Global Cyber Attacks

The incidents, breaches and state campaigns making headlines.

189stories this week

33today

the last seven days

Most fromThe Record, BleepingComputer, The Hacker News, SecurityWeek

In the news hereMicrosoft18 ConnectWise14 Google13 OpenAI8 SafePay2 APT28 (Fancy Bear)2 Qilin1 RansomHub1

Exploited
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

September 23, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Identity & Access Management, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issuing access tokens to applications. F5 disclosed it in an advisory on September…
The Hacker News
Exploited
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

September 23, 2026

Enterprise & Cloud Security, Global Cyber Attacks, Global Cyber Security, Microsoft Security, Nation-State Threats, Zero-Day Vulnerabilities, Threat Intelligence

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break…
The Hacker News
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

September 23, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Threat Intelligence

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said. The risk applies when an app puts values an attacker controls, such as text read from the request URL, into the image. Vercel, which develops…
The Hacker News
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

September 23, 2026

Data Breaches, Global Cyber Attacks, Global Cyber Security, Ransomware

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the agency. “We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI…
The Hacker News

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Global Cyber Attacks

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

Stay ahead in Cyber Security.