Business ❯ Information Technology

Risk Management

Data Security Cyber Threats Incident Response Supply Chain Security Security Audits Compliance Data Protection Cybersecurity Measures Security Protocols Security Flaws

Huntress Sinkholes $10 Update Domain Behind Signed Adware That Disabled Antivirus on About 25,000 PCs

An unclaimed updater created a cheap route for remote code delivery to thousands of machines with defenses already shut off.

CPUID Hack Redirected CPU-Z, HWMonitor and PerfMonitor Downloads to STX RAT

Trivy Supply-Chain Attack Poisons GitHub Action Tags to Steal CI/CD Secrets

Salesforce Alerts Customers to Experience Cloud Scans After ShinyHunters Claims Data Thefts

Public Google API Keys Found to Unlock Gemini as Google Rolls Out Blocks

Microsoft 365 Copilot Bug Let AI Summarize Protected Emails as Microsoft Monitors Patch

CISA Orders Federal Agencies to Replace Unsupported Edge Devices

1Password Rolls Out Browser Pop-Up to Thwart Phishing on Mismatched Sites

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

ReliaQuest Uncovers Wave of Typosquatted "Zendesk" Sites Targeting Support Teams

RediShell: Critical Redis RCE Triggers Urgent Updates With 60,000 Servers Unauthenticated

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Fortra Patches Critical GoAnywhere MFT Flaw as Researchers Urge Blocking Public Admin Access

Decade-Old Pixie Dust Flaw Still Exposes WPS on Consumer Routers, NetRise Finds

Google Deploys Protections for Gmail AI Summaries to Thwart Phishing Exploit

FBI and CISA Warn of Escalating Ghost Ransomware Threat Exploiting Unpatched Systems

UN Aviation Agency Confirms Data Breach of 42,000 Recruitment Records

Okta Security Flaw Allowed Login Without Password for Long Usernames