The United Kingdom has established an advisory board to oversee and challenge its developing digital identity infrastructure. This board comprises cybersecurity experts, privacy advocates, and technology leaders tasked with ensuring the digital ID program balances innovation with robust security and
Pharmaceutical giant Novo Nordisk has confirmed a data breach exposing clinical trial information. The Danish company, known for diabetes and obesity treatments including Ozempic and Wegovy, discovered unauthorized access to systems containing sensitive research data. While patient identities report
Over 21,000 home security cameras are broadcasting live feeds to the internet without any password protection, exposing private moments from bedrooms, living rooms, and nurseries to anyone who knows where to look. This massive exposure affects multiple camera brands and models, with feeds accessible
Europol coordinated a multinational operation to dismantle AudiA6, a sophisticated cryptocurrency laundering service that facilitated the washing of illicit proceeds for multiple ransomware groups. The takedown involved law enforcement from seven countries, resulting in server seizures, arrests, and
CISA has issued an emergency directive requiring all federal agencies to patch a critical Ivanti Connect Secure vulnerability within 72 hours. The flaw, actively exploited in the wild, allows unauthenticated attackers to achieve remote code execution. This directive applies to civilian federal agenc
A critical vulnerability in Palo Alto Networks’ PAN-OS operating system allows authenticated attackers to execute arbitrary commands with root privileges on affected firewalls. The flaw, which affects multiple PAN-OS versions, poses a significant threat to enterprise networks relying on these widely
A significant security breach has compromised over 73,000 French government employee accounts on Tchap, France’s sovereign messaging platform. The incident exposed sensitive government communications and user data, raising serious concerns about the security of state-sponsored communication infrastr
A critical path traversal vulnerability in Microsoft Teams for Android allows attackers to access sensitive data from the application’s storage. The flaw, discovered in versions prior to 1416/1.0.0.2024102404, enables malicious actors to read arbitrary files from the app’s private directory, potenti
A critical heap-based buffer overflow vulnerability (ZDI-26-360) has been discovered in the MATE Desktop Atril document viewer that allows remote code execution when processing malicious EPUB files. The flaw exists in the EPUB file parsing functionality and can be triggered by simply opening a speci
A Japanese energy company has reported the loss of a portable storage drive containing personal information of approximately 10.9 million customers. The incident represents one of Japan’s largest data exposure events in the energy sector, raising serious concerns about physical data security practic