SonicWall has claimed an uptick in Akira ransomware intrusions is due to legacy password use
Added an acknowledgement. This is an informational change only.
Information published.
While the AIxCC winner has not yet been announced, differences in the finalists’ approaches show that there are multiple viable paths forward to using AI for vulnerability detection.
Information published.
Information published.
La Hans-Böckler-Stiftung a été victime d'une attaque ciblée et travaille avec des experts externes pour élucider l'affaire, les paiements de bourses ne sont pas affectés. La fondation a isolé et arrêté tous les systèmes informatiques après la découverte de l'attaque. Les experts en forensique inform...
Information published.
Une cyberattaque a paralysé la plateforme informatique des douanes nigérianes, provoquant de fortes perturbations dans le dédouanement des cargaisons et entraînant des pertes pour les agents à cause des frais de surestaries. Les autorités affirment avoir rétabli et renforcé le système, tout en discu...
An unauthorized actor accessed files on Monterey Mushrooms' computer servers between August 2, 2025, and August 7, 2025, potentially exposing the name, Social Security number, and driver's license number or passport number of a Maine resident. The attack has been claimed by Payoutkings on September...
At Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef
Carus, LLC experienced a network disruption on or around August 7, 2025, which may have allowed an unauthorized third party to access a limited amount of personal information. The attack was claimed by Akira on September 4.
La groupe de ransomware Lynx a lancé une attaque contre le Mondi Resort am Grundlsee, entraînant la cryptage de serveurs et une demande de rançon, avec une possible fuite de données. Le groupe Lynx est responsable de centaines d'attaques cybernétiques à travers le monde depuis mi-2024. Les cibles in...
At Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef
OB-GYN Associates experienced a data security incident where an unauthorized third-party accessed their network environment, potentially exposing personal information of patients. The incident occurred on or about August 7, 2025, and was detected on the same date. An investigation was completed on S...
Bank3 suffered a data breach between July 25, 2025, and August 7, 2025, resulting in unauthorized access to sensitive information. The breach affected various types of data, including names, Social Security numbers, driver's licenses, financial account information, and payment card information. A cy...
At Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef
Passco Companies, LLC suffered a data breach on August 7, 2025, where limited information was taken from its environment. The affected information includes name and Social Security number of certain individuals. Passco is providing access to credit monitoring services for 12 months to affected indiv...
At Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef
The Hidden Threat That's Slipping Past Your Security HTTP request smuggling remains one of the most dangerous yet frequently overlooked web vulnerabilities today. Despite being a widely known issue si