Our own breakdowns of what happened
Major Security Companies Snap Up Smaller Firms in Massive July Acquisition Wave
Six major cybersecurity leaders announced 21 acquisitions in July 2026, reshaping the industry landscape.
Read full story →Microsoft Closes Critical Security Hole Used by State-Sponsored Hackers
Microsoft patches dangerous vulnerability exploited by Jewelbug espionage group targeting governments and stealing cryptocurrency.
Read full story →Government Email System Infiltrated as Criminals Exploit Security Vulnerabilities for Dual Attack
Cybercriminals breached government email systems while simultaneously running cryptocurrency scams, using basic restart techniques to bypass security tools.
Read full story →Akira Gang Bypasses Security Tools, Steals Files but Leaves Systems Unencrypted
Criminal hackers find workaround to disable protective software, successfully stealing data while encryption attack fails.
Read full story →Apple Warns Users of Targeted Spyware Designed to Steal Personal Data
Apple notifies customers about mercenary surveillance software targeting specific individuals worldwide.
Read full story →Microsoft SharePoint Under Fire as Hackers Weaponize Security Flaw Following Public Exploit Release
Cybercriminals actively exploiting SharePoint authentication weakness after proof-of-concept code went public.
Read full story →New Mobile Payment Attack Combines Two Tools to Empty Customer Bank Cards
Cybercriminals weaponize NFC relay malware with remote control software to drain payment card details in real time.
Read full story →Fraudsters Using Smartphone Malware to Steal Credit Cards and Open Unauthorized Loans
Cybercriminals exploit cloud portal weaknesses to harvest payment data and commit identity theft at scale.
Read full story →Hackers Breach Popular Business Software Platforms, Stealing Customer Data
Criminal group exploits vulnerabilities in widely-used enterprise software to access sensitive company information.
Read full story →North Korean Hackers Breach Windows Systems Using Never-Before-Seen Vulnerability
Lazarus group exploits unpublished Windows flaw to seize full control of computers and install persistent malware backdoors.
Read full story →Criminal Gang Disguises Malware as Popular Security Tool to Trap System Administrators
Cybercriminals are spreading infected versions of WireGuard VPN software to compromise IT workers and deploy ransomware attacks.
Read full story →New Ransomware Strain Hides Behind Blockchain Technology to Evade Law Enforcement
DeadLock ransomware exploits blockchain's decentralized nature to avoid being shut down by authorities.
Read full story →Russian Hackers Pose as Job Recruiters to Deploy Malware Against Ukrainian Tech Workers
Nation-state attackers use fake recruitment offers to install dangerous software on computers of IT employees in Ukraine.
Read full story →Microsoft Releases Massive Security Update to Fix Nearly 400 Vulnerabilities, Including Critical Driver Flaw Already Being Exploited
Microsoft addresses 398 security holes in latest patch, with one Windows driver vulnerability already under active attack by criminals.
Read full story →WordPress Plugin Maker Breached, Attackers Secretly Create Admin Accounts
Hackers infiltrated BdThemes infrastructure and planted backdoor access into WordPress sites using compromised software updates.
Read full story →WordPress Plugin Vulnerability Gives Attackers Hidden Control Over Websites
Attackers exploited BdThemes plugins to create secret administrator accounts, potentially affecting thousands of WordPress sites worldwide.
Read full story →Polish Power Facility Falls Victim to Cyberattack Through Supposedly Secure Private Network
Cybercriminals successfully infiltrated a Polish energy facility by exploiting vulnerabilities in a private cellular network meant to be protected.
Read full story →Researchers Uncover New Methods to Crack Modern Password-Free Login Systems
Security experts warn that passkeys—the next-generation login technology—face unexpected vulnerabilities that could let hackers gain unauthorized access.
Read full story →North Korean Hackers Deploy Custom AI Tools to Streamline Cyber Attacks Without Internet
Kimsuky group creates offline artificial intelligence to automate phishing campaigns and malware creation, reducing detection risk.
Read full story →Chinese Cybercriminals Switch to New Ransomware Weapon in Latest Attack Campaign
Microsoft reveals financially-driven hackers from China are now using a fresh encryption tool called StormEncryptor instead of their older methods.
Read full story →Chinese Hackers Weaponize New Ransomware Variant Through Management Software Vulnerability
New ransomware strain linked to China exploits software management flaw as AI accelerates code production faster than security teams can manage.
Read full story →Cybercriminals Expand Attacks on Finance, Infrastructure While AI-Generated Content Complicates Security Reporting
Hackers target Wall Street firms and port systems as fake AI content strains corporate bug bounty programs.
Read full story →