Latest news
-
Breaches via Graham Cluley
Hacker leaks 281 GB of data from Germany’s far-right AfD party
The AfD has confirmed that hackers breached its hosting provider. A leak site now claims to offer 421,179 of the party’s internal emails, and shows AI-written summaries…
-
Breaches via HIPAA Journal
Patient Data Likely Accessed in Quest Diagnostics Hack
Quest Diagnostics, a Secaucus, New Jersey-based Fortune 500 diagnostic testing company, has notified the U.S. Securities and Exchange Commission (SEC) that it has…
-
Vulnerabilities via CISA
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-114625 Arista VeloCloud…
-
Vulnerabilities via Chrome Releases
Chrome Dev for Android Update
Hi everyone! We've just released Chrome Dev 158 (158.0.8117.0) for Android. It's now available on Google Play.
-
AI Security via GuidePoint Security
Preparing Your Security Program for Amazon Web Services Security Hub Extended
Preparing Your Security Program for Amazon Web Services Security Hub Extended October 23, 2026 By The GuidePoint Security Cloud Team BLOG 5 min.
-
Breaches via ransomware.live
🏴☠️ Sarcoma has just published a new victim : Don Pickett & Associates
Don Pickett & Associates is a family-owned and operated corporation located in Fresno, California. Founded in August of 1988, we have grown into a unique company that…
-
Threat Intel via Help Net Security
Microsoft 365 accounts compromised at 79 organizations, no passwords needed
An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims…
-
Breaches via Infosecurity Magazine
Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information
Japanese video games giant Capcom confirmed unauthorized access to its online account system
- Advertisement
-
Breaches via Security Affairs
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal
A New Mexico judge ordered Meta to pay $25 billion for misleading users about privacy, setting a record penalty. Meta plans to appeal. This week a New Mexico judge…
-
AI Security via Dark Reading
AI Agents as Insider Threats: Inside Microsoft's Bet on a Unified Security Stack
Microsoft's Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with other agents may…
-
Vulnerabilities via BlackFog
BlackFog Patches All Servers Following Critical PHP Vulnerabilities
BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.
-
Vulnerabilities via The Hacker News
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue…
-
Threat Intel via The Hacker News
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company…
-
Breaches via Schneier on Security
Compromised TLS Certificates
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the…
-
Ransomware via ransomware.live
🏴☠️ Scarlettgroup has just published a new victim : vinsolutions.com
VinSolutions is an automotive CRM platform that helps car dealerships manage leads, track sales, and improve customer relationships.
-
Vulnerabilities via Security Affairs
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet
PHP2Shell attacks have surged into the millions, but no successful exploitation is confirmed. Patch it immediately. On October 21, PHP released emergency patches for two…
-
Ransomware via ransomware.live
🏴☠️ Auditteam has just published a new victim : ADL Lift Services Limited
ADL Lift Services Limited is a Scotland-based commercial lift specialist, incorporated in 2010 and now headquartered in Bellshill at Strathclyde Business Park, that…
-
Ransomware via ransomware.live
🏴☠️ Auditteam has just published a new victim : Zena Office
Zena Office S.r.l. is a regional small-to-mid-sized IT and office technology provider based in Piacenza, Italy, formally registered around 2000 and claiming roots that…
-
Threat Intel via SecurityWeek
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.
-
Threat Intel via Infosecurity Magazine
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen…