Anthropic’s AI assistant Claude experienced a significant service outage coinciding with the company’s highly anticipated stock market debut. The disruption affected thousands of users globally, preventing access to Claude’s web interface, API services, and mobile applications for several hours. Whi
Apache has released version 2.4.68 of its widely-deployed HTTP Server, addressing 13 security vulnerabilities ranging from moderate to critical severity. The patched flaws include use-after-free conditions, denial-of-service vectors, cross-site scripting (XSS) vulnerabilities, and buffer overflow is
Healthcare technology company Xsolis disclosed a data breach affecting approximately 1.4 million individuals after attackers gained unauthorized access through a successful phishing campaign. The breach compromised sensitive patient information including names, dates of birth, Social Security number
A critical heap-based buffer overflow vulnerability (ZDI-26-360) has been discovered in the MATE Desktop Atril document viewer that allows remote code execution when processing malicious EPUB files. The flaw exists in the EPUB file parsing functionality and can be triggered by simply opening a speci
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory warning about ongoing cyberattacks targeting fuel tank monitoring systems used across critical infrastructure sectors. Attackers are exploiting vulnerable automatic tank gauge (ATG) systems to gain unauthorized
Iranian threat actor Handala successfully compromised a California water utility’s operational technology systems in a targeted cyberattack that demonstrated sophisticated knowledge of critical infrastructure vulnerabilities. While the breach resulted in limited operational disruption, the incident
Americans lost $388M to crypto ATM scams in 2025. Criminals are weaponizing Bitcoin kiosks to drain victims’ accounts. Know the red flags before you use one.
The Mistic backdoor has emerged as a sophisticated threat linked to the KongTuke threat actor, targeting multiple industry sectors through ClickFix social engineering techniques and ModeloRAT campaigns. This multi-stage attack employs PowerShell obfuscation, fileless execution, and advanced evasion
Drupal drops emergency security update May 20. If you’re running a Drupal site, clear your calendar. The wording alone should have admins on high alert.
Russian-linked APT group Gamaredon has weaponized a known WinRAR vulnerability (CVE-2023-38831) to deploy sophisticated modular spyware against Ukrainian targets. The campaign leverages malicious archive files disguised as legitimate documents to achieve initial access, followed by multi-stage paylo