Security JournalThreats, systems & the work of defence
Reading index Source-attributed reporting and analysis on cybersecurity, vulnerabilities, identity and digital defence.
100 articles · Original source datesCursor users have been targeted with malicious versions of Anthropic’s Claude Code extension in a new supply chain attack. The incident occurred on October 29 and involved versions 2.1.312 and 2.1.313 of the…
SecurityWeek · 2 min readUkraine and Russia both said on Sunday night that hackers had compromised their emergency alert apps and used them to send fake warnings about air raids and other attacks, including nuclear threats. The BBC…
Security Affairs · 5 min readThe FBI has formally blamed North Korean state-sponsored hackers for the record-breaking Binance cryptocurrency heist and is asking the crypto industry to help stop the stolen funds from being laundered. The…
SecurityWeek · 3 min readBlockchain analytics firm Chainalysis says it was the target of a cybersecurity incident. A threat actor accessed its systems and internal tools and stole some non-sensitive customer data.
Security Affairs · 2 min readIvanti has released patches for two more Connect Secure (ICS) zero-days that attackers chained with a vulnerability the company disclosed last month. The newly patched bugs are CVE-2026-111357 and…
SecurityWeek · 2 min readThe FBI has named North Korea as the party behind the theft of more than $6 billion in virtual assets from the crypto exchange Binance, on or about October 29, 2026. The bureau published its findings in a…
Security Affairs · 4 min readA specially manipulated SMS message is enough to crash Android’s phone service, interrupt ongoing calls, and temporarily render the smartphone unusable. The attack requires no interaction from the victim and…
Security Affairs · 5 min readThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog :
Security Affairs · 3 min readA Syrian man tied to the Syrian Electronic Army ( SEA ) has received a 42-month prison sentence in the US, more than 12 years after he was first charged. Ahmad Umar Agha, who used the online handle Th3Pr0, was…
SecurityWeek · 2 min readDrupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539 , in its Commerce Core module. The vulnerability is caused by missing authorization checks.
Security Affairs · 1 min readCheck Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI…
Security Affairs · 6 min readThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) added GitLab and Cisco vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog :
Security Affairs · 2 min readNo matches on this page. Change the filter or browse another page.
