The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,236 reports across 7 topics, updated hourly.
UK fashion retailer ASOS confirmed a data breach on Tuesday, March 26, 2024, following unauthorized push notifications sent through its mobile application. These notifications, which appeared to be sent by hackers, also claimed that customer data had been stolen…
Security researchers have identified critical vulnerabilities in both LibreOffice and Apache OpenOffice that permit malicious spreadsheets to execute arbitrary code upon opening, bypassing the standard macro warning mechanisms. This exploit allows an attacker to run their code without any prior…
Japanese publishing conglomerate Nikkei disclosed over the weekend that unknown attackers recently breached two employee email accounts. The breach, which occurred recently, involved unauthorized access to these accounts, with one of the compromised accounts subsequently used to send thousands…
Google has halted its bug bounty program for vulnerabilities found in its open-source software products, a change that took effect on October 1. This decision means security researchers can no longer submit reports detailing security flaws discovered in the code…
A former core infrastructure engineer has been sentenced to 32 months in prison for orchestrating a ransomware-style attack that rendered over 3,000 devices on his employer's network inaccessible. The incident occurred at an industrial company based in New Jersey.
Atlassian has disclosed a critical security vulnerability, identified as CVE-2026-21589, affecting eight of its Data Center products. This flaw permits attackers who have not authenticated into the system to read specific files located within the web application's root directory.
The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor from their duties following an incident where a security failure allegedly led to the ShinyHunters data breach, resulting in the theft of personal information belonging to thousands…
A new variant of the ClickFix attack has been identified, employing a novel method to deliver malicious payloads by exploiting the web browser's cache to bypass Windows execution limitations. This attack pattern deviates from traditional methods that involve downloading…
Rejetto HTTP File Server (HFS) instances are currently under active scanning by malicious actors searching for a critical remote code execution (RCE) vulnerability. This flaw, identified as CVE-2026-61500, stems from a weak signing key implementation within the server software.
Microsoft released out-of-band security updates on March 18, 2026, to address a critical vulnerability in Microsoft Exchange Server. This flaw, identified as CVE-2026-96940, carries a high severity rating of 8.8 on the Common Vulnerability Scoring System (CVSS).
Denmark's Central Population Register (CPR) has reported a substantial data breach, compromising the personal information of approximately 8.8 million registered individuals. This incident means that a significant portion of the Danish population, which numbers around 5.9 million, has had…
Dell issued a critical security advisory on March 18, 2024, warning customers to immediately update its System Update (DSU) command-line interface (CLI) deployment tool to address a severe vulnerability. This flaw, identified as CVE-2024-29800, permits unauthenticated attackers to gain root…
South Korea's Financial Services Commission (FSC) convened an emergency meeting on May 15, 2024, to address a series of cyberattacks that have impacted several financial institutions within the country. The FSC, South Korea's primary financial regulator, is actively investigating…
This week's cybersecurity landscape is marked by the active exploitation of zero-day vulnerabilities in critical network infrastructure, specifically impacting NetScaler Application Delivery Controller (ADC) and FortiMail secure email gateways. These vulnerabilities represent significant threats as they are being leveraged…
The U.S. Department of Justice announced the arrest of a Bulgarian national, identified as the alleged developer of the Ploutus malware, a sophisticated tool used in ATM jackpotting attacks. This malware enabled criminals to force ATMs to dispense cash, leading…
The modern enterprise's reliance on credentials for secure connections between humans, systems, and artificial intelligence is expanding at a pace that outstrips the capacity of many security teams to monitor and manage effectively.