Ionut Arghire

A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications.

A new attack technique named Policy Puppetry can break the protections of major gen-AI models to produce harmful outputs.

Jericho Security has raised $15 million in Series A funding for its AI-powered employee cybersecurity training platform.

Push Security has raised $30 million in Series B funding to scale its browser-based identity security platform.

AI-powered threat prevention company Augur (rebranded from SecLytics) has raised $7 million in seed funding.

The FBI received roughly 860,000 complaints of malicious activity in 2024, with reported losses exceeding $16.6 billion.

Blue Shield of California says a website misconfiguration exposed the health information of its members to Google.

Identity protection startup AuthMind has announced raising $19.3 million in a seed funding round led by Cheyenne Ventures.

A security researcher has discovered hundreds of leaked secrets by restoring files deleted from GitHub repositories.

British retailer Marks & Spencer has been experiencing certain service disruptions after falling victim to a cyberattack.

Massachusetts medical firm Onsite Mammography discloses data breach impacting the personal information of 350,000 patients.

Cybersecurity startup Terra Security has raised $8 million in seed funding from SYN Ventures, FXP Ventures, and Underscore VC.

The city of Abilene, Texas, is scrambling to restore systems that have been taken offline in response to a cyberattack.

A vulnerability in SSL.com has resulted in nearly a dozen certificates for legitimate domains being wrongly issued.

Security researchers detail various malware campaigns that use bulletproof services linked to Proton66 ASN.

A sophisticated phishing campaign abuses weakness in Google Sites to spoof Google no-reply addresses and bypass protections.

Data protection firm Cy4Data Labs has raised $10 million in a Series A funding round led by Pelion Venture Partners.

Ahold Delhaize has confirmed that data was stolen from its systems in November 2024 after a ransomware group claimed the attack.

A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.

Minh Phuong Ngoc Vong pleaded guilty to defrauding US companies of roughly $1 million in a fake IT worker scheme.