Blog
Cybersecurity
Breaches, vulnerabilities and the state of security.
Cybersecurity posts, page 2 of 3
- 4 min read
Dark Web Service Nexus Sold 153 Million Stolen Driver's Licenses
A dark web identity theft service leaked 153 million driver's license scans traced to verification firm IDScan.net.
- 4 min read
AI Agents Breached a Company's Network in Under 10 Hours, Unit 42 Says
Palo Alto Networks' Unit 42 says an attacker used AI agents to go from zero access to root credentials in under 10 hours, then had the AI write up the findings.
- 4 min read
Cisco Nexus 9000 Flaw Lets Unauthenticated Attackers Get Root Access
A 9.8-severity Cisco Nexus 9000 bug lets anyone who can reach two TCP ports run code as root with no login at all.
- 4 min read
Thomson Reuters Discloses Court Records Breach Across US and Canada
A breach of Thomson Reuters' C-Track platform exposed Social Security numbers and sealed files from courts in 11 US states and Ontario.
- 4 min read
Two SonicWall SMA1000 Zero-Days Are Already Being Exploited
SonicWall's SMA1000 appliances face two zero-days, one rated CVSS 10.0, being chained for remote code execution without valid credentials.
- 4 min read
JFrog Artifactory Auth-Bypass Bug Is Being Exploited Days After Patch
A critical JFrog Artifactory flaw lets attackers mint admin tokens with no login, and exploitation began within days of the fix shipping.
- 3 min read
PaperCut Ships a Second Emergency Patch for an Actively Exploited Flaw
PaperCut rushed out a second emergency patch after researchers broke its first fix for a bug already under attack.
- 4 min read
Ransomware Gang Threatens to Leak Berlin Government Data
Rhysida is threatening to leak 5.79 terabytes of Berlin state government data after officials refused its 30 bitcoin ransom.
- 4 min read
ShinyHunters Breach at McKesson Exposes 284 Million Health Records
Voice-phishing attackers breached McKesson's Salesforce and Snowflake systems, claiming 284 million patient records and a $55 million ransom.
- 4 min read
Australia Arrests Two Alleged Leaders of the Shai-Hulud Worm Campaign
Australian and US police charged two Western Australian men accused of running TeamPCP, a group blamed for a worm that hit over 1,000 firms.
- 4 min read
Critical Gitea Flaw Is Being Exploited as CISA's Deadline Hits Today
A critical, actively exploited Gitea bug lets anyone who can register an account hijack a self-hosted Git server in seconds.
- 4 min read
A Phishing Kit Uses AI Voice Calls to Unlock Stolen iPhones
AnonyMousKIT uses AI-generated voice calls posing as Apple support to trick stolen-iPhone owners into giving up their passcodes.
- 4 min read
CISA Gives a 72-Hour Deadline on a Months-Old Oracle Bug
CISA ordered federal agencies to patch a maximum-severity Oracle WebLogic flaw within 72 hours, though a fix has existed since January.
- 4 min read
Head Mare Exploits TrueConf and Zimbra Flaws as CISA Deadlines Land
A hacktivist group is exploiting two unpatched video-conferencing and email-server flaws, with US federal patch deadlines landing this week.
- 5 min read
China-Linked Hackers Mass-Exploit Critical VMware vCenter Flaw
A suspected China-nexus actor breached 361 vCenter servers in 47 countries within days of a critical, unpatched flaw going public.
- 4 min read
A Webpage Can Trick Grok Into Leaking Your Chat History
A researcher found an unpatched flaw letting any webpage steal a Grok user's chat history and personal details with no click required.
- 4 min read
A Fake Rust Maintainer Poisoned 3 Crates, Then Ran Code at Compile Time
An impersonated crates.io account slipped a typosquatted dependency into arrayref, internment and append-only-vec, running attacker code during cargo build.
- 4 min read
CDN Tsunami: How a Protocol Gap Turns Tiny Requests Into 350x Floods
Researchers found six major CDNs can be tricked into amplifying attacker traffic up to 350x by exploiting the HTTP/3 to HTTP/1.1 translation step.
- 4 min read
French Tax Authority Breach Exposes Data on 678,000 People
Stolen employee credentials let a hacker pull tax and property records on 678,000 French individuals and businesses from DGFiP.
- 4 min read
Unpatched Unisoc Chip Flaw Lets a Video Call Hijack Android's Kernel
A disclosed but unfixed Unisoc modem flaw lets an attacker who already has a foothold take full control of an Android phone's kernel via one video call.
- 4 min read
Cisco ASA and FTD VPN Bug Lets Attackers Crash Firewalls Remotely
A single unauthenticated HTTP request can crash Cisco ASA and FTD firewalls running remote-access VPN, and it's already being exploited.
- 5 min read
Cl0p's Windchill Hack: Shell, Philips, GE, Fiserv Among 50 Hit
Cl0p exploited a PTC Windchill deserialization bug (CVE-2026-12569) to hit nearly 50 firms, but none has confirmed data was actually stolen.
- 4 min read
SAP Commerce Cloud Flaw CVE-2026-58231 Is Being Exploited Now
A maximum-severity SAP Commerce Cloud bug is under active attack just three days after SAP shipped a patch for it.
- 5 min read
CVE-2026-68820: How Lazarus Weaponized a Windows Kernel Bug
A use-after-free flaw in Windows afd.sys let North Korea's Lazarus Group hit SYSTEM level, and CISA set an August 25 patch deadline for federal agencies.