Multiple Critical Vulnerabilities Exploited Across WordPress, SonicWall, SharePoint and AI Services
A cluster of actively exploited flaws this week demonstrates how minimal attacker effort can yield…
Category: Security Incidents
Leaked Altman Email Reveals OpenAI’s Open-Source Strategy Was Partly About Blocking Rivals
A 2022 internal email from Sam Altman, surfaced in litigation, shows OpenAI weighed releasing a…
Data Exposure, Infrastructure Intrusions, and the Limits of Institutional Awareness
A cluster of security incidents highlights persistent gaps in data governance, third-party risk, and government…
US Election Security Infrastructure Under Political Pressure as Evidence Claims Collapse
Expert and official pushback on Trump's primetime election fraud speech highlights deepening tensions over the…
Two Scattered Spider members jailed over Transport for London breach
A UK court sentences an 18-year-old and a 20-year-old to five and a half years…
Compromised Credentials Now the Leading Entry Point for Ransomware, Sophos Research Finds
Identity-based attacks have overtaken software vulnerabilities as the primary method ransomware actors use to gain…
CISA’s Own GitHub Leak Offers a Candid Lesson in Secrets Management
A six-month exposure of AWS GovCloud credentials and plaintext passwords in a public repository has…
Progress Software tells ShareFile customers to shut down servers amid undisclosed security threat
Progress has issued an emergency directive instructing organisations running ShareFile Storage Zone Controllers to manually…
jscrambler npm Package 8.14.0 Delivers Rust-Based Infostealer at Install Time
A compromised release of the jscrambler npm package executes malicious native binaries automatically during installation,…
CISA Built Its Incident Response Playbook Mid-Breach After Contractor Leaked Credentials on GitHub
The US cybersecurity authority's own credential exposure incident revealed a gap in its internal playbook…