Latest news
-
Breaches via DataBreaches.net
Hack exposes data on millions of California students
Eric He and Tyler Katzenberger report: Personal information about millions of California students was stolen in a hack of a non-profit organization that contracts with…
-
Vulnerabilities via oss-security
CVE-2025-55640: Heap Buffer Overflow in GPAC/MP4Box via stbl_AddSize on crafted MP4 with corrupted sample metadata
Posted by Alexander A. Shvedov on Oct 17 Product: GPAC (MP4Box) Affected: gpac/gpac prior to fix commit (321624f28d19a413449fd1718d1eb59037f8f7fc) CVE: CVE-2025-55640…
-
Breaches via BleepingComputer
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised…
-
Vulnerabilities via BleepingComputer
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management…
-
Breaches via Wired
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
-
Ransomware via ransomware.live
🏴☠️ Lockbit5 has just published a new victim : ock.com.my
OCK Group Berhad specializes in telco network services and infrastructure in Malaysia, offering solu...
-
Threat Intel via The Hacker News
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package…
-
Threat Intel via SecurityWeek
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
- Advertisement
-
Vulnerabilities via Security Affairs
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities…
-
Breaches via Security Affairs
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A security incident…
-
AI Security via Security Affairs
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
India’s CERT-In warns AI agents accessed confidential data undetected, while attackers used offensive AI frameworks to accelerate cyberattacks. CERT-In, India’s national…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #86
real estate and land development · United States | [PENDING EXPOSURE]
-
Breaches via The Hacker News
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Company #84
construction (custom homes) · USA | [PENDING EXPOSURE]
-
Threat Intel via Wordfence
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. According to Rank Math, the affected version was downloaded or installed…
-
AI Security via ransomware.live
🏴☠️ Everest has just published a new victim : Kissei Shoji
[AI generated] N/A I don't have reliable, verified information about a specific company called "Kissei Shoji" to provide an accurate factual description of its…
-
AI Security via ransomware.live
🏴☠️ Everest has just published a new victim : Chugoku Bend
[AI generated] N/A I don't have reliable, verifiable information about a company specifically named "Chugoku Bend." This does not correspond to a company I can…
-
AI Security via ransomware.live
🏴☠️ Everest has just published a new victim : Brenner Base Tunnel
[AI generated] The Brenner Base Tunnel (Brennerbasistunnel, BBT) is a major railway infrastructure project, not a company in the traditional sense, though it is managed…
-
Threat Intel via oss-security
Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
Posted by eddyflores100 on Oct 16 Alexander, Fair on both counts, and thank you for verifying the domain state yourself before responding - that is more diligence than…
-
AI Security via CyberScoop
Federal agencies recommend cyber controls, independent testing for frontier AI systems
The federal government is advising AI companies to set more industry standards for securing agents in sandbox testing environments.