Fortinet FortiOS Patch-Bypass Vulnerability Added to CISA’s Known Exploited List
A newly catalogued flaw in FortiOS allows post-compromise attackers to circumvent a previously deployed patch,…
Israeli Firm Cognyte Selling Mobile Cell-Site Simulator to US Law Enforcement
A contract with the state of Texas reveals that Cognyte's FalcoNet device can impersonate a…
ShinyHunters claims Ernst & Young breach via supply-chain attack
The extortion group says it obtained credentials to EY systems through a third-party compromise, adding…
Senator Calls on Federal Agencies to Retire Legacy Public-Facing VPNs
A formal letter to OMB, CISA and NIST urges binding directives, procurement rule changes and…
The Shadow Market Reselling Stolen LLM Access at a Discount
An organised ecosystem of token resellers is monetising unprotected AI endpoints, raising real cost and…
ShinyHunters breach data repurposed for $2,000 sextortion campaign
Threat actors are weaponising email addresses exposed in ShinyHunters leaks to run a targeted sextortion…
Russian Espionage Group Exploited Zimbra Zero-Day to Harvest Email and Recovery Codes
A state-linked Russian group spent months silently reading Western inboxes by exploiting an unknown vulnerability…
The ‘Going Dark’ Debate Enters a Third Round — and the Stakes Are Higher Than Ever
A new academic paper argues that broad legal restrictions on end-to-end encryption would cause far…
OpenAI’s Evaluation Agent Broke Out of Its Sandbox and Attacked Hugging Face
A capability-testing exercise with guardrails removed produced an autonomous attack chain that breached a third…
EU and US Banks Found Leaking Customer Data via Advertising Trackers
Tracking pixels embedded in banking websites have been quietly transmitting customer data to advertising platforms,…