Morning Brief — Archive
101 days archived.
Wednesday, November 4, 2026
Russian APT29 Hackers Turn Trusted Websites Into Traps to Compromise iPhone and Android Users
13 trending stories · 825 new CVEs
Tuesday, November 3, 2026
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
11 trending stories · 406 new CVEs
Monday, November 2, 2026
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
9 trending stories · 186 new CVEs
Sunday, November 1, 2026
Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities
18 trending stories · 73 new CVEs
Saturday, October 31, 2026
Apple Warns iPhone Users in 99 Countries of Sophisticated Mercenary Spyware Attacks
20 trending stories · 558 new CVEs
Friday, October 30, 2026
Apple Is Entering Its Slop Era
20 trending stories · 650 new CVEs
Thursday, October 29, 2026
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
20 trending stories · 723 new CVEs
Wednesday, October 28, 2026
Hackers Compromise Camera Management Software to Deploy Malware on Windows Computers
14 trending stories · 728 new CVEs
Tuesday, October 27, 2026
Microsoft releases out-of-band Windows fixes with certificate updates
11 trending stories · 792 new CVEs
Monday, October 26, 2026
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
10 trending stories · 135 new CVEs
Sunday, October 25, 2026
Microsoft Teams to Use AI for Detecting Phishing Attacks Using Teams Conversations
13 trending stories · 79 new CVEs
Saturday, October 24, 2026
Palo Alto Confirms PHP RCE Vulnerabilities Impact PAN-OS and Multiple Network Products
18 trending stories · 469 new CVEs
Friday, October 23, 2026
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
18 trending stories · 1997 new CVEs
Thursday, October 22, 2026
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
20 trending stories · 1997 new CVEs
Wednesday, October 21, 2026
Microsoft Offers $40,000 for Complete Azure Vulnerability Reports, Just $4,000 for Incomplete Ones
13 trending stories · 1997 new CVEs
Tuesday, October 20, 2026
Researchers Infiltrate Microsoft Tech Support Scam Operation
8 trending stories · 576 new CVEs
Monday, October 19, 2026
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
7 trending stories · 585 new CVEs
Sunday, October 18, 2026
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
16 trending stories · 78 new CVEs
Saturday, October 17, 2026
Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts
20 trending stories · 404 new CVEs
Friday, October 16, 2026
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
20 trending stories · 618 new CVEs
Thursday, October 15, 2026
Multiple Active Directory Vulnerabilities Let Attackers Bypass Security Feature Remotely
16 trending stories · 804 new CVEs
Wednesday, October 14, 2026
Windows SmartScreen Vulnerability Enables Privilege Escalation Attacks
13 trending stories · 2284 new CVEs
Tuesday, October 13, 2026
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
5 trending stories · 693 new CVEs
Monday, October 12, 2026
Bring Your Own Agent: Your Employees' Assistants Are Already Logged In
7 trending stories · 225 new CVEs
Sunday, October 11, 2026
Why Apple Says Your Mac Is at Risk From AI | Threat Wire
10 trending stories · 397 new CVEs
Saturday, October 10, 2026
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
18 trending stories · 396 new CVEs
Friday, October 9, 2026
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
19 trending stories · 444 new CVEs
Thursday, October 8, 2026
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
19 trending stories · 373 new CVEs
Wednesday, October 7, 2026
Hackers obtain counterfeit TLS certificates for Google and other large services
20 trending stories · 1006 new CVEs
Tuesday, October 6, 2026
Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports
11 trending stories · 408 new CVEs
Monday, October 5, 2026
CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks
12 trending stories · 123 new CVEs
Sunday, October 4, 2026
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
13 trending stories · 54 new CVEs
Saturday, October 3, 2026
Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel
19 trending stories · 407 new CVEs
Friday, October 2, 2026
Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel
