
Increasing Threats from Automated Data Extortion Targeting MongoDB
A threat actor has launched automated attacks on MongoDB databases, exploiting weak security to extort low ransoms from victims for

A threat actor has launched automated attacks on MongoDB databases, exploiting weak security to extort low ransoms from victims for

Ivanti has addressed two zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) following warnings from security experts about their active

A researcher found that Instagram’s private accounts were not as secure as users believed, exposing photo links to unauthorized visitors.

Hackers breached an update server at MicroWorld Technologies, delivering malware to customers through eScan Antivirus software. This supply chain attack

Security experts have discovered Chrome extensions hijacking data and targeting OpenAI ChatGPT tokens. One identified extension, “Amazon Ads Blocker,” falsely

To bolster cybersecurity, Microsoft announced plans to phase out the NTLM authentication protocol, which has been part of Windows for

Research identifies 175,000 exposed Ollama hosts potentially facilitating LLM misuse, with 23,000 persistently active. Highlighted by SecurityWeek, this cybersecurity risk

SolarWinds has released updates for six vulnerabilities in its Web Help Desk. Among these were four critical flaws enabling unauthenticated

Two newly identified vulnerabilities within n8n’s sandbox could allow attackers to execute remote code. Weaknesses in the AST sanitization logic

Insecure deployments of Moltbot, an AI assistant, in enterprise environments raise severe risks of leaking sensitive data such as API
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.