News
Plain-English guides on web security, compliance, and keeping your clients protected.
U.S. prosecutors say a persistent Windows device identifier helped investigators connect an alleged Scattered Spider member to a 2025 intrusion at a luxury jewelry retailer, according to a federal com...
Read article →Researchers have disclosed a now-fixed vulnerability in Writer, an enterprise generative AI platform, that could have allowed attackers to cross tenant boundaries and take over user accounts with only...
Read article →Accenture has confirmed it experienced a security incident after a threat actor began advertising what they claimed was stolen company data for sale on a cybercrime forum.The attacker, using the name...
Read article →Eight people who say they were targeted in Greece’s so-called Predatorgate affair have filed a civil lawsuit against the Athens-based spyware maker behind the surveillance tool, seeking a total of €8...
Read article →A U.S. local government entity reportedly paid $1 million to the Kairos cyber extortion group after attackers threatened to release stolen data from a breach tied to May 2025, according to Ransom-ISAC...
Read article →Security researchers say attackers are already taking advantage of a critical vulnerability in Gitea that can let them bypass authentication on exposed instances and reach private repositories and sen...
Read article →Software supply chain security has long focused on what ends up in an application: packages, dependencies, and the paths those components take into production. As AI coding tools become part of everyd...
Read article →A newly identified flaw nicknamed GitLost may let an attacker access information from private GitHub repositories by abusing an organization’s public issue workflow. According to the report, the attac...
Read article →A new survey from DigiCert suggests that many organizations are moving ahead with enterprise AI deployments faster than they are putting controls around them.According to the digital identity company,...
Read article →Cisco Talos says a China-linked threat group identified as UAT-7810 is continuing to grow its Operational Relay Box (ORB) infrastructure by compromising internet-facing networking gear, with unpatched...
Read article →Security researchers say a suspected China-aligned threat cluster has been abusing flaws in Roundcube webmail to target physics and engineering departments at universities in the United States and Can...
Read article →Security researchers have identified a hidden authentication mechanism in several Tenda router firmware builds that could let a remote attacker reach the device’s web management interface with adminis...
Read article →