Eduard Kovacs

SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking. 

The digital health company said it learned of the breach on June 8 and the attackers demanded a ransom.

California Water Service says there is no indication of operational disruptions to its water and wastewater systems. 

Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.

Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen.

Google’s Threat Intelligence Group has been tracking the cyberespionage group as UNC6508 since early 2025.

The pharmaceutical giant says the attackers gained access to personal data stored on the compromised systems. 

Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action.

Industry professionals comment on various aspects of Fable 5, including dual-use capabilities, safeguards, and tiered access.

An AI hacker claims to have achieved a prompt-based jailbreak shortly after Fable 5’s launch, but Anthropic says it’s not a real jailbreak.

Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.

Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.

A PowerShell script included in patch files appears to be triggering false positives by multiple security engines.

The ShinyHunters hacker group has taken credit for the attack, leaking more than 450,000 email addresses and other information.

The company warned about zero-day attacks exploiting the Exchange Server vulnerability CVE-2026-42897 on May 14. 

Claroty researchers have analyzed the security of Vertiv UPS network cards and the Trane Tracer SC+ HVAC controller.

The company updated hosted customer instances to patch a security issue it reportedly had known about since April 7.

In addition, Rockwell Automation announced some enhancements to its SecureOT cybersecurity solution for OT.

Three of the vulnerabilities fixed with the latest Patch Tuesday updates were publicly disclosed before Microsoft addressed them.

Nearly half of the security holes, most allowing arbitrary code execution, have been fixed in Adobe’s Experience Manager product.