Another example of the insider threat, as reported by Opeyemi Sule: According to the latest report, a former Coinbase customer service contractor has been arrested in India for their role in a...
Mezha reports: As reported in the court’s verdict: In Khmelnytskyi, a court sentenced a 16-year-old girl for transmitting data about military facilities to a Russian intelligence officer who paid...
A press release from Columbia Pacific CCO left me a bit puzzled. A statement from Columbia Pacific CCO relates to a breach affecting members of CareOregon and Health Share Oregon. Their notice is...
Detect and mitigate CVE-2025-14847, an unauthenticated information leak vulnerability in MongoDB. Exploitation has been observed in the wild. Organizations should patch urgently.
In December 2025, 2.3M records of WIRED magazine users allegedly obtained from parent company Condé Nast were published online. The most recent data dated back to the previous September and...
Caton Deuso reports: An orthopedic center with several locations in the Capital Region faces a $500,000 fine for failing to protect patient information. The New York Attorney General, Letitia...
A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory. The vulnerability, tracked as CVE-2025-14847 (CVSS score:...
The future of conflict is cheap, rapidly manufactured, and tough to defend against.
New research: Abstract: Coleoid cephalopods have the most elaborate camouflage system in the animal kingdom. This enables them to hide from or deceive both predators and prey. Most studies have...
Trust Wallet is urging users to update its Google Chrome extension to the latest version following what it described as a "security incident" that led to the loss of approximately $7 million. The...
A China-linked advanced persistent threat (APT) group has been attributed to a highly-targeted cyber espionage campaign in which the adversary poisoned Domain Name System (DNS) requests to deliver...
Practice makes perfect It's the most wonderful time of the year … for corporate security bosses to run tabletop exercises, simulating a hypothetical cyberattack or other emergency, running through...
Somebody from Elastic Security decided to post an exploit for CVE-2025–14847 on Christmas Day.Here’s said exploit:GitHub - joe-desimone/mongobleedThe vuln, which dropped just before Christmas, in...
In supercharged AI race, defenders need to keep up interview According to Remedio CEO Tal Kollender, the only way to beat the bad guys hacking into corporate networks is to "think like a hacker,"...
A critical security flaw has been disclosed in LangChain Core that could be exploited by an attacker to steal sensitive secrets and even influence large language model (LLM) responses through...
With the New Year just around the corner, SentinelOne highlights and reflects on the most formative cyber news stories from 2025.
A year of bold quotes, big lessons, and insights for practitioners looking ahead to 2026
Someone hacked an Italian ferry. It looks like the malware was installed by someone on the ferry, and not remotely.
In this special year-end edition, we revisit critical advice from our cybersecurity experts on AI, exposure management, cloud, vulnerability management, OT and critical infrastructure.Key...
In August 2020, news broke of a data breach of Russian airline Utair that dated back to the previous year. The breach contained over 400k unique email addresses along with extensive personal...
GreyNoise observed a coordinated exploitation campaign targeting Adobe ColdFusion servers over the Christmas 2025 holiday period. The attack appears to be a single threat actor operating from...
It’s getting harder to tell where normal tech ends and malicious intent begins. Attackers are no longer just breaking in — they’re blending in, hijacking everyday tools, trusted apps, and even AI...
The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets as...
There is tremendous public interest in the Epstein files. But be careful. Davey Winder of Forbes reports: Updated December 25 with warnings about malware associated with some Epstein Files...
Speaking of researchers being threatened or maligned for reporting breaches, see this story by Jessica Lyons in The Register: Researchers at Pen Test Partners found four flaws in Eurostar’s public...
Over the years, DataBreaches has been contacted by many people with requests for help notifying entities of data leaks or breaches. Some of the people who contact this site are cybercriminals,...
Fortinet on Wednesday said it observed "recent abuse" of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations. The vulnerability in question is CVE-2020-12812...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs) to its Known Exploited Vulnerabilities (KEV)...
The report contains statistics on various threats detected and blocked on ICS computers in Q3 2025, including miners, ransomware, spyware, etc.
The permanent leader in the percentage of ICS computers on which spyware were blocked.