Ionut Arghire

A class action lawsuit was filed against Geisinger for failing to properly secure patients’ personal and health information.

Vulnerability in Ghostscript (CVE-2024-29510) allows attackers to bypass sandbox for remote code execution.

OVHcloud says it mitigated the largest ever DDoS attack leveraging packet rate, which peaked at 840 Mpps.

Censys has discovered more than 380,000 hosts, including major platforms, still referencing the malicious polyfill.io domain.

Enterprise data security platform Odaseva raises $54 million in a Series C funding round led by Silver Lake Waterman.

Florida Community Health Centers says the information of 300,000 individuals was stolen in a June 2023 ransomware attack.

Patelco Credit Union shuts down banking systems and suspends electronic operations in response to a ransomware attack.

Google ships an Android security update with fixes for 15 vulnerabilities, including a critical-severity flaw in Framework.

Splunk has patched multiple vulnerabilities in Splunk Enterprise, including high-severity remote code execution bugs.

EVA Information Security has shared details on three CocoaPods vulnerabilities impacting millions of macOS and iOS applications.

Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.

Life insurance company Landmark Admin says personal, medical, and insurance information was compromised in a May data breach.

GreyNoise observes the first attempts to exploit a path traversal vulnerability in discontinued D-Link DIR-859 WiFi routers.

Juniper Networks warns of a critical authentication bypass flaw impacting Session Smart routers and conductors.

Prudential Financial has updated the February data breach impact estimate to 2.5 million individuals.

Incubated for two years by Ballistic Ventures, GetReal Labs has launched to combat manipulated content and deepfakes.

Permissions management technology startup AuthZed has raised $12 million in a Series A funding round led by General Catalyst.

Fortra has patched a critical-severity vulnerability in FileCatalyst Workflow leading to the creation of administrator accounts.

Namecheap shut down polyfill.io amid reports of malicious activity, but the Chinese owner claims it has good intentions.

The US Justice Department has announced charges against Amin Stigal for conducting wiper cyberattacks on Ukraine in 2022.