Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI's inference servers last Sunday. …
Fireworks said the incident affected a “limited number of customer accounts” — all of whom were notified of the attack.
CNA reports: SPH Media has been hit by cyberattacks on five of its systems, but no customer financial information or account access was compromised, the compan…
Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emer…
DigiCert explained that over the summer, an internal business system was "externally accessible when that was not intended," and someone had created an unautho…
Mark Rasch writes: Imagine a company gets hacked and hires a law firm to manage the response. The lawyers coordinate the forensic investigation, determine whic…
Claire E. Castles, Amanda Fitzsimmons, Nathaniel P. Garrett, Rebekah Byers Kcehowski, Mary Alexander Myers, and Alexander H. Southwell of Jones Day write: Depa…
Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to …
Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory Certi…
Hackers stole passport numbers, frequent flyer numbers, email addresses and phone numbers for about 2,000 customers.
In previous litigation involving Illuminate (J.M. v. Illuminate Educ. Inc.), the district court held that Illuminate could be considered a provider of healthca…
October 27, 2026 – Gatineau, Quebec Privacy Commissioner of Canada Philippe Dufresne has opened an investigation related to a cybersecurity incident involving …
Multiple Ontario Crime Stoppers organizations have suspended use due to Navigate360’s data breach and unacceptable incident response; U.S. state education depa…
John & Rusty Report: An attacker used a “phishing” strategy to get unauthorized access to Covered California agent information spreadsheets May 13, according t…
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentestin…
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its …
Late Wednesday night the Toronto chapter of Crime Stoppers broke ranks with the national association, revealing a timeline showing what it knew and when along …
Japanese gaming giant Capcom has confirmed that hackers breached its membership service, CAPCOM ID, exposing more than 11.7 million customer email addresses an…
The Russian state-linked hacking group Sandworm collaborated with another threat actor to carry out a destructive cyberattack against a Ukrainian grain logisti…
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak …
Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode. This also leak …
An update that solves two vulnerabilities can now be installed.
An update that solves two vulnerabilities can now be installed.
Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming …
