Cyber Security
23andMe Successor Settles With California for $6M Over Breach
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
State Bank of India Confirms Data Leak of 3,897 Customer Records
Conduent Agrees to $80M Settlement Over Breach of 62M People
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
OpenCode Silently Patched Critical RCE Flaw With No CVE
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Laravel TokenGuard Flaw Lets Attackers Log In as Any User
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
Parkview Health Disables Network After Suspicious Activity
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Trojanized Rank Math SEO PRO 3.0.123 Backdoors WordPress Sites
Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection
CISA Flags dcm4chee Archive Flaws and Unpatched EseeCloud Cameras
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
California Student Records Exposed in ETS SFTP Breach
Change Healthcare Data Breach Class Action Lawsuits Update
Cybersecurity
Change Healthcare Data Breach Class Action Lawsuits Update
Change Healthcare, a major healthcare technology company, suffered a massive data breach in February 2024, exposing the personal and medical information of an estimated 100 ...
Change Healthcare Data Breach Letter: What You Need to Know and How to Protect Yourself
News
Change Healthcare Data Breach Letter: What You Need to Know and How to Protect Yourself
Many in the Ozarks have received letters from Change Healthcare notifying them of a data breach. The letter details the breach, which occurred in February, ...
Disney’s Slack Data Breach Forces Disney’s to Ditch Slack
News
Disney’s Slack Data Breach Forces Disney’s to Ditch Slack
Disney is severing ties with Slack after a major data breach exposed sensitive company information, highlighting the growing cybersecurity threat landscape.
DFA Data Breach: Cybersecurity Issues Put 28 Million Passports at Risk
News
DFA Data Breach: Cybersecurity Issues Put 28 Million Passports at Risk
The Department of Foreign Affairs (DFA) in the Philippines faces a potential DFA data breach affecting over 28 million passport holders due to a lack ...
38,000 Tools Shoppers Compromised in Total Tools Data Breach
News
38,000 Tools Shoppers Compromised in Total Tools Data Breach
Australian hardware retailer Total Tools has confirmed a data breach affecting 38,000 customers, potentially exposing sensitive information including names, login details, and credit card information.
Harvey Nichols Data Breach: High-End Retailer Confirms Customer Data Exposure in Cyberattack
News
Harvey Nichols Data Breach: High-End Retailer Confirms Customer Data Exposure in Cyberattack
High-end British department store Harvey Nichols has confirmed a data breach affecting its customers, exposing personal information including names, addresses, phone numbers, and email addresses. ...
What is Secure by Design? A Guide for Enterprise Businesses
Application Security
What is Secure by Design? A Guide for Enterprise Businesses
Secure by Design is a philosophy that emphasizes building security into the very core of software development, from the initial conceptualization to deployment and beyond. ...
Dr.Web Suffers Major Data Breach, Disconnects All Servers
News
Dr.Web Suffers Major Data Breach, Disconnects All Servers
Dr.Web, A Cybersecurity Firm Was Targeted in a Cyberattack Resulting in Data Breach
Vanilla Tempest Hackers Use INC Ransomware to Target Healthcare
Cybersecurity
Vanilla Tempest Hackers Use INC Ransomware to Target Healthcare
A recent report from Microsoft reveals that a ransomware affiliate known as Vanilla Tempest has been observed using the INC ransomware to target U.S. healthcare organizations.
Compass Group Hit by Medusa Ransomware
News
Compass Group Hit by Medusa Ransomware
The Compass Group, a leading global food services company headquartered in Sydney, has confirmed a significant cyberattack targeting its systems.
German Radio Station Hit by Cyberattack: "Emergency Tape" Plays On as Hackers Demand Ransom
Cybersecurity
German Radio Station Hit by Cyberattack: “Emergency Tape” Plays On as Hackers Demand Ransom
Radio Geretsried, a local radio station in Bavaria, has been forced to broadcast music from emergency backups after a ransomware attack crippled its systems.
Hunters International Claims Breach of ICBC London, Threatens Data Leak
News
Hunters International Ransomware Claims Breach of ICBC London, Threatens Data Leak
The ransomware group Hunters International has claimed responsibility for a data breach at the London branch of the Industrial and Commercial Bank of China (ICBC), ...
Data Breaches Surge to Three-Year High in Australia: A Growing Threat to Privacy and Security
Cybersecurity
Data Breaches Surge to Three-Year High in Australia: A Growing Threat to Privacy and Security
Data Breaches Surge to Three-Year High in Australia
23andMe to Pay $30 Million in Class Action Settlement for Data Breach Exposing 6.4 Million Customers
News
23andMe to Pay $30 Million in Class Action Settlement for Data Breach Exposing 6.4 Million Customers
DNA testing giant 23andMe has agreed to pay $30 million to settle a class-action lawsuit stemming from a data breach that compromised the personal ...
FlyCASS Cockpit Security Breach: A Case Study of SQL Injection and its Impact on Critical Infrastructure
Blog
FlyCASS Cockpit Security Breach: A Case Study of SQL Injection and its Impact on Critical Infrastructure
The recent discovery of a critical SQL injection vulnerability in the FlyCASS cockpit access security system should serve as a stark reminder for enterprise businesses: cybersecurity ...
This Week In Cybersecurity: 9th September to 13th September
Cybersecurity
This Week In Cybersecurity: 9th September to 13th September
Avis has reported a data breach involving unauthorized access to its business application, exposing customer names and potentially sensitive information.
What is a Whaling Phishing Attack?
Blog
What is a Whaling Phishing Attack?
