A data breach at credit verification firm 700Credit exposed names, addresses, and Social Security numbers. The FTC has accepted a novel consolidated breach filing to spare thousands of dealerships, but state-level notification headaches remain.
Microsoft Defender XDR suffered a significant service disruption yesterday. The outage blocked access to key security features like alerts and endpoint management before being fully mitigated.
Google’s December Android security bulletin patches 107 vulnerabilities, including two high-severity zero-days that were under active exploitation. The update also addresses seven critical-severity bugs, four in the kernel. Users are urged to update immediately.
Cybersecurity researchers found three critical vulnerabilities in the widely used PickleScan tool, each with a severity score of 9.3. The flaws, patched in September 2025, allowed attackers to bypass security scans and upload malicious machine learning models.
The threat landscape is moving faster than human-led security teams can manage. New data shows a staggering percentage of breaches are from known, unpatched flaws, while attackers exploit vulnerabilities with alarming speed. The old playbook is broken.
Upbit experienced a major security breach resulting in $30 million in losses, primarily affecting Solana-based tokens. The hack occurred just hours after parent company Dunamu announced a massive $10.3 billion acquisition by tech giant Naver. The exchange has suspended all deposits and withdrawals w
Hackers are using extremely realistic fake Windows security update screens to trick users into installing malware. The attacks employ steganography to hide malicious code within PNG images and use psychological pressure tactics. Security researchers confirm these ClickFix campaigns are bypassing cur
Security researchers have uncovered a new wave of ClickFix attacks using fake Windows security update screens. The attacks deploy credential-stealing malware through sophisticated techniques including steganography. Both individual and business users need to be aware of these dangerous social engine
Microsoft is implementing major security changes to Entra ID that will block external scripts during authentication. The update rolls out globally starting mid-to-late October 2026 and affects browser-based sign-in experiences.
Several London councils have been targeted in coordinated cyberattacks, causing IT system failures and service disruptions. Hackney Council raised its cyber security threat to critical level as experts warn about ransomware risks and data integrity concerns affecting frontline services.
