BdThemes Supply-Chain Attack Shows How Remote Content Can Turn Trusted WordPress Plugins into BackdoorsThe supply-chain compromise affecting the BdThemes WordPress plugin ecosystem demonstrates how attackers can compromise thousands of websites without modifying the softwa…
Polish Energy Plant Attack Shows Why a Private APN Must Never Be Treated as a Trusted NetworkThe cyberattack against a small Polish combined heat-and-power plant provide…
Independent Solutions Wealth Management Breach Highlights the Growing Cyber Risk Around Financial Services Supply ChainsThe data breach disclosed by Independent Solution…
CISA Warning on SonicWall SMA1000 Flaws Shows How VPN Appliances Are Becoming Ransomware Entry PointsCISA’s confirmation that ransomware groups are exploiting two vulner…
LexisNexis Service Shutdown Highlights the Security Risk Created by Third-Party Hosted InfrastructureLexisNexis’ decision to take several i…
CISA Warning on Actively Exploited Progress LoadMaster Flaw Highlights the Growing Risk Around Edge InfrastructureCISA’s warning that attac…
AI Assistant’s Gym Website Hack Shows Why Autonomous Agents Need Security Boundaries, Not Just InstructionsThe reported incident in which a…
Suisun City Cyberattack Shows Why Municipal Cybersecurity Is Now a Public Safety IssueThe cyberattack that forced Suisun City, California, …
Framework Data Breach Shows Why Analytics Platforms Can Become High-Value Targets for Customer Data TheftThe data breach affecting Framewor…
New CSS Attacks Show How a Malicious Email Can Break Out of the Message and Attack the Webmail InterfaceNew research into the security of H…
Metabase Zero-Day Exploitation Shows Why Analytics Platforms Must Be Treated as Privileged Data InfrastructureThe active exploitation of a …
Nearly 800 Malicious npm Packages Show How Software Dependencies Are Becoming Malware Delivery InfrastructureThe discovery of hundreds of m…
Nearly 800 Malicious npm Packages Show How Software Dependencies Are Becoming Malware Delivery InfrastructureThe discovery of hundreds of m…
CISA Adds Actively Exploited Progress LoadMaster RCE to KEV CatalogCISA’s addition of CVE-2026-8037 to its Known Exploited Vulnerabilities …
Unlimited Technology Systems Breach Exposing 3.8 Million Patients Highlights the Growing Risk of Healthcare Data ConcentrationThe data brea…