Keamanan Siber

TeamFiltration Compromises Seven Microsoft 365 Accounts Using Default Passwords

TeamFiltration Compromises Seven Microsoft 365 Accounts...

Sep 24, 2026 0 17

TeamFiltration targeted over 5,700 Microsoft 365 accounts across 28 tenants, com...

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Attackers Use Malicious Terraform Providers to Deliver ...

Sep 24, 2026 0 10

Malicious Terraform providers and Go modules deliver Graphalgo-linked Go malware...

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

A Leaked GitLab Issue Email Address Lets Anyone Push Co...

Sep 24, 2026 0 7

GitLab’s non-expiring incoming email token can let a holder commit code with a u...

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

MikroTrick Chain Let Attackers Take Over MikroTik Route...

Sep 23, 2026 0 8

Attackers chained two RouterOS SSH flaws to gain full admin access on Internet-e...

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

This Windows Malware is Built to Let Up to Four AI Mode...

Sep 23, 2026 0 9

CLOSEDQUORUM uses votes from up to four AI models to choose theft, injection, or...

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Anthropic and OpenAI Models Still Attempt Restricted Ac...

Sep 23, 2026 0 10

Anthropic and OpenAI report fewer boundary circumvention and unauthorized action...

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain t...

Sep 23, 2026 0 3

UTA0565 exploited a Chrome-Windows zero-day chain through fake websites to deplo...

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

F5 Patches Critical BIG-IP APM Zero-Day Exploited for U...

Sep 23, 2026 0 8

Unauthenticated attackers are exploiting CVE-2026-94127 in F5 BIG-IP APM to run ...

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Critical Next.js ImageResponse Flaw Can Lead to Server ...

Sep 23, 2026 0 4

Next.js ImageResponse flaw can lead to server code execution when attacker-contr...

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Malicious npm Package Poses as Twilio Bug-Bounty Probe,...

Sep 23, 2026 0 8

Malicious npm package tw-pkgprobe-7731 targets Twilio developer environments and...

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Critical Bifrost AI Gateway Flaw Lets Attackers Run Com...

Sep 23, 2026 0 6

Bifrost CVE-2026-90898 enables unauthenticated command execution with management...

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write...

Sep 22, 2026 0 8

A Linux KVM flaw on ARM64 can expose host kernel memory to guests and enable gue...

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

SharePoint Flaw Initially Listed as Spoofing by Microso...

Sep 22, 2026 0 8

SharePoint CVE-2026-65660 enables authenticated RCE; Microsoft patched it on Aug...

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

Zyxel and Veeam Flaws Under Active Exploitation With Co...

Sep 22, 2026 0 7

CISA added Zyxel CVE-2026-7273 to KEV after active exploitation, while Arctic Wo...

Google Fined €403 Million Over GDPR Violations Tied to Location Data

Google Fined €403 Million Over GDPR Violations Tied to ...

Sep 22, 2026 0 12

Ireland's DPC fined Google €403 million over GDPR violations in how three featur...

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Fake LastPass Authenticator Installer Abuses Microsoft-...

Sep 22, 2026 0 12

A fake LastPass Authenticator installer uses a signed kernel driver to kill secu...