Sony Network Communications says an October 19 intrusion exposed 2,585,481 So-net and plala records, including Docomo Hikari customers, and 54,401
UK registrar 123 Reg told customers an AI-driven attack exposed contact and product data, and suspects a China-nexus group tied
A critical buffer overflow in TianoCore EDK II PXE code, CVE-2026-97631, can run code before Secure Boot loads, and no
GMO Internet told Onamae Desktop Cloud customers to power off PCs after attackers leaked data, then opened a bounty of
The Justice Department seized virtualine.net, a bulletproof hosting provider used for phishing, carding and illegal content, with European and private
Defused saw exploratory attacks on its decoys against CVE-2026-101767, a CVSS 9.8 unauthenticated SQL injection in Oracle E-Business Suite patched
BerriAI fixed a CVSS 10.0 LiteLLM proxy flaw that lets unauthenticated attackers read local files and steal the master key
A Brazilian Magecart gang altered Convertr’s Plausible analytics script on checkout pages to steal card data and CPF taxpayer IDs
ENGIE says attackers breached a partner marketing tool and stole names, addresses and contract numbers of French customers; internal IT
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.