CYBER ATTACKS

Cyber Attacks

Binance Hit by $6.3 Billion Hack, the Largest Crypto Theft on Record

Sneha Gupta - 0
Binance disclosed a $6.3 billion security breach, the largest cryptocurrency theft on record, with blockchain investigators linking the attack to North Korea's TraderTraitor hacking group.
Cyber Attacks

Japanese Internet Giant GMO Hit by Ransomware Threat, Refuses Multimillion-Dollar Demand

Sneha Gupta - 0
GMO Internet, one of Japan's largest ISPs, refused a ransomware demand that started at $50 million and was cut to $1 million after attackers compromised tens of thousands of customer servers tied to its Onamae.com Desktop Cloud trading service.

Hackers Unleash Autonomous AI Agents on Company Websites, Breaching Over 100 Businesses

Ransomware Gangs Are Exploiting a Palo Alto VPN Bug to Walk Past MFA

Stolen ConnectWise Credential Let Hackers Into 173 Microsoft 365 Tenants

Attackers Are Already Probing a Critical SonicWall SMA 1000 Flaw Days After the Patch

Security News

New Way of Work

AI Coding Tools Leaked Over 13,000 Internal Screenshots to Public GitHub Repositories

Sneha Gupta - 0
Security researchers at Glow found that AI coding assistants were uploading screenshots to public repositories as a workaround for a missing feature, exposing billing systems, treasury consoles and unreleased products at more than 300 organizations.
General

Critical Keycloak Flaw Let Attackers Reset Any Password Without Email Access

Sneha Gupta - 0
A critical bug in Keycloak's password reset flow, tracked as CVE-2026-18963 with a CVSS score of 9.1, could have let attackers take over any account without ever accessing the victim's email.

Four-Year Study Finds Over 9,300 Exposed AWS Keys Are Still Active, Hundreds With Full Admin Rights

Critical GitLab Vulnerability Already Under Attack Days After Patch Release

Microsoft Patches Maximum-Severity Entra ID Flaw Already Exploited in Attacks

CVSS is Dead. CISA Just Made It Official.

Subscribe

* indicates required

Intuit Mailchimp

Security Standards

Documents

DNS4EU – A Whitepaper

Amit Gupta - 0
DNS4EU is a European Union initiative aimed at strengthening digital sovereignty and cybersecurity. Unlike foreign DNS services that often lack GDPR compliance and transparency,...

The real Cost Of A Free Wi-Fi Connection

Bug Bounty Programs: March 2022

Regional

New Way of Work

AI Coding Tools Leaked Over 13,000 Internal Screenshots to Public GitHub Repositories

Sneha Gupta - 0
Security researchers at Glow found that AI coding assistants were uploading screenshots to public repositories as a workaround for a missing feature, exposing billing systems, treasury consoles and unreleased products at more than 300 organizations.

CVSS is Dead. CISA Just Made It Official.

The U.S.  SEC takes a strong stance on Cybersecurity Risk Management, Incident Disclosure, Strategy, and Governance by Public Companies

Vulnerabilities

Critical Brotli Flaw Exposes Node.js and Other Software to Remote Code Execution

Sneha Gupta - 0
A critical flaw in Google's Brotli compression library, now under active exploitation, affects Node.js and a wide range of other software that decompresses untrusted data.

Two Critical PHP Flaws Known as “PHP2Shell” Trigger Global Patching Scramble

Sneha Gupta - 0
Two critical PHP bugs nicknamed PHP2Shell let attackers run code on servers without logging in. Patches are out, exploitation is active, and several European governments took sites offline as a precaution.

Certificate Authority eMudhra to Exit Global SSL/TLS Business After Weak Encryption Keys Discovered

Sneha Gupta - 0
Certificate authority eMudhra will exit the SSL/TLS business after researchers found eight intermediate certificates signed with guessable private keys.

Arista Patches Actively Exploited Zero-Day in VeloCloud SD-WAN Management Platform

Sneha Gupta - 0
Arista has patched a critical, actively exploited SQL injection flaw in VeloCloud Orchestrator that let low-privileged users seize full administrative control of SD-WAN networks.

PHP2Shell Vulnerabilities Prompt Emergency Patches Across Nearly Every PHP Version

Sneha Gupta - 0
PHP has rushed out emergency patches for two critical remote code execution flaws nicknamed PHP2Shell, which affect almost every version of the language released since 5.4. Cloudflare and the firm watchTowr have both reported early exploitation attempts even before most servers could be updated.

Data Breaches

Japanese Internet Giant GMO Hit by Ransomware Threat, Refuses Multimillion-Dollar Demand

Sneha Gupta - 0
Cyber Attacks
GMO Internet, one of Japan's largest ISPs, refused a ransomware demand that started at $50 million and was cut to $1 million after attackers compromised tens of thousands of customer servers tied to its Onamae.com Desktop Cloud trading service.

LATEST ARTICLES

123...16Page 1 of 16

Most Popular

Load more

Stay Connected

1,321FollowersFollow
61,453SubscribersSubscribe

Write to Us

Want to report a concern or publish a security incident on our channel?

Write to us