SecurityWeek (1 hour ago)
The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.
Read the full story on SecurityWeek.
Tech whizz’ internet-accessible Synology NAS gets bit by transomware attack — security updates 18 months out of date in a series of catastrophic errors
Proton Drive, Docs, Mail, Calendar, and VPN access for a month, for just a dollar
US midterm elections are just days away, and an attack on the FEC has left millions of dollars in donations undeclared.
Governments can make it harder to get around internet restrictions, but eliminating the workarounds is another matter entirely.
The trick at the center of this campaign is not an exploit. It is a feature. Pluto Security’s analysis of a cryptominer operation on the Hugging Face Hub shows that the attacker never needed to break anything. The model-loading library runs the Python that infects a machine exactly as designed.
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act.
Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.
Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote Access SSL VPN service.
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.
CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.
71 active sources
26 Turkish · 45 English
All sources
