The compromise of Coder’s registry infrastructure is a strong reminder that software supply-chain attacks do not always require compromising source-code repositories or poisoning a package at th…
The €500,000 fine imposed by France's data protection authority, CNIL, on Hôpital privé de la Loire provides an important reminder that a data breach is not automatica…
Plex has urged users to update both Plex Media Server and Plex Desktop immediately after releasing fixes for multiple security vulnerabilities. The affected server versi…
The public release of FalconFlank, a proof-of-concept claiming to demonstrate local privilege escalation through CrowdStrike Falcon Sensor, raises an important issue for…
An active malware campaign using fake software download websites to impersonate well-known vendors demonstrates how effective social engine…
A high-severity vulnerability in the widely used All-in-One WP Migration and Backup plugin demonstrates how software intended to protect an…
CISA's addition of seven vulnerabilities to its Known Exploited Vulnerabilities Catalog on September 2, 2026 is significant because the lis…
The discovery of the StreamRat Android banking trojan being distributed through advertisements on Meta platforms highlights how rapidly mal…
The discovery of malicious Apache modules being used to hijack Brazilian government and educational websites highlights a particularly dang…
The active exploitation of CVE-2026-82329 in JFrog Artifactory is a particularly serious software supply-chain risk because attackers are n…
The compromise of approximately 5,000 Dropbox accounts through a flaw involving Lenovo ID is a strong example of how modern authentication …
The actively exploited zero-day vulnerabilities affecting SonicWall SMA1000 appliances deserve immediate attention because secure remote-ac…
The active exploitation of CVE-2026-9586 in Sangoma Switchvox deserves urgent attention because it turns an internet-facing enterprise tele…
The Pocket Bitcoin breach is relatively small by victim count, affecting 291 customers, but the exposed data is unusually sensitive because…
The Aesto Health data breach is significant not only because of its scale but because it again demonstrates how healthcare organizations ac…