The Initial Discovery Investigators found a single key on a hacker. This discovery led South Korean police to a massive GitHub token leak. Law enforcement soon discovered over 500 compromised user accounts. Consequently, they...
A widely used browser extension may masquerade as a secure instrument for years. Meanwhile, a sophisticated surveillance apparatus lies dormant within. Consequently, Google and Microsoft purged ModHeader from their respective Chrome and Edge repositories....
Apple has accused OpenAI of trade secret theft after a former engineer allegedly exploited an unauthorized pathway to infiltrate the tech giant’s internal network from his new position. The iPhone maker contends that Chang...
The Scope of the FortiBleed Breach According to a report detailing how Russian hackers steal government logins, cybercriminals have successfully acquired the usernames and passwords of British government personnel. This breach affects overseas workers...
A digital signature should prove that an Android app truly comes from its original developer. New research shows how a single leaked signing key can turn that trust mechanism into a supply-chain weakness. According...
AI browsers are taking on increasingly ambitious roles as autonomous agents. Yet the more they act on a user’s behalf, the more dangerous blind trust in page context becomes. Researchers at LayerX have described...
Libya’s central bank says hackers stole part of its internal data, according to Libya Review. This news comes weeks after a cyberattack first hit its IT systems. A sample of internal bank files has...
Major data leaks rarely begin with hard proof. The Temu case follows that same pattern. A loud claim on a shadow forum can point to a real breach. Or it can point to an...
Unidentified threat actors successfully breached the National Association of Insurance Commissioners (NAIC). They exploited a critical vulnerability within Oracle PeopleSoft. Consequently, the organization temporarily suspended assigning investment ratings to insurance assets. Furthermore, they disabled...
Target/Victims: Klue, LastPass, and others. Delivery Vector: Compromised integration service credentials from 2022. Key Capabilities: Unauthorized Salesforce CRM access via stolen OAuth tokens. Threat Actor: Icarus ransomware group (Suspected). Source: Klue, LastPass, and affected...
FortiBleed began as mass password guessing. Then it grew into an attack chain, where hijacked firewalls gathered fresh credentials for the next breach. A new timeline shows that the published FortiGate password database was...
