SecurityWeek (1 hour ago)
The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year.
Read the full story on SecurityWeek.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild.
The social networking site is facing criticism for blocking access to the site, which identifies thousands of ICE agents and other employees working for Homeland Security.
The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation.
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities.
The transparency nonprofit Distributed Denial of Secrets published the archive, which it calls “Icepick,” on Wednesday. It spans DHS and seven of its component agencies, including Immigration and Customs Enforcement and US Customs and Border Protection.
BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks.
The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.
Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.
Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote Access SSL VPN service.
Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.
71 active sources
26 Turkish · 45 English
All sources
