🚨 CRITICAL ZERO-DAY: Palo Alto Networks warns of an unpatched, actively exploited RCE vulnerability (CVE-2026-0300) in PAN-OS firewalls. The flaw allows root access via the User-ID portal. Mitigate immediately! #CyberSecurity #ZeroDay #PANOS

🚨 BREAKING: EdTech giant Instructure confirms massive data breach of its Canvas LMS. ShinyHunters claims to have stolen data of 275 MILLION users from 9,000+ schools, threatening to leak private messages. 🏫 #DataBreach #ShinyHunters #Canvas #EdTech

Orange Cyberdefense has been authorized as a CVE Numbering Authority (CNA)! 🛡️ This allows the firm to assign CVE IDs for vulnerabilities found in its own products and by its research teams, speeding up coordinated disclosure. #CyberSecurity #CVE #CNA

Accenture invests in AI-powered offensive security firm XBOW. 🤖 The partnership aims to bring autonomous, continuous penetration testing to clients, fighting AI-driven threats with AI-driven defense. #CyberSecurity #AI #OffensiveSecurity #Accenture

🛰️ The European Space Agency is hosting a workshop to build standardized, off-the-shelf cybersecurity products for space systems. The goal is to defend critical infrastructure against growing threats and comply with new regulations. #SpaceSecurity #ESA #Cyber

Major cyberattack hits IBM's Italian subsidiary, Sistemi Informativi, a key IT provider for public agencies. The China-linked APT group Salt Typhoon is the suspected culprit, highlighting severe supply chain risks. #CyberAttack #SaltTyphoon #IBM #Italy

📢 CRITICAL: A dozen sandbox escape vulnerabilities found in the popular 'vm2' Node.js library. Flaws (CVSS 9.8) allow for full host takeover. If you use vm2, update to version 3.11.2 immediately! #NodeJS #CyberSecurity #Vulnerability #PatchNow

🚨 Malicious PyPI packages found delivering 'ZiChatBot' malware. The campaign, linked to the OceanLotus APT, uses the Zulip chat app's APIs for stealthy C2 communication. #SupplyChainAttack #PyPI #Malware #OceanLotus

🚨 New Mirai-based botnet 'xlabs_v1' hijacks IoT devices & Android TVs via exposed ADB ports (TCP/5555). The botnet is used for DDoS-for-hire services, targeting Minecraft servers. #Mirai #Botnet #DDoS #IoTSecurity

⚠️ Iranian APT MuddyWater targets orgs via Microsoft Teams, posing as a ransomware group. The real goal: espionage & data theft. Attackers trick users in screen-shares to steal credentials, bypassing MFA. #MuddyWater #CyberEspionage #ThreatIntel

New 'CloudZ' malware hijacks Microsoft Phone Link to steal SMS & OTPs directly from your PC! 📱💻 The attack bypasses phone security, making SMS-based MFA vulnerable. #Malware #CyberSecurity #MFA #Windows

🇨🇳 China-based APT 'Silver Fox' expands its campaign across Asia, using fake tax audit emails to target medical and financial firms. The group has evolved into a dual-purpose espionage & financial threat. 🦊 #APT #SilverFox #CyberEspionage

New report from Keeper Security: 89% of IT leaders are struggling with identity sprawl, a problem accelerated by AI. 72% can't detect credential misuse in real-time, creating major security gaps. 🔑 #IdentitySecurity #AI #CyberSecurity

⚠️ High-Severity Redis Flaw: A heap buffer overflow (CVE-2026-25243) in the RESTORE command could allow for RCE on Redis servers. Affects versions up to 8.6.3. Upgrade now or restrict access via ACLs! #Redis #CyberSecurity #Vulnerability

North Korean APT ScarCruft (APT37) targets gamers in a supply-chain attack, compromising a gaming site to distribute Android spyware. The 'BirdCall' backdoor spies on ethnic Koreans in China. 🕵️‍♂️ #APT37 #ScarCruft #CyberSecurity #Android

🚨 CRITICAL APACHE FLAW: A double-free bug (CVE-2026-23918) in Apache HTTP Server's http2 module allows for DoS and potential RCE. A PoC exploit exists. Upgrade to version 2.4.67 immediately! #Apache #CyberSecurity #Vulnerability #RCE

Cisco Talos uncovers UAT-8302, a China-nexus APT targeting governments in South America & Europe. The group uses a shared malware arsenal including NetDraft & CloudSorcerer, highlighting deep collaboration. #APT #ThreatIntel #CyberSecurity

