Top 10 Attack Surface Exposures in 2026: Databases, Admin Panels, and Legacy Services Dominate
According to a new analysis by Intruder, 60% of organizations have at least one HTTP panel exposed, 49% have a risky port…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
Junior Hacker Used Tailscale and OpenSSH to Maintain Persistent Access After C2 Outage
A French-speaking attacker, operating under the handle 'Poisson,' breached a small French automotive business using a keylogger to steal banking and email…
PCI DSS v4.0.1 Now Mandates Payment Page Script Monitoring: QSA Validates Reflectiz Platform
The Payment Card Industry Data Security Standard (PCI DSS) v4.0.1 has introduced two critical requirements—6.4.3 and 11.6.1—that directly address the risk of…
Orphaned AI Agents: Uncovering Hidden Access Risks in Your Network
The rapid adoption of internal AI tools has created a significant security blind spot: orphaned AI agents. These are automated tools left…
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce disabled the Klue Battlecards app integration after detecting unusual activity that led to unauthorized access to customer data via OAuth token…
Shadow AI’s Real Threat Is Access Control, Not Data Leakage
The cybersecurity landscape is shifting as Shadow AI evolves from a data leakage concern to a critical access control problem. According to…
CISA Warns Fortinet Customers as FortiBleed Campaign Compromises 86,644 FortiGate Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to Fortinet customers following the discovery of a widespread…
INTERPOL Warns of Surge in Phishing, Ransomware, and AI-Driven Scams Across Asia-Pacific
A new report from INTERPOL reveals a dramatic increase in cybercrime across Asia and the South Pacific, driven by rapid digitalization, new…
Canada’s Spy Agency Uses First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
Canada's spy service, the Canadian Security Intelligence Service (CSIS), obtained a judge's permission to remotely clean botnet-infected devices on Canadian soil, marking…
Legacy Infrastructure Exposures Enable AI Agent Hijacking, Warns XM Cyber
At the Gartner Security & Risk Management Summit, Zur Ulianitzky, SVP Product and Security Research at XM Cyber, detailed how attackers are…