A significant data security incident has been uncovered where an organization stored all employee passwords in a single, unencrypted Excel file. This fundamental security failure exposed credentials for potentially thousands of users, creating severe risks including unauthorized access, lateral move
The University of Nottingham has confirmed a significant data breach affecting over 450,000 current and former students. The incident exposed sensitive personal information including names, contact details, and academic records. The breach highlights the growing vulnerability of educational institut
GitHub has announced a major security update to npm that will disable install scripts by default, significantly reducing the attack surface for supply chain compromises. This change prevents malicious code from automatically executing during package installation, forcing maintainers to explicitly en
A severe security flaw in Ivanti Endpoint Manager Mobile (EPMM) allows authenticated attackers to execute arbitrary code remotely on vulnerable systems. The vulnerability, tracked as CVE-2023-35078, affects multiple EPMM versions and poses significant risks to enterprise mobile device management inf
Security researchers have successfully jailbroken Anthropic’s latest Claude Fable 5 AI model, bypassing its safety mechanisms to generate functional stack-based buffer overflow exploits. The jailbreak demonstrates critical weaknesses in AI alignment techniques and raises concerns about large languag
The Langflow AI development platform is under active attack due to a critical path traversal vulnerability (CVE-2024-52304) that allows unauthenticated attackers to read arbitrary files from affected systems. Tracked with a CVSS score of 7.5, this flaw enables threat actors to exfiltrate sensitive c
CrowdStrike has joined the OpenID Foundation and IDPro (Identity Professional Association), strengthening its commitment to identity security standards and industry collaboration. This strategic move positions the cybersecurity giant to influence identity protocols, share threat intelligence, and co
Logitech has launched an $80 foldable Bluetooth mouse targeting mobile professionals who avoid carrying traditional mice. While the device offers portability and convenience, Bluetooth peripherals continue to present security considerations including keystroke injection vulnerabilities, device spoof
The FBI has dismantled multiple fraudulent consulting websites operated by Chinese threat actors specifically designed to target U.S. security clearance holders. These sophisticated honeypot operations posed as legitimate recruitment and consulting firms to identify, profile, and potentially comprom
A China-linked botnet known as JDY has expanded its operational capacity to over 1,500 compromised devices, primarily targeting vulnerable IoT equipment and networking hardware. The botnet’s infrastructure is being leveraged for large-scale cyber reconnaissance activities, credential harvesting, and