News that matters, without the noise.

The SOC Skill That Transfers Everywhere – Free MYDFIR Wazuh Challenge

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised

USN-8656-1: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the

Someone targeted security researchers using a fake crypto conference as a lure

A hacker pretending to work for a leading cryptocurrency news website targeted several cybersecurity professionals using Google Docs

China’s ‘SilkParasite’ espionage operation targeting Central Asia with AI-assisted malware

Suspected military-grade hackers based in China used artificial intelligence to develop malware in a campaign to penetrate Central

China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?

This week on “Uncanny Valley,” Andy Greenberg discusses sitting in on a war game simulating a cyberattack from

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out

[Control Systems] Johnson Controls security advisory (AV26-837)

<article data-history-node-id="8135" about="/en/alerts-advisories/control-systems-johnson-controls-security-advisory-av26-837" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

n8n security advisory (AV26-836)

<article data-history-node-id="8134" about="/en/alerts-advisories/n8n-security-advisory-av26-836" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do.

RHSA-2026:57641: Moderate: mod_md security update

An update for mod_md is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat

RHSA-2026:57633: Important: postgresql security update

An update for postgresql is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.