South Korean e-commerce giant Coupang has been slapped with a record-breaking $409 million fine by Korea’s Personal Information Protection Commission (PIPC) for a massive data breach that exposed sensitive customer information. This penalty marks the largest ever issued under South Korea’s Personal
VRChat, the popular social virtual reality platform, has suffered a massive data breach affecting approximately 2.4 million users. Threat actors successfully exfiltrated sensitive user information including email addresses, usernames, and potentially account details. The breach highlights ongoing se
A critical zero-day vulnerability in Microsoft Exchange Server is being actively exploited through weaponized email attacks. Threat actors are leveraging this previously unknown flaw to gain unauthorized access to corporate mail servers, execute remote code, and establish persistent access to compro
The University of Nottingham has confirmed a significant data breach affecting over 450,000 current and former students. The incident exposed sensitive personal information including names, contact details, and academic records. The breach highlights the growing vulnerability of educational institut
Security researchers have successfully jailbroken Anthropic’s latest Claude Fable 5 AI model, bypassing its safety mechanisms to generate functional stack-based buffer overflow exploits. The jailbreak demonstrates critical weaknesses in AI alignment techniques and raises concerns about large languag
A severe security flaw in Ivanti Endpoint Manager Mobile (EPMM) allows authenticated attackers to execute arbitrary code remotely on vulnerable systems. The vulnerability, tracked as CVE-2023-35078, affects multiple EPMM versions and poses significant risks to enterprise mobile device management inf
The Langflow AI development platform is under active attack due to a critical path traversal vulnerability (CVE-2024-52304) that allows unauthenticated attackers to read arbitrary files from affected systems. Tracked with a CVSS score of 7.5, this flaw enables threat actors to exfiltrate sensitive c
CrowdStrike has joined the OpenID Foundation and IDPro (Identity Professional Association), strengthening its commitment to identity security standards and industry collaboration. This strategic move positions the cybersecurity giant to influence identity protocols, share threat intelligence, and co
The complete source code for the notorious Miasma worm was temporarily exposed on GitHub before being taken down. This self-propagating malware, known for its sophisticated evasion techniques and modular architecture, had its operational secrets revealed to the public for several hours. The leak pos
The notorious ShinyHunters cybercrime gang has launched targeted attacks against Oracle PeopleSoft servers, compromising enterprise systems and exfiltrating sensitive corporate data. Organizations running vulnerable PeopleSoft installations face immediate risk of data theft, with attackers exploitin