Fake IRS letters target cryptocurrency holders
Do you hold cryptocurrency? Have you received a letter telling you that you must register with a so-called "Digital Asset Compliance Portal"?
general
20 articles
Prompting for Patches That Fix Vulns Without Adding New Ones - Keith Hoodlet - ASW #394
UK’s Police National Legal Database Reveals Data Breach
The UK’s Police National Legal Database and Ask the Police service have been breached
150,000 Impacted by Madera Community Hospital Data Breach
An extortion group stole personal, financial, and medical information from the hospital’s network. The post 150,000 Impacted by Madera Community Hospital Dat...
Microsoft shortens NuGet API key lifetime to improve supply chain security
Microsoft is reducing the lifetime of new NuGet.org API keys from 365 days to 30 days starting August 17, 2026, to improve the security of NuGet, its package...
Apache NiFi Flaw Enable Security Bypass and Memory Corruption
Apache NiFi has issued security advisories for four vulnerabilities affecting its web API. These include an authorization bypass that could allow unauthorize...
OctLurk-Linked Hackers Deploy BINDCLOAK Backdoor Against Middle East Governments
The published Part 2 of a two-part technical analysis exposing BINDCLOAK, a previously undocumented modular backdoor deployed against government entities in ...
UK government adviser admits data exposure of 51 officials
The exposed document contained the names and work email addresses of 51 government officials, along with "high-level management information.
River Bank reports hackers deleted data stolen in June ransomware attack
The financial institution is working with a third-party forensic firm to investigate the incident.
31,000 Records Compromised in Breach of Liechtenstein Companies and Foundations Register
Cyberattack exposed data of 31,000 people in Liechtenstein’s beneficial ownership register for companies and foundations. A cyberattack compromised data belo...
New bill proposes lifetime identity protection for OPM data breach victims
The OPM breaches, which compromised sensitive personal information of approximately 22 million individuals, including Social Security numbers and security cl...
Terra Security launches feature to automatically block attacks
Prevention is designed to bridge the time lag, often weeks long, that occurs between a confirmed security finding and the deployment of a code fix.
BTMOB Android malware service fragments into a complex ecosystem
BTMOB, an Android RAT sold as a malware-as-a-service, has seen its operation splinter into a vast network of resellers, source-code vendors, independent serv...
Critical Check Point Flaw Lets Unauthenticated Attackers Execute Commands on Management Servers
Check Point has disclosed a high-severity authentication bypass vulnerability that could allow unauthenticated attackers to execute arbitrary commands on vul...
Cato Networks introduces agentic threat prevention to counter AI-driven attacks
The new capability operates on Cato's cloud-native platform, leveraging existing network and security telemetry.
CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
The U.S.
cPanel Database Privilege Escalation Flaw Enables Full Administrative Access
CVE-2026-58048 is a critical privilege-escalation vulnerability in the database management functionality of cPanel & WHM. This flaw allows an authenticated c...
UK police legal database breach exposes officer details, increasing phishing risks
AI-related security breaches surge in UK firms, IBM report reveals
IBM's 2026 Cost of a Data Breach report highlights a 56% surge in AI-driven cyberattacks, leading to an average cost of $6 million per breach.
Dataminr report: attackers exploit vulnerabilities faster than organizations patch
Dataminr's 2026 Mid-Year Threat Landscape Report reveals that the median time to patch vulnerabilities has increased to 43 days, contrasting sharply with the...