Microsoft patches actively exploited Office zero-day vulnerability

Canva among ~100 ShinyHunters credential-theft targets • The Register

Cloudflare misconfiguration behind recent BGP route leak

Malicious VS Code AI Extensions Harvesting Code from 1.5M Devs

New Phishing Attack Leverages Vercel Hosting Platform to Deliver a Remote Access Tool

KONNI Adopts AI to Generate PowerShell Backdoors - Check Point Research

MacSync macOS Infostealer Leverage ClickFix-style Attack to Trick Users Pasting a Single Terminal Command

Fortinet warns of active FortiCloud SSO bypass affecting updated devices

Was Nike hacked? Attackers threaten to leak apparel giants’ data

FBI Accessed Windows Laptops After Microsoft Shared BitLocker Recovery Keys – Hackread – Cybersecurity News, Data Breaches, AI, and More

The Skeleton Key: How Attackers Weaponize Trusted RMM Tools for Backdoor Access

Okta SSO accounts targeted in vishing-based data theft attacks

SmarterMail auth bypass flaw now exploited to hijack admin accounts

Critical Appsmith Flaw Enables Account Takeovers - Infosecurity Magazine

Ancient telnet bug happily hands out root to attackers • The Register

Energy sector orgs targeted with AiTM phishing campaign - Help Net Security

Under Armour says it's 'aware' of data breach claims after 72M customer records were posted online | TechCrunch

Osiris: New Ransomware, Experienced Attackers?

PyPI Package Impersonates SymPy to Deliver Cryptomining Malware

Oracle's First 2026 CPU Delivers 337 New Security Patches - SecurityWeek