BetaIT-Hub is in early access — your feedback helps us improve. Use the chat or email [email protected]

Latest
How AI is Rewriting the Zero-Day Playbook for Preemptive SecurityRapid7 · just nowCheck Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)Rapid7 · 30m agovBulletin fixes critical pre-auth RCE flaw with public exploitBleepingComputer · 54m agoPhantomEnigma Infects Organizations with Malware via Hijacked Government WebsitesHackRead · 1h agoShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 LeakHackRead · 2h agoAembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent InteroperabilityHackRead · 3h agoBugs in Hugging Face Diffusers Bypass Custom Code SafeguardInfosecurity Magazine · 3h agoTengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its ProcessThe Hacker News · 4h agoAI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/schedInfosecurity Magazine · 4h ago24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before LoginThe Hacker News · 4h agoIs Your SSO Protected Against Modern Credential Attacks?BleepingComputer · 5h agoJFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face BreachThe Hacker News · 5h agoFrom Payments to Portfolios: How Financial Super Apps Rewrite Economics of Global InvestingHackRead · 5h agoPhishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion TechniquesInfosecurity Magazine · 6h agoThe Next Evolution of MDR: Preemptive Defense and Agentic InvestigationRapid7 · 6h agoHow AI is Rewriting the Zero-Day Playbook for Preemptive SecurityRapid7 · just nowCheck Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)Rapid7 · 30m agovBulletin fixes critical pre-auth RCE flaw with public exploitBleepingComputer · 54m agoPhantomEnigma Infects Organizations with Malware via Hijacked Government WebsitesHackRead · 1h agoShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 LeakHackRead · 2h agoAembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent InteroperabilityHackRead · 3h agoBugs in Hugging Face Diffusers Bypass Custom Code SafeguardInfosecurity Magazine · 3h agoTengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its ProcessThe Hacker News · 4h agoAI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/schedInfosecurity Magazine · 4h ago24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before LoginThe Hacker News · 4h agoIs Your SSO Protected Against Modern Credential Attacks?BleepingComputer · 5h agoJFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face BreachThe Hacker News · 5h agoFrom Payments to Portfolios: How Financial Super Apps Rewrite Economics of Global InvestingHackRead · 5h agoPhishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion TechniquesInfosecurity Magazine · 6h agoThe Next Evolution of MDR: Preemptive Defense and Agentic InvestigationRapid7 · 6h ago

Security & IT News

Live

Real-time news from 13+ trusted sources — BleepingComputer, The Hacker News, Krebs on Security, Dark Reading & more.

772 results in Breach

🔴 BreachThe Hacker News·46d ago
ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities hardest. Google's Mandiant attributes it to the group it tracks as UNC6240, and dates the activity between May 27 and June 9. Oracle did not publish its advisory until June 10, so the bug was a

🔴 BreachThe Hacker News·47d ago
New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be driven to run attacker-controlled code or hand over sensitive data through ordinary-looking inputs. Imperva buried instructions inside shared contacts, vCards, and location pins that the agent executed without the victim ever seeing them. Varonis built a test agent on