🚨 CRITICAL ZERO-DAY: Palo Alto Networks warns of an unpatched, actively exploited RCE vulnerability (CVE-2026-0300) in PAN-OS firewalls. The flaw allows root access via the User-ID portal. Mitigate immediately! #CyberSecurity #ZeroDay #PANOS

⚠️ CISA & FBI warn of 'ShadowProxy' Phishing-as-a-Service that bypasses MFA! The platform uses adversary-in-the-middle (AiTM) attacks to steal session cookies for M365/Google accounts. Move to FIDO2 now! #PhaaS #MFA #Phishing #CISA

Cybersecurity vendor Trellix confirms a security breach involving unauthorized access to its source code. The company, formed from McAfee & FireEye, is investigating but says no code has been altered or exploited. 🛡️ #CyberSecurity #Breach #Trellix #SupplyChain

🚨 BREAKING: EdTech giant Instructure confirms massive data breach of its Canvas LMS. ShinyHunters claims to have stolen data of 275 MILLION users from 9,000+ schools, threatening to leak private messages. 🏫 #DataBreach #ShinyHunters #Canvas #EdTech

CISA launches 'CI Fortify,' a new initiative to strengthen U.S. critical infrastructure resilience. 🛡️ The guidance urges organizations to develop proactive isolation & recovery capabilities to maintain operations during a crisis. #CISA #CriticalInfrastructure #CyberSecurity

SANS Institute & SERC are partnering to launch a national training initiative to strengthen U.S. grid cybersecurity. ⚡ The program aims to bolster NERC CIP compliance and develop the critical infrastructure workforce. #CyberSecurity #CriticalInfrastructure #OTsecurity

🚨 ACTIVE EXPLOITATION! A critical RCE flaw (CVE-2026-29014, CVSS 9.8) in MetInfo CMS is being widely exploited. Unauthenticated attackers can gain full server control. Patch immediately! #CVE #RCE #CyberSecurity #Vulnerability

New 'CloudZ' malware hijacks Microsoft Phone Link to steal SMS & OTPs directly from your PC! 📱💻 The attack bypasses phone security, making SMS-based MFA vulnerable. #Malware #CyberSecurity #MFA #Windows

🚨 SUPPLY CHAIN ATTACK! Official DAEMON Tools installers have been trojanized since April 8. Signed with a valid cert, the malware deploys a backdoor called QUIC RAT in targeted attacks. #SupplyChain #Malware #CyberSecurity #DAEMONTools

🚨 CRITICAL ZERO-DAY 🚨 cPanel & WHM auth bypass (CVE-2026-41940, CVSS 9.8) exploited for months before patch! Unauthenticated attackers can get root access. 1.5M instances exposed. Patch NOW! #cPanel #ZeroDay #CVE #WebHosting

ShinyHunters gang exploits a breach at AI firm Anodot to attack Snowflake customers. The supply chain attack used stolen auth tokens to access cloud data, with Rockstar Games among the named victims. ☁️ #DataBreach #SupplyChain #Snowflake

IBM security executive Tom Parker is reportedly a leading contender to be the next Director of CISA. The administration is said to favor his extensive private-sector background. 🇺🇸 #CISA #CyberSecurity #GovTech #IBM

The NSW Government has downgraded the 'significant cyber incident' at its Treasury, confirming the insider threat is contained. A staff member faces criminal charges for the alleged data transfer. 🇦🇺 #InsiderThreat #CyberSecurity #NSW #GovAu

Florida Physician Specialists discloses a data breach from Nov 2025, exposing patient SSNs, financial, and medical data. A long delay in notification has prompted a legal investigation. 🏥 #DataBreach #Healthcare #HIPAA #PHI

Cybersecurity vendor Trellix confirms a security breach involving unauthorized access to its source code. The company, formed from McAfee & FireEye, is investigating but says no code has been altered or exploited. 🛡️ #CyberSecurity #Breach #Trellix #SupplyChain

🇯🇵 Japanese fintech MoneyForward admits to a GitHub breach caused by hardcoded secrets & accidental commit of customer data. Source code and 370 user records exposed. A cautionary tale for all developers! 🔐 #DevSecOps #DataBreach #GitHub #Fintech

