SecurityAzure Tenant Data Theft Hits Fortune 500 Firms
A threat actor is selling millions of records allegedly stolen from Azure tenants of major companies.
Security
From zero-day disclosures to routine patch Tuesdays, this is Xploitwire's feed on the vulnerabilities and advisories that security teams actually need to act on — what's exploitable, what's patched, and what to prioritize first.
Security
SecurityThreema DDoS attacks expose mitigation limits
Swiss messaging firm Threema faced sustained DDoS attacks this week, with changing tactics challenging defenses.
SecurityWhy 2,500-Org Breach Wasn't What It Seemed
SOCRadar says most orgs hit in LiteLLM attack were earlier Trivy victims, not LiteLLM.
SecuritySalesforce and ServiceNow attacks expose new API risks
Researchers say ‘City-Forum’ campaign targets Salesforce and ServiceNow, possibly tied to ShinyHunters.
SecurityAkira exploits Safe Mode to bypass EDR defenses
Akira ransomware used Windows Safe Mode to disable endpoint defenses, revealing a growing evasion trend.
SecurityMac screen sharing flaw is being exploited to mine crypto
A high-severity macOS bug is under attack, with hackers placing Monero miners via port 5900.
SecuritySecurity Roundup: Pentagon AI Deal Draws Fire
A weekly summary of key cybersecurity events, from a Boeing 737 hack demo to refrigeration flaws and Rapid7 layoffs.
SecurityScottish prosecutors' staff data at risk in supplier breach
Scotland's prosecution service warns 300 staff their personal data may be exposed in a cyberattack on a third-party supplier.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
SecurityOracle offers free database security tool
Oracle's new Database Security Central tool is free until February 2027, arriving amid rising database attacks.
SecurityCybersecurity backlogs signal an operations failure
A growing backlog of unresolved vulnerabilities is not a security problem but an organizational failure of ownership, capacity, and decision-making.
SecurityApple Alerts Users of Spyware Targeting
New batch of Apple threat notifications flags mercenary spyware attacks, urging users to take them seriously.
SecurityFlock tool promises oversight, but how it works stays murky
Flock says Audit Assistance helps curb police misuse, yet details on how it detects abuse remain unclear.
SecurityCommerce Flaw Hit in Hours
Adobe Commerce bug CVE-2026-71362 was exploited within hours of disclosure; Sansec reports active attacks.
Security21 Deals Reshape Cybersecurity's July 2026
Major acquisitions by Bank of America, CrowdStrike, and Cyera signal continued consolidation in cybersecurity.
SecuritySCCM Attack Chain Exposes Cost of Weak Trust
XM Cyber researchers chain four SCCM flaws into SYSTEM access for $58, with partial fixes leaving a path open.
SecurityFortinet's Patch Wave Targets Authentication Gaps
Fortinet resolves eight flaws, including high-severity authentication bugs in FortiWeb and FortiManager.
SecurityGoogle Doc Credentials Leak Serves as a Cautionary Tale
A developer's habit of storing passwords in a shared Google Doc led to a search-indexed exposure of staging credentials.
SecurityUS Enlists Private Firms in Cybercrime Crackdown
A presidential memo lets vetted US companies run offensive cyber ops against foreign crime rings.
SecurityUnauthenticated SAP Flaw Earns Maximum CVSS Score
SAP ships urgent patches for Commerce Cloud and other critical flaws rated up to 10.0.