Latest news
-
Breaches via HIPAA Journal
University Hospitals Working on Restoring Systems After Cyberattack
University Hospitals is working on restoring systems after an October 22 cyberattack. Cybersecurity incidents have also been announced by EyeMed Vision Care and Facial…
-
Threat Intel via Infosecurity Magazine
Police Seize 100+ Servers After Four-Year Investment Fraud Probe
A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme
-
Breaches via HIPAA Journal
$2 Million Settlement Resolves Covenant Health Data Breach Lawsuit
Covenant Health, St. Joseph Healthcare Foundation, St. Joseph Hospital, St.
-
Threat Intel via SecurityWeek
Malicious cPGuard Updates Served in OpsShield Supply Chain Attack
Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.
-
Vulnerabilities via SecurityWeek
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
-
Threat Intel via SecurityWeek
Rigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.
-
Threat Intel via Help Net Security
Fake job interview opened the door to $6.34 billion Binance heist
A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a…
-
Vulnerabilities via Security Affairs
CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code
Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed…
- Advertisement
-
Threat Intel via ESET WeLiveSecurity
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
ESET Research analyzes a DNS hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method
-
Breaches via ransomware.live
🏴☠️ Rhysida has just published a new victim : Juge, Napolitano, Ruli, Putfark & Pittman
Juge, Napolitano, Ruli, Putfark & Pittman Juge, Napolitano, Ruli, Putfark & Pittman / 'WC Defense' - insurer & corporate defense law firm.The Juge Firm (Metairie /…
-
Ransomware via ransomware.live
🏴☠️ Pear has just published a new victim : gWorks
A technology company specializing in software solutions designed to help small towns and rural areas make effective use of software and technology
-
Ransomware via ransomware.live
🏴☠️ Pear has just published a new victim : Palm Vascular Centers
A company specializing in collaboration with interventional radiologists and vascular surgeons
-
Vulnerabilities via NCSC-NL
NCSC-2026-0466 [1.00] [L/H] Kwetsbaarheid verholpen in WordPress Core
WordPress heeft een kwetsbaarheid verholpen in WordPress Core versies 4.7 tot en met 7.1.3. De kwetsbaarheid maakt misbruik mogelijk van een TOCTOU-racecondition…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0465 [1.00] [M/H] Kwetsbaarheden verholpen in Barracuda Email Security Gateway
Barracuda heeft kwetsbaarheden verholpen in Barracuda Email Security Gateway. Barracuda heeft twee kwetsbaarheden vastgesteld in verschillende Barracuda-producten: een…
-
Threat Intel via BleepingComputer
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating…
-
Vulnerabilities via oss-security
Node.js security release pre-alert
Posted by Antoine du Hamel on Nov 04 We will release new versions of Node.js 22, 24, and 26 release lines on or shortly after 2026-11-11 in order to address security…
-
Threat Intel via Infosecurity Magazine
Fake Interview of Software Engineer Led to Binance Mega-Heist
Binance has revealed details of how North Korean hackers stole $6.4bn theft of crypto assets
-
AI Security via SOCRadar
KeyHunter Operation: Harvard Alumni Data, Stanford Applications and LLM Key Theft
The KeyHunter Operation pairs LLM key theft with an academic fraud campaign that reaches Harvard alumni data, Stanford applications and 18 other universities. SOCRadar’s…
-
Threat Intel via SecurityWeek
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
-
Vulnerabilities via Security Affairs
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S.
