Japanese telecommunications giant KDDI Corporation disclosed a massive data breach affecting up to 14.2 million email login credentials across six internet service providers. The incident, which originated from unauthorized access to KDDI’s email infrastructure, exposed usernames and passwords store
Israeli cybersecurity training and simulation company Cyberbit has shut down its operations in Israel, laying off its local workforce while pivoting to focus exclusively on the United States market. The company, known for its cyber range training platforms and SOC simulation products, will continue
Scammers are exploiting caller ID spoofing technology to impersonate the Police Service of Northern Ireland (PSNI), displaying legitimate police phone numbers to trick victims into purchasing gift cards. The PSNI has issued a public service announcement warning residents that officers will never req
Google inadvertently published technical details of an unpatched security vulnerability in Chromium before a fix was available, potentially exposing millions of Chrome, Edge, and other Chromium-based browser users to exploitation. The premature disclosure has sparked concerns about coordinated vulne
Microsoft has announced Scout, an always-on AI agent designed to integrate deeply with Microsoft 365 applications including Teams, Outlook, and other productivity tools. While promising enhanced productivity through continuous monitoring and intelligent assistance, Scout introduces significant secur
Security researchers have uncovered a critical vulnerability in Google’s Gemini AI assistant that allows attackers to execute prompt injection attacks through popular messaging platforms including WhatsApp, Slack, and SMS. By exploiting Gemini’s deep integration with Google Workspace and messaging a
Oxford University has confirmed a second security breach within weeks, this time compromising student data through its career services platform. The incident exposed personal information of students and alumni who used the university’s career management system. This follows a separate breach earlier
A critical zero-day vulnerability dubbed “RoguePlanet” in Microsoft Defender allows attackers with basic user access to escalate privileges to SYSTEM-level control on Windows machines. The flaw exploits Defender’s built-in scanning mechanisms through a time-of-check-time-of-use (TOCTOU) race conditi
Attackers exploited the May 2024 TanStack npm supply chain attack to steal 170 private CrowdSec GitHub repositories through a compromised former employee account. The breach remained undetected for four months until stolen source code appeared on cybercrime forums in September.
Palo Alto Networks’ GlobalProtect VPN is being actively exploited through CVE-2026-0257, a critical authentication bypass vulnerability with a CVSS score of 9.3. Rapid7 has confirmed in-the-wild exploitation targeting vulnerable PAN-OS firewalls. Attackers can gain unauthorized network access withou