Fraud
A third cybersecurity "expert" has been sentenced to 70 months in federal prison for operating as an inside man for one of the world's most prolific ransomware cartels, using his position to facilitate extortions instead of preventing them. Angelo Martino, 41, of Land O'Lakes,
Third Party Risk
An investigation into the "connective tissue" of the industrial internet reveals that thousands of legacy Serial-to-IP converters are currently vulnerable to unauthenticated remote code execution. SAN JOSE, CA — Forescout’s research division, Vedere Labs, has released a comprehensive security advisory titled "BRIDGE:BREAK," detailing
Policy & Government
Modeled after the U.S. CMMC framework, the new Canadian Program for Cyber Security Certification (CPCSC) introduces a mandatory verification tier to harden the nation’s defense industrial base against state-sponsored intrusion. OTTAWA, ON — The Government of Canada has officially launched the first phase of the Canadian Program for
Data Breaches
The popular frontend cloud platform has confirmed a security incident after threat actors leveraged an infostealer infection at an integrated AI vendor to access Vercel’s internal environments. SAN FRANCISCO, CA — Vercel, the platform behind the Next.js framework, has officially disclosed a security breach originating from a compromised third-
Data Breaches
ShinyHunters didn't breach Zara, Carnival, and 7-Eleven's networks — it logged into the SaaS and CRM platforms they trusted, then exported the databases. The real lesson: in an identity-first, extortion-only world, you own every dataset anyone can reach with your name on it.
Data Breaches
Europe’s largest fitness chain has disclosed a major security incident affecting approximately one million members across multiple countries, including a significant leak of IBAN and bank information. HOOFDDORP, Netherlands — Basic-Fit has officially confirmed a large-scale data breach that has compromised the personal and financial information of nearly
Data Breaches
The world’s largest travel platform has issued an urgent warning to customers after an unauthorized third party accessed sensitive booking information, triggering a massive wave of targeted phishing attacks. AMSTERDAM, Netherlands — Booking.com has confirmed a significant data security incident that has exposed the personal details and travel itineraries
Data Breaches
The studio behind Grand Theft Auto has confirmed a security incident involving the unauthorized access of corporate data, with the notorious ShinyHunters group claiming responsibility and threatening a massive leak if a ransom is not paid by April 14. NEW YORK, NY — Rockstar Games has confirmed it is investigating a
Trending
In a significant blow to the infostealer ecosystem, Google has officially integrated Device Bound Session Credentials (DBSC) into Chrome 146, fundamentally changing how authentication cookies are protected on Windows and macOS. MOUNTAIN VIEW, CA — For over a decade, session hijacking has been the "skeleton key" for cybercriminals. By
Trending
A persistent threat cluster known as Glassworm has significantly upgraded its arsenal, deploying a specialized "ZigDropper" to compromise software developers by infecting the very IDEs used to build modern applications. AMSTERDAM, NL — Security researchers have uncovered a major evolution in the tactics of the Glassworm threat campaign. Previously
Threat Intelligence
In a sophisticated six-hour window of compromise, the official CPUID website was hijacked to serve malicious payloads to thousands of enthusiasts and IT professionals downloading system monitoring utilities. PARIS, FRANCE — The cybersecurity community is on high alert after CPUID, the developer of the ubiquitous system-profiling tools CPU-Z
Trending
A critical pre-authentication Remote Code Execution (RCE) vulnerability in the Marimo open-source Python notebook has seen active exploitation less than half a day after its public disclosure, highlighting the extreme speed of modern threat actors. SAN FRANCISCO, CA — Security teams are racing to patch installations of Marimo, a