La ville de Poitiers et Grand-Poitiers ont été victimes d'une importante cyberattaque depuis le 29 août, touchant leurs services informatiques et rendant les services en ligne inaccessibles. La situation est désormais stabilisée, mais le retour à la normale prendra du temps. Les services concernés t...
Barnhart Group, Inc. experienced a network disruption that led to unauthorized access to certain information stored on their network between August 27, 2025, and August 29, 2025. A cyberattack was claimed by Akira on November 14.
Part of my default test cases for coding agents is to check how MCP integration looks like, especially if the agent can be configured to allow setting fine-grained controls for tools.
Sometimes there are basic security controls missing.
Especially when running an agent on your local computer. Stakes...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.
Fake IT support lures are being used to trick employees into installing remote‑access tools via Microsoft Teams
Salt Typhoon’s primary Dutch targets were small internet service providers and hosting providers
Highlights: Introduction While Microsoft Windows has steadily strengthened its security model—through features like Protected Processes (PP/PPL) and enhanced driver verification—threat actors have adapted by shifting their tactics to exploit lower-level weaknesses that bypass these protections witho...
Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages
Enterprise security teams are under more pressure than ever to secure sprawling application estates, without slowing down delivery. That's why, over the first half of 2025, we've delivered some of our
Nevada’s CIO confirmed in a press conference that ransomware actors had exfiltrated data from state networks, amid an ongoing incident investigation
Our business operations intern at Trail of Bits built two AI-powered tools that became permanent company resources—a podcast workflow that saves 1,250 hours annually and a Slack exporter that enables efficient knowledge retrieval across the organization.
The US, UK and allies have called out China’s “commercial cyber ecosystem” for enabling large-scale Salt Typhoon campaigns
From Meta shutting down millions of WhatsApp accounts linked to scam centers all the way to attacks at water facilities in Europe, August 2025 saw no shortage of impactful cybersecurity news
Chainalysis, OKX, Binance and Tether have managed to stop nearly $50m reaching romance baiting fraudsters
Microsoft observed Storm-0501 pivot to the victim’s cloud environment to exfiltrate data rapidly and prevent the victim’s recovery
In the Security Updates table, added Windows Server 2022, version 23H2, Windows Server 2025, and Windows Server 2025 (Server Core installation) as these versions of Windows Server are also affected by this vulnerability. Customers running these versions should configure Windows DNS servers to have U...
This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The f...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8....
Le site internet du Landkreis Schmalkalden-Meiningen a été victime d'une attaque informatique, la page est actuellement hors ligne. Les autorités travaillent à la création d'une page internet provisoire pour offrir les services essentiels. Les autres systèmes et données du Landratsamt ne sont pas af...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. Th...