BeforeBreach

BeforeBreach Helping organizations understand and reduce hidden digital risk before breaches occur

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impa...
09/10/2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities...

Cisco FMC flaw CVE-2026-20316 is under active exploitation, letting unauthenticated attackers use static credentials to access sensitive data

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incide...
09/10/2026

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain an...

Amazon links the 2025 debug and chalk npm hijack to Sapphire Sleet with medium confidence, but does not show which evidence ties the incident.

The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Co...
09/10/2026

The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authoriz...

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observe...
09/10/2026

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S....

Russian hackers exploit CVE-2026-42897 in OWA to deploy OWAReaper, a browser implant that persists through credential rotation and device re-imaging.

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerabl...
08/10/2026

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector t...

Silver Fox uses a three-driver BYOVD framework, DLL sideloading, and dual watchdogs to keep ValleyRAT running at a Japanese manufacturing organization

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted dome...
08/10/2026

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security softw...

State-sponsored hackers used compromised South Korean websites to exploit AnySign4PC and install SIGNBT or COPPERHEDGE without a download prompt.

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an...
08/10/2026

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in cross-tenant com...

Writer patched WriteOut after Sand Security found sandbox previews could forward session cookies into attacker-controlled agents.

U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent...
08/10/2026

U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint.

Microsoft records tied that I...

Federal complaint says a Windows GDID tied Peter Stokes to a May 2025 jewelry retailer hack that stole 77GB and drew an $8M ransom demand.

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, r...
07/10/2026

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown.

The attacker needs only to open a normal-looking issue...

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output publicly.

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of...
07/10/2026

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC....

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, and PRT persistence.

Address

Tbilisi

Website

Alerts

Be the first to know and let us send you an email when BeforeBreach posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category