Dark Reading (3 hours ago)
The supply chain attack campaign’s shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
Read the full story on Dark Reading.
A hacker stole a trove of personal information from the Department of Homeland Security (DHS).
An in-depth review of DuckDuckGo Privacy Pro and the features it provides to help users stay secure online.
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.
Attackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched.
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation.
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Interpol’s annual Operation Serengeti, now on its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds.
Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
A common mix of impersonation, domain infrastructure, and trusted software is helping attackers scale Microsoft Teams intrusions across organizations.
71 active sources
26 Turkish · 45 English
All sources