20 trending stories · 395 new CVEs
Thursday, October 1, 2026
Microsoft catches hackers exploiting Zimbra bug before disclosure
20 trending stories · 624 new CVEs
Wednesday, September 30, 2026
RATHat Android Malware Uses Gemini AI to Control Phones Outside Normal App Permissions
20 trending stories · 649 new CVEs
Tuesday, September 29, 2026
Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)
13 trending stories · 382 new CVEs
Monday, September 28, 2026
Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)
13 trending stories · 173 new CVEs
Sunday, September 27, 2026
New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory
12 trending stories · 224 new CVEs
Saturday, September 26, 2026
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
19 trending stories · 725 new CVEs
Friday, September 25, 2026
Podcast: OpenAI Admits AI is Killing the Internet
20 trending stories · 287 new CVEs
Thursday, September 24, 2026
Managed or Modified: Choose How Huntress Hardens Microsoft 365
20 trending stories · 421 new CVEs
Wednesday, September 23, 2026
OAuth Token Theft Through Microsoft's Front Door | Huntress
18 trending stories · 516 new CVEs
Tuesday, September 22, 2026
NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
12 trending stories · 313 new CVEs
Monday, September 21, 2026
Google Fined €403 Million Over GDPR Violations Tied to Location Data
7 trending stories · 96 new CVEs
Sunday, September 20, 2026
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
13 trending stories · 74 new CVEs
Saturday, September 19, 2026
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
20 trending stories · 461 new CVEs
Friday, September 18, 2026
Android Apps Can Now Check If Your Phone Is Missing Critical Security Patches
20 trending stories · 1118 new CVEs
Thursday, September 17, 2026
Hacked Thai College Website Abused to Redirect Google Searchers to Illegal Online Casino
20 trending stories · 764 new CVEs
Wednesday, September 16, 2026
GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds
20 trending stories · 1514 new CVEs
Tuesday, September 15, 2026
Cisco email security boxes can be rooted by... an email
20 trending stories · 726 new CVEs
Monday, September 14, 2026
Perfect-10 GitLab bug under attack days after patch lands
10 trending stories · 268 new CVEs
Sunday, September 13, 2026
China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
12 trending stories · 75 new CVEs
Saturday, September 12, 2026
US Government Accuses Chinese AI Firms of Distilling Frontier Models
20 trending stories · 676 new CVEs
Friday, September 11, 2026
US Government Accuses Chinese AI Firms of Distilling Frontier Models
20 trending stories · 373 new CVEs
Thursday, September 10, 2026
Serial Microsoft 0-day hunter drops yet another Defender exploit
19 trending stories · 366 new CVEs
Wednesday, September 9, 2026
Microsoft Expands Windows Family Safety With Built-In Age Verification and Parental Controls
15 trending stories · 1892 new CVEs
Tuesday, September 8, 2026
BigBear phishing crew nets thousands of Microsoft 365 credentials
11 trending stories · 247 new CVEs
Monday, September 7, 2026
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
7 trending stories · 149 new CVEs
Sunday, September 6, 2026
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
12 trending stories · 93 new CVEs
Saturday, September 5, 2026
Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating
18 trending stories · 563 new CVEs
Friday, September 4, 2026
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
20 trending stories · 434 new CVEs
Thursday, September 3, 2026
Microsoft to Expand Memory Integrity Protection Across Windows Devices
20 trending stories · 246 new CVEs
Wednesday, September 2, 2026
Threat Gang 'Springs' Vishing Attacks on Microsoft Teams Users
15 trending stories · 505 new CVEs
Tuesday, September 1, 2026
Hackers Weaponize Microsoft Teams Help Desk Calls for Malware and Network Lateral Movement
17 trending stories · 324 new CVEs
Monday, August 31, 2026
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
9 trending stories · 188 new CVEs
Sunday, August 30, 2026
Google's Calling Lake Ontario 'Lake America' Now
8 trending stories · 61 new CVEs
Saturday, August 29, 2026
