Security News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 67BleepingComputer · 182CERT Polska · 78Cisco Talos · 49CrowdStrike · 35Dark Reading · 76DataBreaches.net · 35Krebs on Security · 14Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 70SANS Internet Storm Center · 57Security.NL · 315SecurityWeek · 87SentinelOne · 33The Cyber Express · 70TheCyberThrone · 60The Hacker News · 314The Record · 48Unit 42 · 48
ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Read at the source
Cronos blockchain restarts after $74 million Tectonic exploit
The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million. [...]
Read at the source
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)
One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to provide "free" LLM backends. It then received a real coding-agent session &#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x94; history, filesystem output, working paths, and the agent&#;x26;#;39;s local tool manifest. The honeypot did not request or cause any tool execution; what the request exposed is what a malicious operator in that position could do.
Read at the source
Microsoft warns of TerminalFix attacks deploying reverse tunnels
A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into running malicious PowerShell commands in Windows Terminal. [...]
Read at the source
North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed seeking job opportunities beyond the information technology (IT) sector, with recent investigations identifying suspected workers employed in sales and marketing and the medical profession. The ongoing insider threat is part of what has been described as the IT worker scheme,
Read at the source
Massive Microsoft 365 outage causes auth issues, service failures
Microsoft is investigating a widespread service issue causing authentication issues, email delays and failures, and various other issues for Exchange Online customers. [...]
Read at the source
OpenAI confirms ChatGPT outage as users report errors
ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tasks. [...]
Read at the source
My CISSP Journey Part 4 – What My Wrong Answers Taught Me
During my CISSP preparation, I worked through nearly 6,000 practice questions. With that many questions, getting some of them wrong is inevitable. But somewhere along the way, I started looking…
Read at the source
911-920 / 1654 news items shown