Cybersecurity News

CISA has released detailed cyber decoy guidance to help critical infrastructure detect post-compromise activity, generate high-fidelity alerts and boost defenses.

Cisco has released patches for dozens of high‑severity flaws in FMC, ISE and Nexus Dashboard that enable command execution, auth bypass and RCE.

US, UK and Dutch agencies warn Iran's Chosen Brick Windows spyware, controlled via Telegram bots, is spying on dissidents, journalists, activists worldwide.

Hiscox’s 10th Cyber Readiness Report finds organizations now face average cyber incident losses of $52,000 and 32 hours of downtime, with small firms hit frequently.

Google Chrome 153 and Mozilla Firefox 156 ship with fixes for a combined 115 security vulnerabilities, including multiple critical memory-safety bugs.

Oracle's September 2026 Critical Security Patch Update fixes over 800 vulnerabilities across 17 product families, including more than 100 critical flaws.

Researchers detail KREMLIN, a Brazilian banking malware that bypasses Chromium integrity checks to install Chrome and Edge extensions and hijack sessions.

Texas utility CenterPoint Energy confirms a breach after a hacker leaked customer records, raising concerns over exposed personal and billing data.

Attackers hijacked HBO Max’s verified Reddit ad account in a PasteSwitch ClickFix campaign, pushing 108 malvertising posts that installed cross-platform infostealers.

Apple’s iOS 27 and macOS Golden Gate 27 ship with fixes for more than 200 vulnerabilities, including serious kernel bugs, giving defenders a patching sprint.