Section
Breaches, vulnerabilities, ransomware, privacy and the defenders working to stop them.
22 stories
Featured
Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. [...]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. [...]
Mischievous Behavior Detected 🔎 It all started when I discovered an anonymous user was...
Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the…
Revolut confirms customer data breach through fake government requests
I wasn't going to write a normal launch post. You know the format. Every "I built X" post on this...
Revolut confirms customer data breach, falling for fake government requests
The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. [...]
The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, saying the attackers gained access using…
Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on…
Threat actors are abusing trusted AI platforms to host malicious content, poison search results, and trick users into installing malware. Huntress examines campaigns targeting AI…
GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. [...]
Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious link.…
A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. [...]
Three fresh cloud IPs, given to no one, logged 3,480 unsolicited connection attempts from 860 hosts in 45 minutes. First contact came 48 seconds after boot, and 1,085 login…
When I was about 11 years old, my best friend and I were playing during recess at school, and I was carrying him around on my back, presumably pretending to be a multipart attack…
Illustration generated for this article. Every prop is a finding: the sack of blank name badges is...
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
Isar Aerospace reaches orbit and deploys payloads on second flight
Private German rocket makes history, reaches orbit from European soil
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
