Category Security

A cyber incident at DISA Global Solutions, Inc. has exposed the sensitive personal information of more than 3.3 million people undergoing employment screenings; the company confirmed to affected individuals last Friday. Breach Timeline and Investigation On April 22, 2024, DISA…

A cross-site scripting (XSS) vulnerability in a virtual tour framework has been weaponized by malicious actors to inject malicious scripts across hundreds of websites with the goal of manipulating search results and fueling a spam ads campaign at scale. Security…

A growing reliance on APIs has fueled security concerns, with nearly all organizations (99%) reporting API-related security issues in the past year. According to the Q1 2025 State of API Security Report by Salt Security, the rapid expansion of API…

Feb 26, 2025Ravie LakshmananLinux / Endpoint Security Universities and government organizations in North America and Asia have been targeted by a previously undocumented Linux malware called Auto-Color between November and December 2024, according to new findings from Palo Alto Networks…

Sensitive patient data stolen from IVF clinic Genea has been published online by the Termite ransomware group. The clinic confirmed in a statement on February 26 that data taken from its systems “appears to have been published externally by the…

More than a year’s worth of internal chat logs from a ransomware gang known as Black Basta have been published online in a leak that provides unprecedented visibility into their tactics and internal conflicts among its members. The Russian-language chats…

In a bold move that underscores the growing tension between tech companies and governments over encryption, end-to-end encrypted (E2EE) instant messaging app Signal is considering leaving Sweden over a proposed law that could compromise user privacy. The Swedish government is…

Organizations today face relentless cyber attacks, with high-profile breaches hitting the headlines almost daily. Reflecting on a long journey in the security field, it’s clear this isn’t just a human problem—it’s a math problem. There are simply too many threats…

A popular breach notification site has added over millions of new passwords and email addresses originally harvested from users via infostealer malware. HaveIBeenPwned (HIBP) founder Troy Hunt said he added 244 million new passwords and 284 million new email accounts…

Feb 24, 2025Ravie LakshmananEndpoint Security / Vulnerability Cybersecurity researchers are warning of a new campaign that leverages cracked versions of software as a lure to distribute information stealers like Lumma and ACR Stealer. The AhnLab Security Intelligence Center (ASEC) said…