Whaling phishing, also known simply as whaling, is a highly targeted and sophisticated form of phishing attack that specifically targets high-level executives within an organization, such ...
Veeam Backup & Replication RCE Flaw: A Looming Threat for Enterprises
News
Veeam Backup & Replication RCE Flaw: A Looming Threat for Enterprises
A critical vulnerability, CVE-2024-40711, affecting Veeam Backup & Replication (VBR), has emerged as a significant threat to enterprises, with ransomware gangs poised ...
Cicada3301 Ransomware with New Linux Encryptor: A New Threat To VMware ESXi Systems
Blog
Cicada3301 Ransomware with New Linux Encryptor: A New Threat To VMware ESXi Systems
A new ransomware-as-a-service (RaaS) operation named Cicada3301 has emerged, posing a significant threat to businesses worldwide. The group has already claimed 19 victims on its ...
1.7 Million People Hit in Massive Credit Card Data Breach: What to Do Now?
News
1.7 Million People Hit in Massive Credit Card Data Breach: What to Do Now?
A major credit card data breach has impacted nearly 1.7 million individuals, raising concerns about the security of sensitive financial information.
Application Security
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
CVE Vulnerability Alerts
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
Cybersecurity
Conduent Agrees to $80M Settlement Over Breach of 62M People
Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Application Security
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Hunters International Claims Ransomware Attack on Tata Technologies: 1.4TB Data Breached
Hunters International ransomware claims responsibility for a major attack on Tata Technologies, stealing 1.4 TB of data and threatening to release it.
Black Basta and Cactus Ransomware: Shared Tactics and BackConnect Malware Connection
Black Basta and Cactus ransomware groups share similar tactics and use BackConnect malware, highlighting the need for robust cybersecurity measures in enterprise businesses.
Cisco Warns of BroadWorks Flaw Exposing Credentials
Cisco warns of a BroadWorks flaw that could allow unauthenticated attackers to access sensitive credentials. Users are advised to implement security measures.
Broadcom Fixes Three VMware Zero-Days Exploited in Attacks
Broadcom fixes three critical VMware zero-days exploited in attacks, enabling attackers to escape virtual machine sandboxes. Immediate patching is advised.
Major Data Breach at Lost & Found Tracking Site Exposes Over 800,000 Records
A massive data breach at Lost & Found, a German travel tracking firm, exposed over 800,000 records, including passport scans and driver's licenses, raising serious ...
Polish Space Agency Suffers Cyberattack, Takes Systems Offline
The Polish Space Agency (POLSA) disconnected its systems after a weekend cyberattack. The agency is working with national CSIRT teams to restore services and investigate ...
New Polyglot Malware Targets Aviation and Satellite Communication Firms
A new polyglot malware, Sosano, targets aviation and satellite communication firms in the UAE, enabling remote command execution and persistent access on infected devices.
Eleven11bot: New Botnet Infects 86,000 Devices for DDoS Attacks
The Eleven11bot botnet has infected over 86,000 IoT devices, primarily focusing on security cameras and NVRs to launch DDoS attacks globally.
Tracking Stingrays: How Rayhunter Shields Your Mobile Privacy
In this episode, we dive into Rayhunter—an open source tool from the EFF designed to detect Stingray devices (cell-site simulators) that compromise your mobile privacy. ...
Outsourcing Cybersecurity Could Save Your Company Millions – Here’s How
The digital landscape is a battlefield, with cyberattacks growing in both frequency and sophistication. Businesses of all sizes, from small enterprises to large corporations, are ...
AI-Generated Video of YouTube’s CEO Used In Phishing Attack
BackConnect, Microsoft Teams, & Social Engineering—How Ransomware is Adapting
The ransomware landscape is shifting, and Black Basta and Cactus are at the center of it. In this episode, we break down the connections between ...
BianLian Ransomware: Shadow Data Extortion Group
The BianLian ransomware group represents a significant and growing threat to organizations worldwide. Operating with precision and stealth, they have targeted critical infrastructure and private ...
OnlyFans Cyberattacks: Fake CAPTCHAs and Malware Distribution Threaten Users
OnlyFans users are targeted by sophisticated phishing attacks deploying fake Cloudflare CAPTCHAs and malware-laden links, distributing keyloggers and ransomware. Urgent security measures are needed.
Vo1d Botnet Surpasses 1.59 Million Infected Android TVs Across 226 Countries
The Vo1d botnet has infected over 1.59 million Android TVs across 226 countries, enhancing its stealth and operational capabilities significantly.
ClickFix Attack Deploys Havoc C2 via Microsoft SharePoint
A new ClickFix attack is exploiting Microsoft SharePoint to deploy the Havoc framework, tricking users into running malicious PowerShell commands.
CISA Tags Windows and Cisco Vulnerabilities as Actively Exploited
CISA warns that critical vulnerabilities in Cisco and Windows systems are actively exploited, urging federal agencies to secure networks by March 23, 2025.
Trinity Ransomware: The Enigma of the .trinitylock
Overview: Known Aliases of Trinity Ransomware: Trinity Ransomware. Possible links to 2023Lock and Venus ransomware, implying potential shared infrastructure or development. Country of Origin: Not ...
Freddie Mac Data Breach: Social Security Numbers Compromised
Freddie Mac confirms a significant data breach exposing customer names and Social Security numbers. The extent of the breach and its cause remain under investigation. ...
Belgian Intelligence Service Breach: Chinese Hackers Under Investigation
Belgian authorities investigate a potential Chinese state-sponsored cyberattack on its State Security Service (VSSE), compromising sensitive data and emails between 2021 and 2023. The breach ...