Baker Tilly Advisory Group has begun notifying clients about a data breach involving an external service provider, after an unauthorized actor obtained…
Tag: EN
Uber Confirms Data Breach – Hackers Stole Users’ Personal Information
Uber has confirmed a data breach involving the personal information of thousands of U.S. drivers after hackers accessed records held by Fireworks AI, a…
AI Fraud is Breaking the Internet
AI-Powered Scams: Fake Sites, Fake Ads, and the New Brand Impersonation Economy | Yoav Keren (BrandShield) Host David Shipley interviews Yoav Keren, CEO…
Resource: DysruptionHub’s Cyber Incident Registry completes its historical backfill
More than 600 researched profiles now connect past coverage with ongoing follow-up, alongside new ways for Sustainers to follow the reporting. Joseph…
Attackers use Crypto Exchange Names to Disguise Unauthorized Sessions on 100+ ScreenConnect Servers
Fake crypto exchange sessions are showing up on ScreenConnect servers and could be bait for technicians. See what Huntress found and what to do.
CVE-2026-126793 – Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
Bulletin ID: 2026-182-AWS Publication Date: 11/12/2026 13:00 PM PST Description: An untrusted search path issue in Aurora PostgreSQL dialect detection in…
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them.
Five TEFAF robbery suspects added to EU Most Wanted
As of 29 October 2026, five new fugitives, four men and one woman, have been added to the EU Most Wanted list. According to the Limburg Public…
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen…
SCKit abuses ScreenConnect to deploy remote access and target technician sessions
SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR…
The Department of Know: N-able’s zero-days, Signal’s formal verification, NHS post-breach fallout
Read the full stories at CISOseries.com. This week’s Department of Know is hosted by Rich Stroffolino, with guests Tom Doughty , CISO,…
TSMC has reportedly leaked the personal data of 46,000 employees, but emphasized that no evidence of intrusion was found in the system.
The following is an automated Google translation of an article that originally appeared in Chinese. Jian Yongxiang reports: TSMC, the world’s leading…
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide
Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report…
FAA Grounds US Flights Nationwide, Citing ‘Extraordinary’ Safety Concerns
FAA grounds flights nationwide, citing extraordinary safety concerns amid air traffic control communications problems. Here’s what travelers need to know.
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are retargeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.
Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity
CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers…
Friday Squid Blogging: Pacific Flying Squid Populations Dropping in Korean Waters
Climate change is the issue . As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog…
Security Agencies Worldwide Found to Use Ad-Based Surveillance System
An investigation by Bloomberg into Penlink’s ad-based surveillance system Webloc builds off Citizen Lab research, identifying additional customers.
CISA sets operational priorities for partnerships, risk assessments and systemic action
An internal memo from CISA’s acting chief instructs senior leaders to keep the new priorities in mind with every choice they make.
OffSec Celebrates 20 Years of Practitioner-Built Training From the Creators of Kali Linux and OSCP
You know Kali. You know OSCP. Meet the rest of OffSec as the company brings its hands-on approach to entire cyber teams.