Ivanti has released security updates to patch a critical Connect Secure remote code execution vulnerability exploited by a ...

The State Bar of Texas is warning it suffered a data breach after the INC ransomware gang claimed to have breached the ...

The openSNP project, a platform for sharing genetic and phenotypic data, will shut down on April 30, 2025, and delete all ...

A vulnerability in Verizon's Call Filter feature allowed customers to access the incoming call logs for another Verizon ...

Oracle has finally acknowledged to some customers that attackers have stolen old client credentials after breaching a "legacy environment" last used in 2017.

A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen from a SpotBugs workflow, which allowed a threat actor to compromise ...

A large-scale ad fraud operation called 'Scallywag' is monetizing pirating and URL shortening sites through specially crafted WordPress plugins that generate billions of daily fraudulent requests.

Over 39 million secrets like API keys and account credentials were leaked on GitHub throughout 2024, exposing organizations ...

Cisco warns admins to patch a critical Cisco Smart Licensing Utility (CSLU) vulnerability, which exposes a built-in backdoor ...

Kidflix, one of the largest platforms used to host, share, and stream child sexual abuse material (CSAM) on the dark web, was ...

A significant spike in scanning activity targeting Palo Alto Network GlobalProtect login portals has been observed, with ...

A RAR file, a fake summons, and a Nietzsche quote—all part of a multi-stage malware chain delivering DCRat & Rhadamanthys.