Ionut Arghire

A hacker claims to have stolen the information of 30 million users from TEG subsidiary Ticketek.

Santander US is notifying over 12,000 employees that their personal information was compromised in a data breach.

Threat actors are exploiting a recent path traversal vulnerability in SolarWinds Serv-U using public PoC code.

CISA says CFATS program data was likely accessed after an Ivanti Connect Secure appliance was hacked in January.

A years-long espionage campaign has targeted telecoms companies in Asia with tools associated with Chinese groups.

Pomerium raises $13.75 million in Series A funding for dynamic user identity verification and access management platform.

LockBit appears to once again be the most active ransomware group, but experts believe the hackers may just be inflating their numbers. 

A threat actor targeting Chinese-speaking victims has been using the SquidLoader malware loader in recent attacks.

Atlassian has released Confluence, Crucible, and Jira updates to address multiple high-severity vulnerabilities.

National passenger railroad company Amtrak is notifying customers that hackers have breached their Guest Rewards Accounts.

Government agencies in the US, New Zealand, and Canada have published new guidance on improving network security.

Google has released a Chrome 126 security update with six fixes, including four for externally reported high-severity flaws.

Sagar Steven Singh and Nicholas Ceraolo pleaded guilty to hacking a database maintained by a US federal law enforcement agency.

The BadSpace backdoor is being distributed via drive-by attacks involving infected websites and JavaScript downloaders.

China-linked threat actor Velvet Ant leveraged a legacy F5 BIG-IP appliance for three-year access to a victim’s network.

Blackbaud was ordered to pay $6.75 million to the California Attorney General’s Office over the 2020 data breach.

The US cybersecurity agency CISA has conducted a tabletop exercise with the private sector focused on AI cyber incident response.

Keytronic confirms that personal information was compromised after a ransomware group leaked allegedly stolen data.

The LA County’s Department of Public Health says the personal information of 200,000 was compromised in a data breach.

Nigerian national Ebuka Raphael Umeti was convicted in the US for operating a business email compromise (BEC) scheme.