Security news aggregator

Latest coverage for Compromise

Stay updated on the latest compromise incidents in infosec. Discover how breaches occur and learn strategies to protect your data and networks.

9 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Compromise in information security means unauthorized access or control over a system, network, or data, often resulting from exploiting vulnerabilities like software bugs, weak credentials, or misconfigurations. It indicates that an attacker has bypassed security measures to read, modify, or disrupt resources without permission.

Such compromises pose risks including data theft, unauthorized system manipulation, and persistent attacker presence. Detecting and containing compromises requires monitoring for unusual activity, applying timely patches, and enforcing strong access controls to limit attacker movement and reduce the impact of exploited weaknesses.

Volume over time

Weekly headline count for the current query.

Showing 9 most recent headlines Filtered view

A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH server trigger memory corruption on a connecting client, with possible code execution. No credentials, no user interaction. The bug affects every release up to and including 1.11.1 and carries a CVSS 4.0 score of 9.2

The Hacker News 29 Jun 2026, 7:06 p.m. CVE-2026-55200 Compromise Credentials Critical Vulnerability CVE Flaw Library PoC SSH

An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability

The Hacker News 30 May 2026, 2:39 a.m. Actively exploited CVE-2026-39987 Cloud Compromise Credentials CVE Disclosure Exploit Initial Access Threat Actor Vulnerability

Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42

The Hacker News 18 Apr 2026, 6:01 p.m. CVE-2024-3721 Botnet Compromise CVE DoS Exploit Flaw Fortinet Palo Alto Networks Routers Threat Actor Vulnerability Wireless

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released details of two sets of malware that were discovered in an unnamed organization's network following the exploitation of security flaws in Ivanti Endpoint Manager Mobile (EPMM)

The Hacker News 19 Sep 2025, 4:10 p.m. Actively exploited CVE-2025-4427 CVE-2025-4428 America CISA Compromise CVE Endpoint Security Flaw Malware Mobile Threat Actor Warning

Details have been shared about a security vulnerability in Dahua's Open Network Video Interface Forum (ONVIF) standard implementation, which, when exploited, can lead to seizing control of IP cameras.  Tracked as CVE-2022-30563 (CVSS score: 7.4), the "vulnerability could be abused by attackers to compromise network cameras by sniffing a previous unencrypted ONVIF interaction and replaying the

The Hacker News 29 Jul 2022, 10:49 p.m. CVE-2022-30563 Compromise CVE Forums Video Vulnerability