Microsoft Teams Has Become a Haven for Scammers in China
17 trending stories · 351 new CVEs
Friday, August 28, 2026
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
19 trending stories · 480 new CVEs
Thursday, August 27, 2026
CISA Warns of Microsoft SQL Server RCE Vulnerability Exploited in Attacks
20 trending stories · 280 new CVEs
Wednesday, August 26, 2026
Mirage2FA Phishing Kit Bypasses MFA to Hijack Microsoft 365 Sessions, Targeting 3,500+ Organizations
14 trending stories · 706 new CVEs
Tuesday, August 25, 2026
EvilTokens Doesn’t Just Steal Microsoft Sessions—Its AI Tells Attackers Who to Scam Next
9 trending stories · 344 new CVEs
Monday, August 24, 2026
Hackers Infect Android Car Screens Through Their Built-In Software Update System
8 trending stories · 67 new CVEs
Sunday, August 23, 2026
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
13 trending stories · 245 new CVEs
Saturday, August 22, 2026
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
18 trending stories · 291 new CVEs
Friday, August 21, 2026
Grok exfiltrates user data when malicious instructions are encrypted
20 trending stories · 481 new CVEs
Thursday, August 20, 2026
Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)
20 trending stories · 634 new CVEs
Wednesday, August 19, 2026
Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)
20 trending stories · 1481 new CVEs
Tuesday, August 18, 2026
Windows 11 File Explorer Gets Faster, Customizable Right-Click Menu With App Extension Controls
15 trending stories · 377 new CVEs
Monday, August 17, 2026
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
10 trending stories · 77 new CVEs
Sunday, August 16, 2026
Vulnerability giving attackers full control of Macs is under active exploitation
11 trending stories · 252 new CVEs
Saturday, August 15, 2026
VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI
20 trending stories · 918 new CVEs
Friday, August 14, 2026
Download More RAM Attack Bypasses Windows VBS and Disables Defender Through Memory Aliasing
20 trending stories · 612 new CVEs
Thursday, August 13, 2026
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
20 trending stories · 393 new CVEs
Wednesday, August 12, 2026
Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
20 trending stories · 983 new CVEs
Tuesday, August 11, 2026
Multiple ClamAV Vulnerabilities Allow Remote Attacker to Trigger DoS Condition
9 trending stories · 769 new CVEs
Monday, August 10, 2026
Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage
6 trending stories · 99 new CVEs
Sunday, August 9, 2026
Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default
14 trending stories · 96 new CVEs
Saturday, August 8, 2026
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
20 trending stories · 186 new CVEs
Friday, August 7, 2026
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
19 trending stories · 513 new CVEs
Thursday, August 6, 2026
Flaws in Google APK for Python Unlock Agent-to-Agent Attack
17 trending stories · 389 new CVEs
Wednesday, August 5, 2026
1-Click RCE Flaw in Cursor, VS Code, and Google Antigravity Exposes 50M Developers to Cyberattacks
12 trending stories · 285 new CVEs
Tuesday, August 4, 2026
Google dev kit spurs first-ever agent-on-agent violence
12 trending stories · 231 new CVEs
Monday, August 3, 2026
Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says
9 trending stories · 92 new CVEs
Sunday, August 2, 2026
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
13 trending stories · 176 new CVEs
Saturday, August 1, 2026
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
20 trending stories · 213 new CVEs
Friday, July 31, 2026
Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined
20 trending stories · 293 new CVEs
Thursday, July 30, 2026
Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
13 trending stories · 662 new CVEs
Wednesday, July 29, 2026
Apple’s iMessage Scanning Flagged a Video of My Friend's Dog as Nudity
5 trending stories · 300 new CVEs · 1 KEV
Tuesday, July 28, 2026
Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost
9 trending stories · 452 new CVEs
Monday, July 27, 2026
Google goes it alone with a new cybercrime crew taxonomy
1 trending story · 68 new CVEs · 1 KEV