Collaborate Disseminate
A new study by NordPass and NordStellar reveals the automotive industry is plagued by weak, reused, and common… Continue reading Smart Cars, Dumb Passwords: Auto Industry Still Runs on Weak Passwords
Compliance automation provider Vanta confirms a software bug exposed private customer data to other users, impacting hundreds of… Continue reading Code Bug at Compliance Firm Vanta Leaks Customer Data to Other Clients
North Face, Cartier, and Next Step Healthcare are the latest victims in a string of cyberattacks compromising customer… Continue reading Cyberattacks Hit Top Retailers: Cartier, North Face Among Latest Victims
Qualys details CVE-2025-5054 and CVE-2025-4598, critical vulnerabilities affecting Linux crash reporting tools like Apport and systemd-coredump. Learn how… Continue reading Linux Crash Reporting Flaws (CVE-2025-5054, 4598) Expose Password Hashes
The US Department of the Treasury has taken action against Funnull Technology Inc. for enabling massive pig butchering… Continue reading US Sanctions Philippines’ Funnull Technology Over $200M Crypto Scam
Iranian Robbinhood ransomware operator pleads guilty to major US city attacks, crippling services in Baltimore, Greenville, and more since 2019. Continue reading Iranian Robbinhood Ransomware Operator Pleads Guilty in US City Attacks
Checkmarx uncovers cross-ecosystem attack: fake Python and NPM packages plant backdoor on Windows and Linux, enabling data theft plus remote control. Continue reading Backdoors in Python and NPM Packages Target Windows and Linux
Quorum Cyber identifies two new NodeSnake RAT variants, strongly attributed to Interlock ransomware, impacting UK higher education and local government. Continue reading Interlock Ransomware Deploys New NodeSnake RAT in UK Attacks
Victoria’s Secret website was down due to a ‘security incident’ impacting online and some in-store services. Get the… Continue reading Victoria’s Secret US Website Restored After Security Incident
A Chinese-language PhaaS platform Haozi is making cybercrime easy with no tech skills needed. Discover how this plug-and-play service facilitated over $280,000 in illicit transactions. Continue reading Chinese Phishing Service Haozi Resurfaces, Fueling Criminal Profits