ACTIVE THREATS: Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers • AI-powered attack exploited PaperCut flaws to hack 395 organizations • Microsoft Excel KB5002914 update breaks copy and paste for some users • Surfshark VPN says hackers breached internal testing, proxy servers • PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances ACTIVE THREATS: Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers • AI-powered attack exploited PaperCut flaws to hack 395 organizations • Microsoft Excel KB5002914 update breaks copy and paste for some users • Surfshark VPN says hackers breached internal testing, proxy servers • PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
Editor, HackWire
Andy Arevalo edits HackWire, tracking the cybersecurity stories that matter to defenders — active breaches, newly disclosed vulnerabilities, malware and ransomware campaigns, and the policy shifts shaping the field. Every HackWire brief is written to cut through the noise and give security professionals the decoded version fast, with a link back to the primary source.
HackWire is an independent publication. Coverage is sourced from established security outlets and primary research, then synthesized and fact-checked before publishing. See our editorial approach and source list.
**Three threat groups (ransomware operators and nation-state actors) are actively exploiting two Cisco Firewall Management Center vulnerabilities. FMC is the management plane controlling all firewall policies; compromising it grants attackers complete visibility and control over an organization's en
A Russian-linked threat actor deployed hundreds of AI agents to exploit PaperCut NG/MF print management software across 395+ organizations in a methodical, automated campaign. This marks a watershed moment where AI automates sophisticated cyberattacks at global scale, targeting unpatched systems in
Microsoft's KB5002914 patch broke Excel's core functions (copy-paste and formula dragging), forcing users to uninstall the security update entirely. This teaches enterprises that patches cause more harm than protection, creating a security crisis bigger than any original vulnerability.
Surfshark revealed hackers breached an exposed test server due to misconfiguration. For a VPN company selling security trust, the incident chips away at their core value proposition, though user tunnels appear uncompromised.
Hundreds of AI agents compromised 440+ PaperCut servers in the first documented campaign where agentic AI was the primary attack vector—a fundamental shift in coordinated exploitation. This represents the first large-scale exploitation operation where autonomous agents, not humans, drove identificat
Gigabud banking trojan abuses Android's work profile feature to hide fraudulent banking apps in a sandbox invisible to security tools. The exploit weaponizes an enterprise isolation mechanism designed to separate work and personal data.