River Bank reports hackers deleted data stolen in June ransomware attack
The financial institution is working with a third-party forensic firm to investigate the incident.
SC Media
20 articles
New bill proposes lifetime identity protection for OPM data breach victims
The OPM breaches, which compromised sensitive personal information of approximately 22 million individuals, including Social Security numbers and security cl...
Terra Security launches feature to automatically block attacks
Prevention is designed to bridge the time lag, often weeks long, that occurs between a confirmed security finding and the deployment of a code fix.
BTMOB Android malware service fragments into a complex ecosystem
BTMOB, an Android RAT sold as a malware-as-a-service, has seen its operation splinter into a vast network of resellers, source-code vendors, independent serv...
Cato Networks introduces agentic threat prevention to counter AI-driven attacks
The new capability operates on Cato's cloud-native platform, leveraging existing network and security telemetry.
UK police legal database breach exposes officer details, increasing phishing risks
AI-related security breaches surge in UK firms, IBM report reveals
IBM's 2026 Cost of a Data Breach report highlights a 56% surge in AI-driven cyberattacks, leading to an average cost of $6 million per breach.
Dataminr report: attackers exploit vulnerabilities faster than organizations patch
Dataminr's 2026 Mid-Year Threat Landscape Report reveals that the median time to patch vulnerabilities has increased to 43 days, contrasting sharply with the...
Apple challenges UK government demand for encrypted user data
The challenge stems from a "technical capability notice" issued by the UK government, a secret legal order compelling access to user data, even if encrypted.
Critical vulnerability in DNA forensic software could compromise 30 years of evidence
A group of forensic and computer scientists discovered that an AI model can be used to undetectably alter digital scans of DNA evidence created since 1995.
N-able addresses critical N-central vulnerabilities exploited by attackers
Attackers leveraged an authentication bypass vulnerability, identified as CVE-2026-18556 and later expanded by CVE-2026-18577, to achieve remote administrati...
Google Chrome to block malicious policy-installed extensions
This new protection, currently in development and planned to be enabled by default, aims to combat malware abuse of Chrome's enterprise policy features on un...
Defcon badges feature new open-source chip for enhanced security
The Baochip-1x is a "mostly" open-source microcontroller that allows for verifiable security.
Critical vulnerability in Rails Active Storage could lead to RCE
The vulnerability specifically affects Active Storage versions prior to 7.2.
INC Ransomware chains two SonicWall SMA 1000 zero-days in attacks
INC ransomware exploits SonicWall zero-days, prompting compromise fears.
Coldcard hardware wallet firmware flaw led to $70 million Bitcoin theft
The vulnerability, identified by Block and detailed by Galaxy Research, occurred because a deterministic software pseudorandom number generator (PRNG) was us...
Adobe fixes critical vulnerabilities in Campaign Classic and Bridge
The critical vulnerability in Adobe Campaign Classic, identified as CVE-2026-48449, stems from incorrect authorization and poses a significant risk for remot...
Empty web pages are a security risk, Kaspersky warns
These seemingly harmless blank pages or "Coming Soon" placeholders can silently collect a visitor's IP address, approximate location, User-Agent string, and ...
South Korea warns of nation-state actors using phishing and compromised websites
The phishing attacks involve disguised job applicants sending resumes with malicious links or impersonating recruiters with password-protected ZIP files cont...
Adform supply-chain attack replaced crypto wallet addresses
The attack exploited Adform's JavaScript tracking script, "trackpoint-async.js," which is embedded in numerous websites.