Latest News

Top-ranked mobile apps found using hardcoded keys and exposed cloud buckets.

Shield Capital leads a $9 million seed-stage funding round for Israeli startup building technologies for AI security and privacy guardrails.

The Rhysida ransomware gang claims to have stolen 2.5 Tb of files from the Oregon Department of Environmental Quality.

In recent attacks, the state-sponsored backdoor BPFDoor is using a controller to open a reverse shell and move laterally.

A critical vulnerability in Apache Roller could be used to maintain persistent access by reusing older sessions even after password changes.

In the past months Microsoft has seen multiple campaigns involving Node.js to deliver malware and other malicious payloads.

Chrome 135 and Firefox 137 updates have been rolled out with patches for critical- and high-severity vulnerabilities.

Oracle’s April 2025 Critical Patch Update contains 378 security patches that resolve approximately 180 unique CVEs.

Major companies have agreed to gradually reduce the lifetime of TLS certificates over the next few years.

MITRE warns of a deterioration of national vulnerability databases and advisories, slowed vendor reaction and limited response operations.

San Francisco startup banks $30 million in Seed and Series A funding led by Lightspeed Venture Partners and Walden Catalyst Ventures.

Lemonade says the incident is not material and that its operations were not compromised, nor was its customer data targeted.

DaVita has not named the ransomware group behind the incident or share details on the attacker’s ransom demands.

The business services provider confirms personal information such as names and Social Security numbers was stolen in a January cyberattack.

In fresh filings, Landmark Admin and Young Consulting say data breaches back in 2024 impacted more people than initially estimated.