Dataminr reported that Handala, an Iran-linked threat actor, claimed it breached California Water Service and published stolen data from the utility. The evidence released so far, however, points to a narrower compromise…
Read More >
Cloud Security Alliance DevSecOps runtime https://www.pexels.com/photo/purple-and-blue-light-streaks-12489187/
The Case for Runtime Security Is Now Undeniable
June 19, 2026
There has long been an industry consensus that moving threat detection earlier in the development lifecycle is an effective way to prevent incidents in production. Heavy investment in pre-production scanning, DevSecOps tooling, and “shift earlier”…
Read More >
executive order AI https://www.pexels.com/photo/usa-presidential-office-4338046/
Trump Executive Order Creates New Security Bargain Between Government and AI Industry
June 17, 2026
President Trump's June 2nd executive order on artificial intelligence marks a meaningful pivot. Previously, his administration maintained a hands-off posture toward the AI industry. While this order does not yet impose regulatory mandates, it constructs…
Read More >
FIFA World Cup 2026 phishing https://www.pexels.com/photo/close-up-of-official-argentine-soccer-ball-on-field-30986212/
Cybercriminals Targeted the 2026 FIFA World Cup Before Play Even Began
June 15, 2026
Cybercriminals began building infrastructure to target the 2026 FIFA World Cup well before the first match was played, according to a new report from Fortinet’s FortiGuard Labs. The company said it tracked FIFA-themed cyber activity…
Read More >
Fortinet PureLogs phishing https://www.pexels.com/photo/phishing-awareness-in-digital-security-30885916/
How a Fake Purchase Order Becomes a Full-Scale Enterprise Data Breach
June 09, 2026
Fortinet’s FortiGuard Labs recently discovered a phishing campaign with the goal of stealing sensitive data from target devices using a PureLogs variant. The lure hidden behind business document theming exploits the urgency and routine that…
Read More >
Drupal CVE-2026-9082 https://www.pexels.com/photo/man-using-laptop-on-the-table-with-cup-of-hot-beverage-2010794/
CVE-2026-9082 and the Hidden Risk in Drupal's Core
June 06, 2026
A recently discovered vulnerability in Drupal Core, tracked as CVE-2026-9082, has been exploited in the wild and added to the United States Cybersecurity and Infrastructure Security Agency’s (CISA) KEV catalog. The vulnerability is an SQL…
Read More >
claw chain AI vulnerability https://www.pexels.com/photo/intricate-machine-gears-in-industrial-setting-31742337/
Claw Chain Exposes the Blind Spot at the Center of Agentic AI Security
June 02, 2026
Open-source agentic AI platform OpenClaw has undergone rapid adoption since its late 2025 launch. First introduced as Clawdbot, OpenClaw has seen broad enterprise integration across IT automation, customer service, and messaging platforms. With the use…
Read More >
Twill Typhoon Darktrace https://www.pexels.com/photo/an-abstract-artwork-5870930/
Twill Typhoon Modular Backdoor Rewrites Rules of Detection
June 01, 2026
Chinese-nexus threat actors have long demonstrated patience and operational sophistication. But newly-released research by Darktrace marks something more consequential than another well-executed intrusion. A Twill Typhoon attack documents an adversary that has engineered tooling to…
Read More >
CISA KEV patching https://www.pexels.com/photo/united-states-capitol-facade-7016960/
How AI Is Collapsing the Federal Patching Window
May 29, 2026
The United States Cybersecurity and Infrastructure Security Agency (CISA) established the Known Exploited Vulnerabilities (KEV) catalog in November 2021 as a resource to aid federal agencies and the public in their efforts to defend against…
Read More >
Subscribe for the Latest News
Webinars
Surviving Cloud Attacks: A Practical Blueprint for Cloud Resilience
Register Now
Holistic Visibility and Recovery for Cyber Resilience
Register Now
AI Sprawl: The Untested Attack Surface
Register Now