MyCyberWay https://validator.w3.org/feed/docs/rss2.html RSAC 2026: AI Dominates, But Community Remains Key to Security Aggregator Home Trump wants to take a battle axe to CISA again and slash $707M from budget Inconsistent Privacy Labels Don’t Tell Users What They Are Getting LinkedIn secretely scans for 6,000+ Chrome extensions, collects data Hims & Hers warns of data breach after Zendesk support ticket breach China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing Apple Breaks Precedent, Patches DarkSword for iOS 18 Die Linke German political party confirms data stolen by Qilin ransomware Hybrid work, expanded risk: what needs to change Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers Blast Radius of TeamPCP Attacks Expands Amid Hacker Infighting Evolution of Ransomware: Multi-Extortion Ransomware Attacks Sophos Gartner Peer Insights MDR North Korea–linked hackers drain $285M from Drift in sophisticated attack Picking Up ‘Skull Vibrations’? Could Be XR Headset Authentication CrystalX RAT: new MaaS malware combines spyware, stealer, and remote access Claude Source Code Leak Highlights Big Supply Chain Missteps Chainguard Unveils Factory 2.0 to Automate Hardening the Software Supply Chain TrueConf Zero-Day Exploited in Asian Government Attacks In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware Critical ShareFile Flaws Lead to Unauthenticated RCE CrowdStrike Next-Gen SIEM Can Now Ingest Microsoft Defender Telemetry Microsoft still working to fix Exchange Online mailbox access issues UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture Claude Code leak used to push infostealer malware on GitHub Mobile Attack Surface Expands as Enterprises Lose Control Not Toying Around: Hasbro Attack May Take ‘Weeks’ to Remediate React2Shell Exploited in Large-Scale Credential Harvesting Campaign T-Mobile Sets the Record Straight on Latest Data Breach Filing Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials North Korean Hackers Drain $285 Million From Drift in 10 Seconds Security Bosses Are All-In on AI. Here’s Why Drift loses $280 million as hackers seize Security Council powers Hasbro hit by cyberattack, investigates possible data breach Critical Vulnerability in Claude Code Emerges Days After Source Leak They thought they were downloading Claude Code source. They got a nasty dose of malware instead Cisco fixed critical and high-severity flaws Apple Rolls Out DarkSword Exploit Protection to More Devices Threat actor abuse of AI accelerates from tool to cyberattack surface New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images Man admits to locking thousands of Windows devices in extortion plot Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs Geopolitics, AI, and Cybersecurity: Insights From RSAC 2026 Microsoft now force upgrades unmanaged Windows 11 24H2 PCs Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies CERT-EU: European Commission hack exposes data of 30 EU entities