HSIP experienced unauthorized access to its network, resulting in potential data exposure. The breach affected 13 Maine residents and 106 Rhode Island residents. HSIP provided notification and offered identity monitoring services.
Central Boiler, Inc. experienced a sophisticated cyber-attack on August 1, 2025, which may have involved unauthorized access to customer data. The company is notifying potentially affected parties in an abundance of caution. The breach may have exposed customer names in combination with other impact...
In July 2025, a vulnerability in the GiveWP WordPress plugin exposed the names and email addresses of approximately 30k donors to the Pi-hole network-wide ad blocking project. Pi-hole subsequently self-submitted the list of impacted donors to HIBP.
Harbor suffered a data breach between July 25, 2025, and August 1, 2025, resulting in unauthorized access to sensitive information. The breach may have involved personal data such as names, addresses, dates of birth, Social Security numbers, and medical information. Harbor is providing credit monito...
Unauthorized access to Bucks County Opportunity Council's computer network occurred in August 2025, resulting in potential unauthorized access to personal information including names and Social Security numbers. A cyberattack against Bucks County Opportunity Council was claimed by MoneyMessage on Au...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
The DoubleTrouble Android banking Trojan has evolved, using Discord for delivery and introducing several new features
CISA has launched a new tool to streamline cyber incident response and aid in adversary eviction
We’re releasing pajaMAS: a curated set of MAS hijacking demos that illustrate important principles of MAS security.
Semperis found that executives were physically threatened in 40% of ransomware incidents, in a bid to pressure victims to pay demands
The arrest of members of the Scattered Spider cyber-attack group have temporarily halted new intrusions, however, similar threat actors continue to pose risks
Here's a look at cybersecurity stories that moved the needle, raised the alarm, or offered vital lessons in July 2025
Avast researchers shared a step-by-step guide to decrypt files for victims of FunkSec ransomware
Experts argue that password managers are still useful despite Microsoft Authenticator ditching its capabilities
Added an FAQ to explain that the security update KB for SharePoint Server 2016 applies to both Microsoft SharePoint Server 2016 and Microsoft SharePoint Enterprise Server 2016. This is an informational change only.
North Korea’s Lazarus Group has been blamed for a cyber-espionage campaign using open source packages
Added an FAQ to explain that the security update KB for SharePoint Server 2016 applies to both Microsoft SharePoint Server 2016 and Microsoft SharePoint Enterprise Server 2016. This is an informational change only.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-50388.
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-464 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-50387.
Le Muséum national d'Histoire naturelle a été victime d'une cyberattaque, ce qui affecte la recherche française. Le musée est également un centre de recherche important. L'attaque a eu lieu récemment, mais la date exacte n'est pas précisée.