Original reporting and analysis on vulnerabilities, threats, incidents, cybersecurity products, trends, surveys, research, case studies, technology partnerships, and breaking industry news.
Filter by topic
- Vulnerabilities
- Threats
- Incidents
- Products
- Trends
- Surveys
- Research
- Case Studies
- Partnerships
- Breaking
-
Researchers find 319 Chrome extensions hijacking search traffic
Socket links the extensions to 13.4 million reported installs.
-
Researcher says Claude Dispatch flaw lets browser extensions run code
Anthropic reportedly closed the report; no fix has been announced.
-
Microsoft Paint flaw fix may not reach PCs through Windows Update
The Store-delivered fix is easy to miss, reports say.
-
SMBC Consumer Finance says up to 320,118 people hit by breach
A guarantee-system intrusion exposed income and driver’s license details.
-
Gnosis Pay discloses legacy-system breach affecting card customers
The company says customer funds were unaffected.
-
Ransomware encrypts Queens Public Library systems across 66 branches
Computers, Wi-Fi and checkout machines are down; branches remain open.
-
Singapore Airlines says Amadeus breach touched 46,000 bookings
About 620 records also exposed contact and travel-document details.
-
Alleged Nomad Bridge exploiter appears in US court after extradition
He faces money laundering charges carrying up to 20 years.
-
Synology warns of ransomware targeting outdated DSM devices
Attackers exploit a flaw fixed in December 2024.
-
Mandiant: stolen AI access drives LLMjacking bills up to $1 million
Attackers hijacked enterprise AI access, running up six-figure daily bills.
-
SAP flaws now exploited within one to three days of patches
Onapsis and Recorded Future measure a sharply shrinking exploit window.
-
Chinese-language framework targets Flowise AI servers with ‘hello’ probes
Era Security counted 703 exposed Flowise instances lacking authentication.