Trending
A new analysis of internet-facing infrastructure has identified nearly 4,000 Industrial Control Systems (ICS) in the United States that remain exposed to cyberattacks, specifically from threat actors targeting critical infrastructure. ANN ARBOR, MI — Security researchers have issued a stark warning after identifying approximately 4,000 industrial control devices
Policy & Government
A sweeping Office of Inspector General (OIG) report has revealed significant "governance and technical weaknesses" within the systems managing U.S. airspace, labeling the FAA’s current security posture as non-compliant with federal standards. WASHINGTON, D.C. — The Federal Aviation Administration (FAA) is facing intense scrutiny following
Decentralized Finance (DeFi)
In a significant policy shift, the Department of the Treasury is expanding its "Project Fortress" initiative to include digital asset firms, providing them with the same high-level threat telemetry previously reserved for traditional tier-one banks. WASHINGTON, D.C. — The U.S. Department of the Treasury has
Artificial Intelligence (AI)
As the industry shifts toward "AI-First" defense, the two titans of Silicon Valley are taking different paths to the same goal: automating the discovery and patching of global software vulnerabilities. SAN FRANCISCO, CA — The battle for the future of cybersecurity has entered a restricted phase. Following the
Trending
A critical pre-authentication Remote Code Execution (RCE) vulnerability in the Marimo open-source Python notebook has seen active exploitation less than half a day after its public disclosure, highlighting the extreme speed of modern threat actors. SAN FRANCISCO, CA — Security teams are racing to patch installations of Marimo, a
Trending
Aetna and CVS Health filed two HHS breach reports covering 11,663 members in total — 10,888 in one incident and 775 in the other. Both were third-party mailing distribution errors rather than system intrusions, and affected members are being offered credit monitoring.
Trending
A newly identified threat actor, UNC6783, is bypassing the "front door" of major corporations by targeting Business Process Outsourcing (BPO) firms. By leveraging fake Okta portals and hijacked Zendesk tickets, the group has successfully extorted dozens of high-value targets, exposing a critical failure in the Managed Perimeter.
Trending
Yesterday, Nextend confirmed that its update servers were compromised, leading to the distribution of backdoored versions of Smart Slider 3 Pro. With nearly a million sites affected across WordPress and Joomla, this is one of the most significant supply chain attacks of the year. BUDAPEST, HUNGARY — Security researchers at Patchstack
Trending
A sophisticated social engineering campaign dubbed "ClickFix" has pivoted to target macOS users, leveraging fake browser errors to trick victims into executing malicious scripts that bypass standard Apple security prompts. CUPERTINO, CA — For years, the prevailing wisdom suggested that macOS was a "walled garden" largely immune
Cyber Warfare
Yesterday, we reported on the unprecedented scale of the National Supercomputing Center (NSCC) breach. Today, the focus shifts from how much was taken to exactly what — and the implications for global stability. CHENGDU, CHINA — New intelligence regarding the 10-petabyte data theft from China’s National Supercomputing Center suggests the
Data Breaches
What began as a security "anomaly" in late 2025 has escalated into a major privacy crisis, as hackers begin offloading sensitive passport and contact information belonging to Interrail and Eurail customers. UTRECHT, NETHERLANDS — Eurail B.V., the organization behind the popular Interrail and Eurail passes, has confirmed that
Business Email Compromise (BEC)
The oil and gas recovery specialist has launched an investigation into a sophisticated cyberattack that successfully redirected a major project payment to an unauthorized third-party account. LONDON — Zephyr Energy, a technology-led energy company focused on responsible resource development, has disclosed a significant cyberattack that resulted in the diversion