Vulnerabilities & patches · News & analysis
Node2Shell Makes the Running Runtime the Critical Patch Check
Node.js fixes and an independent exploitation test put the focus on deployed containers and the paths that decode untrusted compressed data.
AGENCY ALERTSTrack public advisories from CISA, FBI, NSA and international agencies.Open alert center
THE CYBERSECURITY NEWS DESKUnderstand the threats.
Understand the threats.
Follow the industry.
Cybersecurity reporting, official alerts and research for security professionals, MSPs and the businesses they protect.
Latest from Cyber Security Journal
View allCloud security · News & analysis
Gheist Turns GitHub Workflow Logs Into a Route Out for Cloud Secrets
Wiz’s new investigation shows why private repository access and cloud trust policies belong in the same incident review.
Identity & access · News & analysis
Microsoft 365 Token-Replay Cases Show Why Password Resets Leave Cleanup Unfinished
Huntress’s investigation connects stolen sessions with rogue devices, altered MFA methods and hidden mailbox rules.
AI security · News & analysis
A Downloaded Instructions File Tests the Boundary Around Coding Agents
Forever Security reports a malicious local instruction file and lab reproductions, highlighting the risk of granting downloaded text authority over agent settings.
Threat intelligence · News & analysis
ESET Traces a Grain Logistics Intrusion From Espionage to Destruction
New research into a 2025 Ukrainian intrusion shows why incident responders must test whether an initial foothold served more than one operator.
Ransomware · News & analysis
SafePay Advisory Puts Backup Administration Inside the Ransomware Threat Model
An international advisory describes attacks on recovery infrastructure, giving businesses a concrete test for who can alter their backups.
Data breaches · News & analysis
Quest Restores Quanum as Patient-Data Investigation Continues
The laboratory company reports restored access while the affected-patient and information scope remains unresolved.
Cybercrime & fraud · News & analysis
Unit 42 Separates AI-Assisted Intrusions From a Criminal Operator’s Plans
A new investigation reports university data theft alongside uncompleted fraud preparations, an important distinction for defenders evaluating AI-enabled crime.
Critical infrastructure · News & analysis
SENTRON Fuse Advisory Adds Network Recovery to the Maintenance Checklist
CISA’s republication of a Siemens advisory highlights a denial-of-service condition whose recovery can require rebuilding the affected network.
Leading the news
View allData breach at Sony-owned internet provider compromises 2.6 million customer records ↗
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise ↗
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster ↗
ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History ↗
Hackers Start Probing Fresh Oracle EBS Vulnerability ↗
Browse the cybersecurity desks
View all2026 EDITORIAL DIRECTORY
Explore the directory →Find an MSP in your state
Company overviews, service specialties and direct contact details across all 50 states.
Latest industry reporting & research
View all1524 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Help Net Security
Data breach at Sony-owned internet provider compromises 2.6 million customer records ↗
Industry newsSecurityWeek
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise ↗
Industry newsHelp Net Security
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster ↗
Industry newsWIRED Security
ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History ↗
Industry newsSecurityWeek
Hackers Start Probing Fresh Oracle EBS Vulnerability ↗
Industry newsSecurityWeek
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts ↗
Industry newsThe Hacker News
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits ↗
Industry newsSOCRadar
n0n Ransomware: Inside an AI-Assisted Extortion Operation ↗
ResearchThe Hacker News
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering ↗
Industry newsThe Hacker News
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach ↗
Industry newsHelp Net Security
Bellini Capital CISO on AI security governance and the limits of patching faster ↗
Industry newsThe Hacker News
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers ↗
Industry newsThe Hacker News
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws ↗
Industry newsHelp Net Security
AbuseBox: Open-source monitor for blacklists, DNS, SSL and email records ↗
Industry newsDark Reading
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Mature ↗
Industry newsThe Hacker News
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges ↗
Industry newsHelp Net Security
NIST starts the countdown to retire quantum-vulnerable encryption ↗
Industry newsHelp Net Security
Breach victims discover their data was held by companies they’ve never heard of ↗
Industry newsCIS / MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution ↗
Threat sharingSANS Internet Storm Center
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th) ↗
ResearchCIS / MS-ISAC
A Vulnerability in Brotli Library Could Allow for Remote Code Execution ↗
Threat sharingDataBreaches.net
Privacy Commissioner of Canada to investigate data breach involving Crime Stoppers ↗
Industry newsAWS Security Blog
Introducing Route 53 Resolved IP Validation for AWS Network Firewall ↗
ResearchDark Reading
3 Frameworks to Protect CISOs & Orgs Against AI Liability ↗
Industry newsADVERTISE WITH CYBER SECURITY JOURNAL
Reach the people protecting businesses.
Website advertising: $500/month. Newsletter advertising: $500/month. Availability and placement agreed before booking.
Ask about a placement →