🇳🇿 New ransomware group 'Mnt6' emerges, claiming an attack on NZ electrical contractor McKay. The company confirmed the January incident and has obtained a court injunction to block data leaks. ⚡ #Ransomware #Mnt6 #CyberAttack #NewZealand

A 2025 ransomware attack on Sandhills Medical Foundation has led to a class action probe. The breach by 'Inc Ransom' exposed data of 169,000 patients, with significant notification delays drawing legal fire. ⚕️ #Ransomware #Healthcare #DataBreach

Ameriprise Financial discloses its second data breach in 6 months, exposing personal & financial data of ~48,000 customers. The ShinyHunters group was allegedly involved. 🛡️ #DataBreach #Finance #Ameriprise #CyberSecurity

🚨 BREAKING: EdTech giant Instructure confirms massive data breach of its Canvas LMS. ShinyHunters claims to have stolen data of 275 MILLION users from 9,000+ schools, threatening to leak private messages. 🏫 #DataBreach #ShinyHunters #Canvas #EdTech

🍿 Ransomware turf war! Groups 0APT and KryBit hack each other, leaking admin panels & operational data. KryBit exposed 0APT for faking victims and running their infrastructure on an Android phone. 📱 #Ransomware #Infosec #Cybercrime

⚠️ Major npm supply chain attack! A malicious package, `@bitwarden/cli`, impersonates Bitwarden to steal cloud & CI/CD credentials and self-propagates. Attributed to TeamPCP. Check your dependencies now! #SupplyChain #npm #CyberAttack

Insider threat shock: A former ransomware negotiator, Angelo Martino, pleads guilty to conspiring with the BlackCat gang, feeding them client data to maximize ransoms. ⚖️ #BlackCat #Ransomware #InsiderThreat #CyberCrime

⚠️ Unit 42 uncovers 18+ malicious AI browser extensions disguised as productivity tools! These extensions act as RATs & infostealers, stealing your data, passwords, and even AI prompts. Stay safe and scrutinize permissions! #CyberSecurity #AI #Malware

Palo Alto Networks to acquire AI Gateway startup Portkey! 🚀 The move aims to secure the new attack surface of autonomous AI agents by integrating Portkey's control plane into the Prisma AIRS platform. #AI #CyberSecurity #Acquisition #PaloAlto

🚨 URGENT PATCH: A critical 9.8 CVSS auth bypass (CVE-2026-4670) is found in MOVEit Automation. Attacker could gain admin control. Given MOVEit's history, this is a major risk. Upgrade immediately! #MOVEit #CyberSecurity #Vulnerability #PatchNow

UK Cyber Survey reveals 43% of businesses breached last year, yet only 25% have an incident response plan. 📉 Phishing remains the top threat. Major gaps in supply chain and AI security readiness. #CyberSecurity #UK #GovUK #InfoSec #Risk

Microsoft reports QR code phishing ("quishing") attacks surged 146% in Q1 2026! 📈 Attackers use PDFs & CAPTCHAs to bypass security and steal credentials. Stay vigilant! 🛡️ #Phishing #Quishing #CyberSecurity #Microsoft #InfoSec

🚨 CRITICAL ZERO-DAY 🚨 cPanel & WHM auth bypass (CVE-2026-41940, CVSS 9.8) exploited for months before patch! Unauthenticated attackers can get root access. 1.5M instances exposed. Patch NOW! #cPanel #ZeroDay #CVE #WebHosting

🚨 CRITICAL: A 15-year-old flaw in OpenSSH (CVE-2026-35414) allows attackers to gain full root access. The bug is trivial to exploit and hard to detect in logs. Update to OpenSSH 10.3p1 immediately! 🛡️ #OpenSSH #CVE #Linux #CyberSecurity

🐍 New Python backdoor 'DEEP#DOOR' discovered! This stealthy RAT disables security, uses multiple persistence methods, and exfiltrates credentials via the legit 'bore.pub' tunneling service. #Malware #Python #Backdoor #ThreatIntel

📚 ShinyHunters strikes again, leaking 1.4M records from Udemy after a failed extortion attempt. Data includes PII and instructor financial payout info. Users should reset passwords & enable 2FA now! #DataBreach #Udemy #ShinyHunters

🇪🇺 Europol's 2026 IOCTA report is out: Cybercrime is becoming industrialized, powered by AI, encryption & data theft. Ransomware is shifting to extortion, and state actors are using criminals as proxies. #IOCTA2026 #Europol #Cybercrime