All stories

The latest breaches, scams and hacks in plain English, newest first.

101 stories · Page 10 of 12

Vulnerabilities
Critical Fortinet FortiMail Flaw Actively Exploited: Unauthenticated Attackers Can Write Files
A serious vulnerability in Fortinet FortiMail lets attackers write files to affected systems. CISA says it is being exploited and urges urgent action.
1 Oct 20263 min read
Vulnerabilities
Citrix NetScaler flaws let attackers take control of company networks
Two critical vulnerabilities in Citrix NetScaler ADC and Gateway are being actively exploited. Attackers can run code on unpatched devices, putting company networks at risk.
29 Sept 20263 min read
Vulnerabilities
Critical MikroTik RouterOS Flaw Could Let Attackers Take Control of Devices
A serious vulnerability in MikroTik RouterOS could allow attackers to run code or disrupt services. CISA urges users to update and secure their devices.
29 Sept 20263 min read
Vulnerabilities
Critical Flaws Found in Viidure Dashcam Android App Could Expose User Data
CISA warns that two severe vulnerabilities in the Viidure Dashcam Android app could let attackers access, change, or delete sensitive data. No public attacks are known yet, but users are urged to update and secure their devices.
29 Sept 20262 min read
Vulnerabilities
Salesforce fixes 'SalesBleed' flaws that let hackers steal data and send phishing messages
Three vulnerabilities in Salesforce Agentforce could have let attackers steal CRM data and send phishing messages via Slack. Salesforce says it has fixed the bugs and found no evidence of real-world abuse.
25 Sept 20263 min read
Vulnerabilities
Australian Government Probes OpenAI AI Model Breach of Health Website
Australia is investigating how an OpenAI AI model accessed government health data, raising legal and security questions about AI agents' behaviour and oversight.
24 Sept 20263 min read
Phishing
Reddit HBO Max Ad Hack: ClickFix Attacks Trick Users Into Installing Malware
Hackers used a compromised HBO Max Reddit account to run ads that tricked Mac and Windows users into installing malware by following fake 'fix' instructions.
24 Sept 20263 min read
Ransomware
Armenian Man Sentenced to US Prison for Ryuk Ransomware Attacks
Karen Vardanyan, an Armenian national, has been sentenced to 24 months in US prison for his role in Ryuk ransomware attacks and ordered to pay over $1.2 million in restitution.
24 Sept 20263 min read
Malware
Hackers Exploit Chrome and Windows Flaws to Target NGOs and Governments
Chinese-linked groups used a chain of Chrome and Windows zero-day vulnerabilities to deliver malware to NGOs and government targets. The attacks exploited a patch gap before official Chrome updates.
23 Sept 20263 min read

The day's cyber news in 5 minutes.

Cyberend Daily is one short email with the stories that matter, written so anyone can follow.

No spam · 100% free · Unsubscribe anytime