WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw
HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users.
Search Intelligence
What happens if you visit a WordPress site hacked through wp2shell?
Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk.
Claude for Chrome flaw could let rogue extensions access your Gmail
The ClaudeBleed vulnerability still lets malicious Chrome extensions abuse Claude for Chrome's permissions.
The Canvas Hack: Who, What, Where, When, and Why
This week in cybersecurity from the editors at Cybercrime Magazine Sausalito, Calif. – Jul. 7, 2026 – Listen to the podcast EdTech company Instructure confirmed a massive data breach this past spring.
Fake Netflix, Coca-Cola, and FIFA job scams target marketers
A fake recruiter phishing campaign uses trusted brands, nested redirects, and fake Google prompts to steal accounts.
Apple’s Hide My Email doesn’t hide it very well
A year ago a researcher found a vulnerability in Apple's Hide My Email feature and now he's tired of waiting for a fix.
Apple patches Beats Studio Buds flaw that could turn earbuds into a wiretap
Apple has patched a year-old Bluetooth vulnerability that could have let nearby attackers listen through Beats Studio Buds' microphone.
Microsoft working on a fix for RoguePlanet, a flaw that grants full PC control
Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.
Kodak confirms breach as ShinyHunters’ leak threat reaches deadline
The photography giant confirmed a data breach after ShinyHunters claimed it stole 2.2 million records and threatened to leak them.
CISA directive orders agencies to prioritize vulnerability patching in a new way
A vulnerability that meets all four criteria would need to be fixed within three days, for instance. The post CISA directive orders agencies to prioritize vulnerability patching in a new way appeared
Carnival confirms data breach impacting nearly 6 million
Cruise giant Carnival has suffered yet another data breach, with ShinyHunters claiming to have stolen personal data affecting nearly 6 million people.
Why Australian Dark Web Data Is Now Being Sold in Bundles — and What It Means for Organizational Exposure in 2026
In 2026, opportunistic assaults and isolated breaches will no longer characterize Australia's cyber risk environment. Industrialized data theft, in which stolen data is packaged, repackaged, and marke
Third-Party Breaches Without Breaches: How Attackers Use Trusted Access to Bypass US Enterprise Defenses
The modern enterprise is no longer breached in the traditional sense. Firewalls remain intact; endpoints appear compliant, and credentials are often never “stolen” in the usual way. Yet attackers stil