This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.
Le Muséum national d'Histoire naturelle a été victime d'une cyberattaque, ce qui affecte la recherche française. Le musée est également un centre de recherche important. L'attaque a eu lieu récemment, mais la date exacte n'est pas précisée.
La ville de Bar Harbor a subi une attaque de cybersécurité, ce qui a entraîné la fermeture de ses services en ligne pour un avenir prévisible. Les systèmes de la ville ont été déconnectés pour prévenir tout dommage supplémentaire et une enquête est en cours avec l'aide de la société de cybersécurité...
A SentinelLabs report has revealed patents linked to firms aiding China's cyber-espionage operations, exposing new capabilities
Phoenix Products, LLC suffered a sophisticated ransomware attack on July 31, 2025, which may have involved unauthorized access to employee data, including first and last names and Social Security numbers. The attack was claimed bay Play on August 4.
L'Ocean Edge Resort & Golf Club a subi une violation de données suite à une attaque par rançongiciel menée par le groupe Nitrogen. Cette violation a exposé une large gamme d'informations sensibles des consommateurs, incluant des numéros d'identification gouvernementaux, des dossiers de santé, des nu...
A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques
Google’s Project Zero team will provide limited details of new vulnerabilities early following discovery, in a bid to speed up end users’ patching
A gameplay guide to share the new Datadog expansion pack of Backdoors & Breaches, including how to play and starter scenarios.
32.1% of vulnerabilities listed in VulnCheck’s Known Exploited Vulnerabilities catalog were weaponized before being detected or within the following day
IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment
The breach details are unclear, but it appears to be a complex incident involving multiple entities and potential data exposure. The exact nature and scope of the breach are unknown. Further investigation is required to determine the full extent of the incident.
A total of 396 compromised Microsoft SharePoint systems have been identified globally, affecting 145 organizations across 41 countries in the wake of the ToolShell zero-day vulnerability
The comprehensive guidance focuses on technical recommendations for securing agentic AI applications, from development to deployment
Catholic Charities of the Diocese of Albany suffered a data breach due to unauthorized access to their network between March 29, 2025, and July 31, 2025. The breach may have involved names and other personal data. A cyberattack against the Catholic Charities of the Diocese of Albany was claimed by P...
H&H Color Lab suffered a data breach on July 30, 2025, where an unauthorized third party gained access to a portion of their computer network and accessed or acquired some of the files on their network. The impacted files potentially contained personal information of individuals, including their ful...
Some of Orange’s professional and consumer services may be disrupted for a few days because of the cyber incident
An unauthorized person gained access to and copied information from VFWM's network on July 30, 2025, resulting in the exposure of personal information of two Maryland residents. The breach was discovered on July 30, 2025, but the impacted data was not validated and enriched until January 5, 2026. VF...
ESET PROTECT version 6.4 has been released.
A joint blog post by the NCSC’s National Resilience Director, Jonathon Ellison, and Chief Technology Officer, Ollie Whitehouse.