It’s the first public break in the case that might be the largest breach of American schoolchildren's data. The post Massachusetts man will plead guilty in PowerSchool hack case appeared first on...
It’s the first public break in the case that might be the largest breach of American schoolchildren's data. The post Massachusetts man will plead guilty in PowerSchool hack case appeared first on...
KrebsOnSecurity last week was hit by a near record distributed denial-of-service (DDoS) attack that clocked in at more than 6.3 terabits of data per second (a terabit is one trillion bits of...
A threat actor known as Hazy Hawk has been observed hijacking abandoned cloud resources of high-profile organizations, including Amazon S3 buckets and Microsoft Azure endpoints, by leveraging...
Homeland Security Secretary Kristi Noem declined to provide specifics on what would be removed from the nation’s leading cybersecurity agency in light of the Trump administration’s proposed $491...
An unknown threat actor has been attributed to creating several malicious Chrome Browser extensions since February 2024 that masquerade as seemingly benign utilities but incorporate covert...
A 19-year-old college student from Worcester, Massachusetts, has agreed to plead guilty to a massive cyberattack on PowerSchool that extorted millions of dollars in exchange for not leaking the...
High-level government institutions in Sri Lanka, Bangladesh, and Pakistan have emerged as the target of a new campaign orchestrated by a threat actor known as SideWinder. "The attackers used spear...
Wiz Research has observed exploitation in-the-wild of CVE-2025-4427 and CVE-2025-4428, the latest vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM).
Wiz Research has observed exploitation in-the-wild of CVE-2025-4427 and CVE-2025-4428, the latest vulnerabilities affecting Ivanti Endpoint Manager Mobile (EPMM).
Cybersecurity researchers have discovered risky default identity and access management (IAM) roles impacting Amazon Web Services that could open the door for attackers to escalate privileges,...
The Kettering Health network based in western Ohio reported a system-wide technology outage that it tracked to "unauthorized access."
After a cyberattack first identified about 10 days ago, Alabama's IT leaders said the "threat has been neutralized and Alabama’s core operations are safe and stable."
Meet the DOGE staffers and senior advisors in Elon Musk's inner circle, and how they got there.
Researchers from the U.S. National Institute of Standards and Technology (NIST) and the Cybersecurity and Infrastructure Security Agency (CISA) have developed a new security metric to determine...
In the newly released 2025 State of Pentesting Report, Pentera surveyed 500 CISOs from global enterprises (200 from within the USA) to understand the strategies, tactics, and tools they use to...
Wisconsin wireless provider Cellcom has confirmed that a cyberattack is responsible for the widespread service outage and disruptions that began on the evening of May 14, 2025. [...]
While 79% of security leaders believe that AI agents will introduce new security and compliance challenges, 80% say AI agents will introduce new security opportunities.
These are the development principles of writing Cryptography in Golang. I find it cool that they take the design of Golang Cryptography seriously. There are four design principles: secure, safe,...
A critical privilege escalation vulnerability has been discovered in the premium WordPress theme Motors, which allows unauthenticated attackers to hijack administrator accounts and take complete...
The Venice.ai chatbot gained traction in hacking forums for its uncensored access to advanced models
In the spirit of constant improvement, we have released a new onboarding wizard to help customers get started with Barracuda Email Protection.
The VanHelsing ransomware-as-a-service operation published the source code for its affiliate panel, data leak blog, and Windows encryptor builder after an old developer tried to sell it on the...
Infoblox reveals Hazy Hawk, a new threat exploiting abandoned cloud resources (S3, Azure) and DNS gaps since Dec…
Threat hunters have exposed the tactics of a China-aligned threat actor called UnsolicitedBooker that targeted an unnamed international organization in Saudi Arabia with a previously undocumented...
A data breach at Nationwide Recovery Services compromised data of 200,000 Harbin Clinic patients
The U.S. Coast Guard Cyber Command published its fourth annual Cyber Trends and Insights in the Marine Environment... The post US Coast Guard’s 2024 CTIME report reveals growing cyber risks in...
The U.S. House Armed Services Subcommittee on Cyber, Information Technologies, and Innovation held a hearing last week to... The post Congressional panel warns US losing ground in cyber war...
Six technology companies have launched the Strategic Cybersecurity Coalition (SCC), a new initiative aimed at overhauling U.S. international... The post SCC formed to reform US foreign...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Monday the appointment of Madhu Gottumukkala as its... The post CISA announces appointment of Madhu Gottumukkala as...