A critical authentication bypass in SimpleHelp’s remote monitoring and management (RMM) software has been exploited to deliver two previously unseen malware families, after attackers forged a login token to seize control of a managed network. New analysis from security firm… Read More "Critical SimpleHelp Vulnerability Exploited For Malware Delivery"
Your inbox is an identity system all of its own: whoever owns it may own a lot more 29 Jun 2026 • , 5 min. read Email is not just a means of communication, or yet another online account. In… Read More "Why cybercriminals want to break into your email account"
Nissan has disclosed that current and former employees may have had sensitive personal data stolen, including Social Security numbers, banking details and tax records, after attackers exploited a zero-day flaw in Oracle’s PeopleSoft software. The carmaker said in a breach… Read More "Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day"
Google’s top privacy and security staff have warned that plans in Europe, designed to get it to open up its search data and Android operating system to competitors, could lead to people’s search queries being hacked and an increase in… Read More "Top Google Security Staff Warn Search Data Could Be Hacked if EU Rules Change"
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data 22 May 2026 • , 5 min. read As the FIFA World Cup 2026™ in the United States, Canada, and… Read More "Scams target soccer fans with fake World Cup tickets, merchandise"
Most cybersecurity professionals have higher confidence in CISOs if they have experienced a major cyber-attack or cybersecurity incident, an industry poll has revealed. Published by cybersecurity certification body ISC2, the research asked 796 people working in cybersecurity for their views… Read More "Cybersecurity Staff Prefer CISOs With Real Attack Response Experience"
Hundreds of contractors working on a project for Meta were instructed to pose as minors online and probe how competitor chatbots responded to prompts involving suicide, sex, eating disorders, and other high-risk subjects, according to internal documents and five people… Read More "Meta Contractors Posed as Teens to Prompt Rival Chatbots About Suicide, Sex, and Drugs"
Industrial giants Siemens, Schneider Electric, and Rockwell Automation have published July 2026 Patch Tuesday advisories to inform customers about vulnerabilities found in their ICS products. Siemens published nine new advisories, including six that cover critical vulnerabilities (based on CVSS score).… Read More "ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell"
The Hacker NewsJul 15, 2026Web Security / Supply Chain Security A single approved marketing tag can quietly load fourth-party code your security team has never seen, granting full access to your forms, customer data, and checkout pages. This on-demand webinar… Read More "Closing the Approval Gap in AI-Era Ad Tech"
Initially the attackers released new package versions with two malicious scripts that get executed at install time using a preinstall hook in the configuration script. The scripts also execute platform-specific binaries for Linux, macOS, and Windows embedded in an obfuscated… Read More "NPM ecosystem hit with two new supply chain compromises"
