Latest news
-
Vulnerabilities via Full Disclosure
[ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid)
Posted by Román Ramírez on Oct 20 -=] About RootedCON RootedCON is a technology and cybersecurity conference that will take place in Madrid (Spain) from March 4 to 6…
-
Vulnerabilities via Wordfence
Wordfence Argus Discovers High Severity Unauthenticated PHP Object Injection in Duplicator
On August 30, 2026, during internal research, the Wordfence Threat Intelligence Team discovered an Unauthenticated PHP Object Injection vulnerability in Duplicator and…
-
Breaches via The Record
23andMe successor settles with California for $6 million over cybersecurity failings
California Attorney General Rob Bonta announced a settlement under which 23andMe's successor will pay $6 million to resolve allegations that the company did not properly…
-
AI Security via BleepingComputer
OpenAI says GPT-6.1 Sol is dramatically better at migrating legacy code
OpenAI confirmed that its newer models are much better at writing and migrating software in older programming languages.
-
Vulnerabilities via CERT/CC
VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting
Overview An authentication bypass vulnerability in the Xerj Console API allows sessions to bypass passkey-backed requirements during token issuance. By exploiting this…
-
Breaches via Security Affairs
Nikkei data breach affected over 1.8 million records
Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media…
-
Threat Intel via CyberScoop
Russian GRU hackers hit NATO shipbuilder, aircraft engine maker, law enforcement agency in espionage campaign
Russian government-connected hackers compromised two defense firms and a law enforcement agency in North Atlantic Treaty Organization countries as part of an espionage…
-
Breaches via ransomware.live
🏴☠️ Dark project has just published a new victim : Beach Eye Medical Group
About Beach Eye Medical Group The latest eye-care technology combined with decades of experience makes Beach Eye Medical Group a center of excellence for eye care. ur…
- Advertisement
-
Ransomware via ransomware.live
🏴☠️ Dark project has just published a new victim : Asensus Surgical
About Asensus Surgical TransEnterix, which rebranded as Asensus Surgical in 2021, pursued the goal of challenging Intuitive Surgical in the robotic surgery market. After…
-
Breaches via ransomware.live
🏴☠️ Dark project has just published a new victim : The Excalibur Group
About The Excalibur Group The Excalibur Group is a Washington D.C. based company that focuses on enhancing local, state, and federal programs through staff augmentation…
-
Vulnerabilities via Ubuntu Security
USN-8945-1: XZ Utils vulnerability
It was discovered that XZ Utils incorrectly handled certain memory allocation failures when reinitializing decoders for specific compressed file formats. An attacker…
-
Vulnerabilities via Canadian Centre for Cyber Security
Gitea security advisory (AV26-845) - Update 1
Serial Number: AV26-845 Date: August 25, 2026 Updated: October 20, 2026 As of August 14, 2026, Gitea is affected by vulnerabilities in the following product: Gitea Prior…
-
Threat Intel via The Record
Nigerian national given 8-year sentence for tax business hacks
A Nigerian national who worked with a group to hack tax prep businesses and conduct millions of dollars in fraud using customer data was sentenced this week.
-
Breaches via The Hacker News
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20…
-
Threat Intel via Help Net Security
Chrome flags malicious commands that scammers pass off as fixes
Google is updating Chrome’s Enhanced Protection mode to detect scam websites and warn users when a page tricks them into copying a malicious command. The company…
-
Threat Intel via Google Security Blog
Our latest defenses against evolving web scams
Google Chrome's Enhanced Protection mode makes users ten times safer from phishing, social engineering, and other attacks when compared to Standard Protection mode. Buil…
-
Ransomware via ransomware.live
🏴☠️ Silentransomgroup has just published a new victim : P...S...R...
Redacted entry - full company name pending disclosure (FULL DATA TIMER active).
-
Breaches via HIPAA Journal
California Settles 23andMe Data Breach Lawsuit for $6 Million
In July, a coalition of 42 state attorneys general agreed to an $18 million settlement with 23andMe to resolve claims that the company violated state laws by failing to…
-
Vulnerabilities via Chrome Releases
Chrome Stable for iOS Update
Hi everyone! We've just released Chrome Stable 156 (156.0.8078.46) for iOS; it'll become available on App Store in the next few hours. This release includes stability…
-
Threat Intel via CyberScoop
ConnectWise customers hit by supply-chain attack linked to compromised API secret
A portion of ConnectWise’s customers have been adrift for days, and hundreds are compromised, as the company’s efforts to restore its Cloud Backup service remain…