Latest news
-
Vulnerabilities via SOCRadar
PHP2Shell Exploit Tooling Found on Exposed Attacker Server
SOCRadar Threat Intelligence Unit (STRU) researchers found PHP2Shell exploit tooling on an attacker-controlled server whose working directory was exposed through an…
-
Threat Intel via BleepingComputer
Microsoft shares how to fix broken Exchange Online EWS apps
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working.
-
Breaches via HIPAA Journal
Ridgeway Pharmacy Data Breach Affects 259,000 Individuals
A data breach at Ridgeway Pharmacy in Montana has affected almost 259,000 individuals. Data breaches have also been announced by IMS Care Center in Arizona and Persona…
-
Vulnerabilities via Ubuntu Security
USN-8953-1: OpenVPN vulnerability
It was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users.
-
AI Security via Simon Willison
Quoting Armin Ronacher
As fun as AI is, we built so much bad software over the last 30 years, and now the universe is punishing us for our sins. — Armin Ronacher Tags: security, generative-ai…
-
Ransomware via RansomLook
DR.SCHNELL GmbH & Co. KGaA By rhysida
DR.SCHNELL GmbH & Co. KGaA DR.SCHNELL GmbH & Co. KGaA � full network dump.
-
Ransomware via ransomware.live
🏴☠️ Rhysida has just published a new victim : DR.SCHNELL GmbH & Co. KGaA
DR.SCHNELL GmbH & Co. KGaA DR.SCHNELL GmbH & Co. KGaA � full network dump.
-
Vulnerabilities via Ars Technica
Hackers got a four-day head start on epic PHP2Shell vulnerability
Amazon has warned that vulnerabilities in a programming language that underpins much of the internet, discovered using AI tools, are being “broadly exploited” as…
- Advertisement
-
Vulnerabilities via Chrome Releases
Chrome Beta for iOS Update
Hi everyone! We've just released Chrome Beta 157 (157.0.8103.13) for iOS; it'll become available on App Store in the next few days. You can see a partial list of the…
-
AI Security via Cisco Security
Unified Defense from Endpoint to Cloud: Real-Time Protection with Cisco Security, Splunk, and SentinelOne
Discover how Cisco and SentinelOne work together across Splunk, Duo, Firepower and now ISE — turning endpoint detection into automated network access decisions.
-
Threat Intel via Huntress
Unboxing Phishing Kits: Huntress Examines 3 Real Kits
Huntress examines 3 phishing kits that hand beginner attackers everything they need to steal tokens. See what the attacks look like from the inside.
-
AI Security via CyberScoop
eMudhra kills its certificate business after researchers cracked its private keys in under a second
Indian certificate authority eMudhra said Thursday it will stop issuing SSL/TLS certificates days after researchers showed that the private keys securing eight of its…
-
Vulnerabilities via Security Affairs
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports
AWS detected PHP2Shell exploit attempts four days before disclosure, highlighting the risk of attackers exploiting critical flaws before patches arrive. Attackers…
-
Threat Intel via SecurityWeek
Hacker Conversations: Corey Thuen and the Evil Bit
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
-
AI Security via Dark Reading
As AI Risks Grow, Insurers Split on Covering the Damage
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without their knowledge.
-
AI Security via Malwarebytes Labs
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
The warnings are everywhere these days. Don’t click this. Don’t open that.
-
Breaches via HIPAA Journal
Innovative Renal Care Pays $900,000 to Settle Data Breach Litigation
American Renal Management LLC, doing business as Innovative Renal Care, a kidney care specialist with more than 200 locations in 28 U.S. states, identified a cyberattack…
-
Breaches via TechCrunch
Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
The vibe-coding platform said all of its customers should revoke and rotate their private keys, after hackers were able to decrypt some customer secrets.
-
Threat Intel via BleepingComputer
Machine speed attacks require machine speed detection and response
Attackers can steal credentials and begin exfiltrating data within minutes, often before security teams can respond. Exaforce examines real-world attacks involving…
-
Threat Intel via Infosecurity Magazine
EU Regulators to Investigate Booking.com Over Scam Risks
The EU Commission will assess whether Booking.com has adequately protected customers from phishing attacks