Darkweb · Aug 6, 2026
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its…
A
Arjun Pratap Rana
Arjun reports on data breaches and corporate security incidents, focusing on how leaks happen and what they mean for affected users. Verifies claims against HaveIBeenPwned and leak listings.
251 stories filedFiled by Arjun Pratap Rana
Threats · Aug 6, 2026
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent…
CVE & Exploits · Aug 6, 2026
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application,…
Breaches · Aug 6, 2026
CSS: The Hidden Threat Lurking in Your Inbox
CSS was once just about design. Now researchers warn it's powerful enough to exfiltrate data from webmail — and some…
Threats · Aug 4, 2026
Cybercriminals Bypass AI Safety Controls by Splitting Malicious Tasks Across Multiple Sessions
Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims
Phishing · Aug 4, 2026
Device Code Phishing Up 1,500% in 2026; Vishing Doubles
Newer social engineering techniques help attackers ignore entrenched security controls and limit the evidence they…
Breaches · Aug 4, 2026
Anthropic: Claude Attacks Result of Security Gaps, Not Model Issues
Last month's incidents in which the AI model breached real-world systems derived from over-permissioning, especially…
Darkweb · Aug 3, 2026
Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm
Researchers intercepted and investigated the model, which was attempting to compromise more than 1,200 hosts for…
CVE & Exploits · Aug 3, 2026
China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day
Chinese actors exploited the critical React2Shell exploit inside a day, while 88% of exploited vulnerabilities in H1…
Phishing · Jul 30, 2026
AiTM Phishing Becomes Top Initial Access Threat to Law Firms
AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats
Phishing · Jul 30, 2026
Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages
Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor…
Breaches · Jul 29, 2026
Who's Liable When AI Agents Escape? Hugging Face Breach Raises Hard Questions
Dark Reading walks through the many twists and turns in the bizarre story of how OpenAI's agent AI system broke out of…