Cybersecurity, cryptography, zero-trust architecture, and the battles securing our digital lives.
103 articles
Two critical vulnerabilities in Nextcloud's Collabora CODE Server and Arista VeloCloud Orchestrator are under active attack, with federal civilian agencies told to fix them within three days.
The Japanese game publisher says attackers accessed email addresses and account metadata worldwide, changed 196 login passwords and reached online store data on 19 accounts in Japan.
The PHP project shipped fixes for two 9.2 severity runtime flaws after AI assisted audits produced a working exploit and attack traffic climbed from thousands to millions.
IwaiCosmo Securities says hackers used a flaw at outsourced operator Trade Works to place orders in seven accounts, execute five trades, and expose data on 4,975 customers.
OVHcloud says an attacker took over a developer GitHub login and swapped installers in five command line tool versions, exposing users to secret theft for 94 minutes before a customer alert.
A memory corruption bug in Broadcom's WPS code, unpatched since at least 2010, gives anyone in Wi-Fi range root access to roughly 1.56 million Belgian gateways and many more worldwide.
Anne Arundel County, Maryland, says intruders copied files from a limited set of systems after an August 28 incident, while the Rhysida gang offers 2.6TB of data for 25 BTC.
A single stolen password gave an intruder four months inside an ETS file transfer server, and the resulting haul covers California students enrolled as far back as 2006.
At least 300 Intermarche and Netto outlets plus more than 100 Cooperative U stores were caught in the refrigeration hack, with the Paris prosecutor investigating.
Operation Lonestar Roundup led to 14 charges, two arrests and the seizure of about 187 devices as authorities moved against Texas homes that hosted laptops for North Korean remote workers.
Danish authorities say a threat actor abused a small vendor's lawful CPR access for weeks, retrieving data on 8.8 million people before an unusually large invoice exposed the activity.
Hackers remotely reprogrammed Danfoss refrigeration controllers to force continuous defrost cycles, driving temperatures to 50 degrees Celsius and destroying fresh and frozen stock at over 300 French supermarkets.
A ransomware strike on SoftBank subsidiary IDC Frontier left 495 Japanese organisations offline and pushed JR East, Bookoff and others to disclose possible exposure of millions of customer records.
The U.S. Justice Department and FBI said the seizure of seven domains used by Beijing-based Integrity Technology Group disrupts a campaign that hit power companies, airports and universities.
Attackers stole an employee login by posing as a trusted contact, reached a third party platform and then pushed a rogue message through the ASOS app, exposing detailed shopper profiles.
Police in Seoul opened a 28 member investigation into breaches at seven lenders while President Lee Jae Myung said AI agents may have been used to steal data belonging to more than 68,000 customers.
The Cyber Security Agency of Singapore says an unauthenticated path traversal bug in Fortinet's FortiMail can let attackers write files on exposed appliances.
The company has closed product flaw intake for its OSS vulnerability reward program until at least early 2027, citing automated submissions that reviewers cannot verify at scale.
President Lee Jae Myung ordered a full investigation on October 4, 2026, after data leaks spread from Shinhan Bank to at least seven banks and financial firms, with regulators suspecting AI tools.
Officers in Alicante detained a Romanian teenager accused of running a ransomware crew tied to roughly 1,000 attacks, while police seized five servers and a leak site.
The ChatGPT maker says a sweeping review of roughly 50 petabytes of agent logs and a pause on frontier model training will take months to complete after breaches at Hugging Face and Services Australia.