CybersecurityUpdate

Threat actors have seized on a critical vulnerability in Fortinet's endpoint management software. They use it to push credential-stealing malware straight to thousands of cor...

Pentagon’s Decade of Warnings on Phone Tracking Ignored as Adversaries Now Target Troops in War Zones

The U.S. military spent years watching adversaries circle closer. Warnings piled up. Demonstrations showed exactly how commercial data could expose troops. Yet action lagged....

IBM and Red Hat Commit $5 Billion to Open Source Security Over 10 Years

IBM and Red Hat have announced a five-billion-dollar commitment over the next decade aimed at strengthening security across open source software projects and the broader supply...

Websites Can Now Read Your SSD Activity Through the Browser

Researchers have uncovered a browser-based technique that lets websites infer what other tabs a user has open and which applications run on their device. All it takes is some...

PHP’s Supply Chain Under Siege: How Packagist Fights Back Against Account Takeovers and Stealthy Malware

Attacks keep coming. In the past weeks alone, attackers seized GitHub accounts and stolen tokens to push malicious tags on popular PHP packages. The incidents hit hard. Larav...

Malicious npm Package ua-parser-js2 Steals SSH Keys and Credentials via Typosquatting

A malicious npm package discovered in the public registry managed to steal sensitive files from developer machines by disguising itself as a seemingly harmless utility. Security...

CrowdStrike Dismantles Glassworm Botnet in Coordinated Strike on Developer Supply Chain Threats

Software developers have become prime targets. Not as an afterthought. As the main objective.On May 26, 2026, at precisely 14:00 UTC, the CrowdStrike Counter Adversary...

How CrowdStrike and Google Dismantled the Persistent Glassworm Botnet Targeting Software Developers

On a Monday in late May 2026, security teams at CrowdStrike, Google and the Shadowserver Foundation struck together. They severed all four command-and-control channels of a b...

Apple’s Mathematical Armor: Formal Proofs Shield Post-Quantum Code From Silent Flaws

Apple has spent years bracing its devices for quantum computers that don't yet exist. The company didn't stop at swapping in new algorithms. It built a system of mathematical...

GTA 6 Hype Fuels Surge in Fake Betas, Pre-Order Traps and Stealthy Malware

Rockstar Games set the date. November 19, 2026. Grand Theft Auto 6 arrives on PlayStation 5 and Xbox Series consoles. No PC version at launch. No public beta test announced....

Apple Lifts the Veil on Months-Old Security Fixes Across iOS, macOS and Older Devices

Apple has quietly filled in the blanks on security vulnerabilities fixed in operating-system updates released weeks and months ago. The company updated its public security re...

7-Eleven Breach Exposes Franchise Ambitions of 185,000 as ShinyHunters Publishes Files

Convenience store giant 7-Eleven confirmed a data breach discovered on April 8, 2026. Hackers accessed systems holding franchisee documents. The incident has now been tied to...

Ghost CMS Breach Exposes 700 Sites to ClickFix Malware via Unpatched SQL Flaw

Threat actors have seized control of more than 700 websites powered by Ghost CMS. They did so by exploiting a critical SQL injection vulnerability patched months earlier. The...

Spanish Court Rejects LaLiga Fines Against NordVPN in Pivotal Piracy Blocking Dispute

NordVPN just scored a notable courtroom victory in Spain. A commercial court in Córdoba turned away LaLiga's push for coercive fines. The May 19, 2026, decision recognizes re...

The Shadow Brokers Puzzle: Why Some Hackers Vanish Without a Trace

Countless breaches leave investigators staring at empty logs. No fingerprints. No clear path back to the actors. And no arrests, even years later. The Shadow Brokers...

Subscribe for Updates

CybersecurityUpdate Newsletter

The CybersecurityUpdate Email Newsletter is your essential source for the latest in cybersecurity news, threat intelligence, and risk management strategies. Perfect for IT security professionals and business leaders focused on protecting their organizations.

CybersecurityUpdate

Ready to get started?