Targeted
Threat Intelligence

Microsoft Exchange Online outage causes email delays, failures

Microsoft is working to address a widespread service issue affecting the mail flow pipeline for Exchange Online customers across North America and Germany. [......

Red Hat Confirms Supply Chain Compromise of @redhat-cloud-services npm Packages

Red Hat has officially confirmed a supply chain compromise affecting multiple packages published under the @redhat-cloud-services npm namespace, disclosed publi...

Two New Reports Offer Competing Explanations for Cybersecurity’s Growing Crisis

As AI shortens the path from vulnerability disclosure to exploitation, researchers disagree on whether the problem is inadequate security tools or inadequate op...

Russia Says Foreign Spyware Found on High-Ranking Officials’ Mobile Phones

Russia’s Federal Security Service (FSB) has claimed it disrupted a large-scale cyber-espionage operation involving the deployment of advanced spyware on mobile ...

Instagram users locked out after Meta AI abused to steal accounts

Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners. [...]...

Halo Security Honored with 2026 MSP Today Product of the Year Award

Miami Beach, FL, USA, June 2nd, 2026, CyberNewswire Attack Surface Management Platform Recognized for Exceptional Innovation and Successful Deployment Through T...

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

A simple development setting bypassed protections designed to prevent unauthorized Android apps from accessing Microsoft account tokens, exposing billions of in...

WeedHack Minecraft malware campaign infects over 116,000 PCs

McAfee researchers have uncovered a large Malware-as-a-Service (MaaS) operation targeting Minecraft players through trojanized mods, cheats, and game clients. T...

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities

Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks. The post Android Update Patches Exploited Zero-Day, 123 Ot...

CISA Warns of Two-Year-Old Oracle WebLogic Server Vulnerability Exploited in Attacks

CISA has issued a fresh warning highlighting active exploitation of a critical Oracle WebLogic Server vulnerability, tracked as CVE-2024-21182, adding it to its...

Why the browser is now the front line for AI security

AI-powered attacks and shadow AI adoption are creating new security risks inside the browser. Push Security explains why browser visibility is becoming critical...

Critical KMW CCTV Vulnerability Let Attackers Gain Unauthorized Access to Camera Feeds

A critical security flaw in KMW CCTV security cameras could allow attackers to gain full, unauthorized access to live camera feeds and device settings. The vuln...

Anthropic Expands Project Glasswing Claude Mythos Preview to 150 New Organizations

Anthropic has significantly broadened the reach of Project Glasswing, its collaborative AI-driven cybersecurity initiative, by extending access to Claude Mythos...

Anthropic Expanding Mythos Access to 150 New Organizations

Only approximately 50 companies have had access to Mythos until now and they have found thousands of vulnerabilities in their products. The post Anthropic Expan...

CISA Flags Palo Alto Networks PAN-OS Vulnerability as Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Palo Alto Networks PAN-OS vulnerability to its Known Exploited Vulnerabili...

Microsoft MSRC Allegedly Dismissed Dependency Confusion Vulnerability, Claims Researcher

A dependency confusion vulnerability affecting Microsoft’s Azure Portal after the Microsoft Security Response Center (MSRC) closed the case, claiming the ...

Mustang Panda Deploys PlugX RAT Through Multi-Stage LNK and PowerShell Attack Chain

A well-known Chinese state-sponsored threat group called Mustang Panda has been caught running a sophisticated cyberattack campaign using its signature remote a...

Hackers Use 34 Malicious Packages to Steal Cloud Keys, Wallets, and SSH Credentials

Hackers have planted 34 malicious packages across three major open-source ecosystems, quietly stealing cloud credentials, SSH keys, and blockchain wallet data f...

SolyxImmortal Python Malware Steals Browser Passwords, Cookies, Files, and Keystrokes

A new Python-based malware called SolyxImmortal has been found quietly stealing browser passwords, cookies, sensitive files, and keystrokes from infected Window...

Infosecurity Europe