Latest News

Without proper security controls, AI agents could perform malicious actions, such as data exfiltration and malware installation.

The Cl0p ransomware group has listed Mazda and Mazda USA as victims of the Oracle EBS campaign on its leak website.

The company has notified its customers of the incident roughly a week after a threat actor claimed the theft of 77GB of data from Iberia’s systems.

Names, Social Security numbers, ID numbers, and health information were stolen from a compromised email account.

More than 1.6 Tb of data allegedly stolen from Cox was made public by the hackers.

CrowdStrike became a global partner of Mercedes’ F1 team in 2019, but Kurtz’s purchase into the ownership group was his personally.

Other noteworthy stories that might have slipped under the radar: surge in Palo Alto Networks scanning, WEL Companies data breach impacts 120,000 people, AI second-order prompt injection attack.

CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager.

The number of participants in the cyber and physical grid security exercise increased by nearly 50% compared to two years ago.

The vulnerabilities could be exploited to cause a denial-of-service (DoS) condition, execute arbitrary code, or access arbitrary files and directories.

APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.

SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake.

The company has operated in stealth mode for four months and has signed dozens of customers, including eight unicorns.

The infamous ShinyHunters hackers have targeted customer-managed Gainsight-published applications to steal data from Salesforce instances.

Thailand’s Cyber Crime Investigation Bureau said an FBI tip that the “world-class hacker” was traveling to Thailand led to his arrest in Phuket.