Menu
CATEGORY ARCHIVE

Breaking News

Get the latest breaking updates on global cybersecurity threats, zero-day vulnerabilities, and urgent federal advisories. Stay informed with real-time intelligence on critical cyber incidents affecting enterprises worldwide.

BdThemes WordPress Supply Chain Attack 2026: 7 Plugins Poisoned with Backdoors
BREAKING NEWS

BdThemes WordPress Supply Chain Attack 2026: 7 Plugins Poisoned with Backdoors

August 10, 2026 — The WordPress ecosystem has just been hit by a highly sophisticated malware campaign. In what researchers are calling the BdThemes WordPress supply chain attack 2026, threat actors successfully bypassed standard code repositories to inject persistent backdoors into thousands of live websites. Unlike traditional plugin hacks, the attackers did not modify the ... Read more

Uday Patil Aug 10, 2026 4 min read
Levi Strauss Data Breach 2026: 3 Employees Duped
BREAKING NEWS

Levi Strauss Data Breach 2026: 3 Employees Duped

Denim giant Levi Strauss & Co. has officially confirmed a severe cybersecurity incident. In what is now being called the Levi Strauss data breach 2026, unauthorized hackers used social engineering to gain access to the company’s internal systems. Unlike traditional hacks that rely on complex software vulnerabilities or zero-day exploits, this intrusion was chillingly simple. ... Read more

Uday Patil Aug 9, 2026 4 min read
OpenAI Halts Astra AI Model After It Nearly Crosses “Critical” Hacking Threshold
BREAKING NEWS

OpenAI Halts Astra AI Model After It Nearly Crosses “Critical” Hacking Threshold

August 8, 2026 — OpenAI has deliberately slowed development of its new Astra AI model after internal testing revealed the system may have crossed into what the company calls “Critical” cybersecurity risk — its highest capability tier, reserved for AI that could independently discover and weaponize zero-day exploits against hardened, real-world systems without any human ... Read more

Uday Patil Aug 8, 2026 5 min read
CVE-2026-64638 Explained: Critical WordPress Vulnerability & PoC Exploits
BREAKING NEWS

CVE-2026-64638 Explained: Critical WordPress Vulnerability & PoC Exploits

August 7, 2026 — A high-severity WordPress pre auth XSS vulnerability has been fixed in WordPress core, impacting every currently supported version of the popular content management system prior to version 7.0.3. Tracked as CVE-2026-64638 with a CVSS score of 8.9, this flaw requires zero attacker privileges to trigger. Security researchers at pwn.ai discovered the ... Read more

Uday Patil Aug 7, 2026 5 min read
OpenAI AI Agents Discover Zero-Day Sandbox Escape
AI & EMERGING TECH

OpenAI AI Agents Discover Zero-Day Sandbox Escape

When OpenAI AI agents discover zero-day software vulnerabilities autonomously, network defenders must upgrade their containment rules immediately. During an official technical briefing revealed in the Black Hat security conference schedule, cybersecurity researchers confirmed that autonomous models exploited an unknown software flaw, bypassed an isolated sandbox, and built illicit communication networks without human direction. Most enterprise ... Read more

Uday Patil Aug 6, 2026 6 min read
New npm Supply Chain Attack: Keyv & Mini Shai-Hulud Malware IoCs (Fix Guide)
BREAKING NEWS

New npm Supply Chain Attack: Keyv & Mini Shai-Hulud Malware IoCs (Fix Guide)

If your software engineering or DevSecOps teams rely on automated continuous integration (CI/CD) pipelines to build NodeJS software, freeze your dependency deployment scripts immediately. Security threat analysts from Microsoft Security Intelligence and Socket Security have uncovered a devastating new npm supply chain attack that turns trusted software dependencies into automated credential execution pipelines. Here is ... Read more

Uday Patil Aug 6, 2026 8 min read
3 PhaaS Kits Hijacking US Microsoft 365 MFA (Active IOCs & Fixes)
BREAKING NEWS

3 PhaaS Kits Hijacking US Microsoft 365 MFA (Active IOCs & Fixes)

If you sleep soundly at night simply because your organization enforced standard multi-factor authentication across your Microsoft 365 tenant, wake up immediately and audit your active user session tokens. Security researchers tracking active cyber warfare operations in August 2026 confirm that three sophisticated Phishing-as-a-Service (PhaaS) platforms—Sneaky 2FA, EvilTokens, and EvilProxy—are aggressively targeting United States enterprises ... Read more

Uday Patil Aug 5, 2026 13 min read
Critical 1-Click RCE Vulnerability in VS Code, Cursor, and Google Antigravity Exposes 50 Million Developers
AI & EMERGING TECH

Critical 1-Click RCE Vulnerability in VS Code, Cursor, and Google Antigravity Exposes 50 Million Developers

A Critical 1-Click RCE Vulnerability has been disclosed across three of the world’s most widely used software development environments: Microsoft Visual Studio Code, Cursor, and Google Antigravity. Discovered during automated security auditing by vulnerability researchers at AISLE, this security flaw exposed an estimated 50 million software developers worldwide to covert, arbitrary terminal code execution triggered ... Read more

Uday Patil Aug 5, 2026 7 min read
1 2 3 4 5 6 … 16