Ionut Arghire

Patch Tuesday: Enterprise software vendor SAP releases patches for high-severity vulnerabilities in multiple products and tools.

Evolve Bank says personal information of more than 7.6 million individuals was compromised in a ransomware attack.

The Ransomhub ransomware gang has claimed the theft of 100GB of data from the Florida Department of Health.

Seven nations are backing Australia in calling out a China-linked hacking group for compromising government networks.

A threat actor sent over 35,000 phishing emails after hacking into Ethereum Foundation's account on a mailing list platform.

Kaspersky said the CloudSorcerer APT has been abusing public cloud services to exfiltrate data from Russian government entities.

A class action lawsuit was filed against Geisinger for failing to properly secure patients’ personal and health information.

Vulnerability in Ghostscript (CVE-2024-29510) allows attackers to bypass sandbox for remote code execution.

OVHcloud says it mitigated the largest ever DDoS attack leveraging packet rate, which peaked at 840 Mpps.

Censys has discovered more than 380,000 hosts, including major platforms, still referencing the malicious polyfill.io domain.

Enterprise data security platform Odaseva raises $54 million in a Series C funding round led by Silver Lake Waterman.

Florida Community Health Centers says the information of 300,000 individuals was stolen in a June 2023 ransomware attack.

Patelco Credit Union shuts down banking systems and suspends electronic operations in response to a ransomware attack.

Google ships an Android security update with fixes for 15 vulnerabilities, including a critical-severity flaw in Framework.

Splunk has patched multiple vulnerabilities in Splunk Enterprise, including high-severity remote code execution bugs.

EVA Information Security has shared details on three CocoaPods vulnerabilities impacting millions of macOS and iOS applications.

Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.

Life insurance company Landmark Admin says personal, medical, and insurance information was compromised in a May data breach.

GreyNoise observes the first attempts to exploit a path traversal vulnerability in discontinued D-Link DIR-859 WiFi routers.

Juniper Networks warns of a critical authentication bypass flaw impacting Session Smart routers and conductors.