Endpoint Security Microsoft Silently Mitigated Exploited LNK Vulnerability Windows now displays in the properties tab of LNK files critical information that could reveal malicious code. Ionut ArghireDecember 3, 2025
Mobile & Wireless Android Zero-Days Patched in December 2025 Security Update Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks. Ionut ArghireDecember 2, 2025
Identity & Access Facial Recognition’s Trust Problem Two technologies — one for public safety, one for controlled entry — show why trust in facial recognition must be earned, not assumed. Kevin TownsendDecember 1, 2025
ICS/OT CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog. Eduard KovacsDecember 1, 2025
Artificial Intelligence OpenAI User Data Exposed in Mixpanel Hack Multiple Mixpanel customers were impacted by a recent cyberattack targeting the product analytics company. Eduard KovacsNovember 27, 2025
Data Breaches Ransomware Attack Disrupts Local Emergency Alert System Across US The OnSolve CodeRED platform has been targeted by the Inc Ransom ransomware group, resulting in disruptions and a data breach. Eduard KovacsNovember 26, 2025
Data Breaches Dartmouth College Confirms Data Theft in Oracle Hack Dartmouth College has disclosed a data breach after cybercriminals leaked over 226 Gb of files stolen from the university. Eduard KovacsNovember 26, 2025
Data Breaches Major US Banks Impacted by SitusAMC Hack Hackers stole corporate data such as accounting records and legal agreements, but did not deploy file-encrypting ransomware. Ionut ArghireNovember 25, 2025
Data Breaches Canon Says Subsidiary Impacted by Oracle EBS Hack More than 100 alleged victims of the Oracle EBS campaign have been added to the Cl0p ransomware website. Eduard KovacsNovember 25, 2025
Cybercrime CrowdStrike Insider Helped Hackers Falsely Claim System Breach The company has confirmed that it terminated an insider who shared screenshots of his computer with cybercriminals. Ionut ArghireNovember 24, 2025
Data Breaches Mazda Says No Data Leakage or Operational Impact From Oracle Hack The Cl0p ransomware group has listed Mazda and Mazda USA as victims of the Oracle EBS campaign on its leak website. Eduard KovacsNovember 24, 2025
Data Breaches Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims More than 1.6 Tb of data allegedly stolen from Cox was made public by the hackers. Eduard KovacsNovember 24, 2025
Artificial Intelligence SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake. Eduard KovacsNovember 21, 2025
Vulnerabilities Recent 7-Zip Vulnerability Exploited in Attacks A proof-of-concept (PoC) exploit targeting the high-severity remote code execution (RCE) bug exists. Ionut ArghireNovember 20, 2025
Funding/M&A Palo Alto Networks to Acquire Observability Platform Chronosphere in $3.35 Billion Deal The move to acquire Chronosphere is the latest of several acquisitions in recent years and follows a massive $25 billion deal to acquire CyberArk. SecurityWeek NewsNovember 19, 2025
Cyberwarfare Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks. Eduard KovacsNovember 19, 2025
Vulnerabilities Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system. Ionut ArghireNovember 19, 2025
Incident Response Cloudflare Outage Not Caused by Cyberattack Major online services such as ChatGPT, X, and Shopify were disrupted in a global Cloudflare outage on Nov. 18th, as well as transit and... Eduard KovacsNovember 18, 2025
Data Breaches Princeton University Data Breach Impacts Alumni, Students, Employees Hackers accessed a database containing information about alumni, donors, faculty, students, parents, and other individuals. Ionut ArghireNovember 18, 2025
Vulnerabilities Chrome 142 Update Patches Exploited Zero-Day The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor. Ionut ArghireNovember 18, 2025