The Cybersecurity Mindset RSS Feed – A collection of our favorite security feeds curated into a single spot
- Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
- Laravel Lang packages hijacked to deploy credential-stealing malware
- npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
- Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
- Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes
- Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software
- Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer
- LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
- Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV
- CISA Adds One Known Exploited Vulnerability to Catalog
- ABB B&R Automation Studio
- Hitachi Energy GMS600
- ABB Terra AC Wallbox
- ABB B&R Automation Runtime
- CISA Adds Two Known Exploited Vulnerabilities to Catalog