Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY.
The post Massive Password Spray Campaign Targeting Azure CLI appeared first on SecurityWeek.
Google Patches 382 Chrome Vulnerabilities
Fifteen of the newly patched flaws have been rated ‘critical’ and 67 have been rated ‘high severity’.
The post Google Patches 382 Chrome Vulnerabilities appeared first on SecurityWeek.
BlueHammer Vulnerability Exploited in Ransomware Attacks
The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released.
The post BlueHammer Vulnerability Exploited in Ransomware Attacks appeared first on SecurityWeek.
Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks
Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors.
The post Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks appeared first on SecurityWeek.
Aflac Japan Data Breach Impacts 4.38 Million
Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25.
The post Aflac Japan Data Breach Impacts 4.38 Million appeared first on SecurityWeek.
Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat
Chris Thompson’s journey took him from hacking game controls as a teenager to founding IBM’s X-Force Red team.
The post Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat appeared first on SecurityWeek.
Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History
The ruling was made in the case of a bank robber whose identity was discovered through a geofence warrant.
The post Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History appeared first on SecurityWeek.
Exploitation of Recent Oracle E-Business Suite Vulnerability Begins
The critical-severity defect allows unauthenticated attackers to take over the E-Business Suite’s Payments product.
The post Exploitation of Recent Oracle E-Business Suite Vulnerability Begins appeared first on SecurityWeek.
The AI Token Costs That Can Break Cybersecurity
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
The post The AI Token Costs That Can Break Cybersecurity appeared first on SecurityWeek.
Nissan Employee Data Breached in Oracle PeopleSoft Hack
Only a handful of the 100 organizations targeted in the PeopleSoft campaign have been confirmed.
The post Nissan Employee Data Breached in Oracle PeopleSoft Hack appeared first on SecurityWeek.
