News & Map

Muji operator fails to delete unnecessary credit card data

The company said it is continuing to investigate the matter, as it remains unclear whether the data retention was intent...

Inside an AI Attack Against a US Retailer

When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral ...

Security Teams Must Shift from Patching to Mitigation in the AI Era

Symantec’s Dick O’Brien says the rapid closure of the patch window means organizations must move beyond patching and ado...

Smart homes, new threats: Could everyday appliances be hacked?

Should we be worried about cyberattacks targeting everyday household appliances, from smart vacuums to washing machines ...

Nvidia, Jensen Huang and the history of ‘sexpionage’

A large portion of intelligence work is focused on collecting information your competitor or adversary does not want you...

Transcending the trust boundaries: how a cloud pentest works

This is the first article in a series on cloud penetration testing. We'll cover the three cloud layers (External, Overla...

NCSC Launches Cyber Adversary Testing to Boost Resilience

The UK’s National Cyber Security Centre has launched a new Cyber Adversary Simulation (CyAS) scheme

Hackers plant GSocket on Linux servers for persistent access

Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux ser...

Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover

A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the da...

Maersk Reveals Data Breach as Extortion Group Demands $5m

Maersk has revealed a threat actor extracted data from one of its legacy systems

India bypasses own rules to buy Israeli phone-hacking tech

India's expansive surveillance capabilities extend beyond cloning phones to accessing cloud-based data of tech giants.

Debt collector, 20, held in Hong Kong after 15 doxxed over unpaid loans

A 20-year-old debt collector has been arrested in Hong Kong on suspicion of doxxing 15 people by publishing their person...

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime's built-in HTTP/2 supp...

Indonesian MPs urge police chief to charge Prabowo wiretapping case suspects with treason

Police chief says treason evidence is still lacking, as lawmakers demand tougher charges

Thursday briefing: What we do (and don’t) know about Alice Huang and the Nvidia affair

In today’s newsletter: US intelligence reportedly believes the former tech executive was recruited by Beijing, raising q...

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositorie...

Nigeria: Nigerian Court Detains Journalist Daniel Ojukwu On Cybercrime Charges

[CPJ] Abuja -- The Committee to Protect Journalists calls on Nigerian authorities to immediately drop the criminal charg...

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Trac...

Muji operator says retained card data may have been leaked

Ryohin Keikaku Co., the operator of the Japanese retail brand Muji, said Thursday that some credit card information that...

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients

ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments following ...

US F-35 supply-chain leaks aiding and abetting China’s rival J-35

Mounting US supply-chain failures and decades of relentless Chinese espionage are exposing the flagship F-35 stealth fig...

The Rise and Reckoning of Jensen Huang

An inside look at Nvidia CEO Jensen Huang just weeks before he revealed an extramarital affair with a woman the US repor...

Did China use a 'honeypot' to influence Nvidia CEO? US Congress wants answers

US lawmakers have raised national security concerns over Nvidia CEO Jensen Huang's alleged relationship with a woman sus...

What could Chinese intelligence have learned from Nvidia CEO’s affair?

Nvidia says no secrets were compromised, but experts question what sensitive information may have been exposed.

When AI agents go rogue, who can Hong Kong hold accountable?

When OpenAI’s AI agents launched an autonomous attack on Australia’s Medicare portal in June, it took the company 84 day...

Chinese AI Project Scouts Spies in Taiwan Chip Industry

The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target...

The wiretapping scandal that threatens ‘open warfare’ among Indonesia’s political elite

Rift between president and Joko Widodo brings more upheaval to south-east Asia’s largest economy

Facial recognition errors put ethnic minorities at risk of wrongful arrest, police watchdog warns

Inspectors find some officers acted on potential matches from retrospective searches without making enough checksPolice ...

AI used in cyberattacks, some originating in HK

EU to make addictive app features easier to turn off

Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise

The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to us...

Personal data stolen after Queensland Parks booking service hacked

The Queensland Parks and Wildlife Service's booking system has suffered a data breach, with hackers stealing personal us...

FEATURE: Osaka Metro's facial-recognition gates struggle to win over riders

Osaka Metro Co. is pressing ahead with facial-recognition ticket gates despite weak demand, with just 24,000 people buyi...

Hacker claims to have sold VCE exam papers to hundreds of students after government website hack

With year 12 exams under way, VCAA says there is no evidence any have leaked and hacker is attempting to exploit ‘anxiou...

Hacker claims to have sold VCE exam papers to hundreds of students after government website hack

With year 12 exams under way, VCAA says there is no evidence any have leaked and hacker is attempting to exploit ‘anxiou...

Baker Tilly notifies clients of data breach at third-party provider

The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information abou...

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised...

European leaders gather in Dublin under the shadow of hybrid threats

Ireland is mounting the largest security operation in its history as around 50 European leaders gather in Dublin this we...

AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進

この対策パッケージには、官民合同のサイバー対応チーム、経済省が主導するAI専門チーム、および政府の新たな能動的サイバー防衛権限の行使に関する裁量の拡大が含まれている。

eMudhra revokes 8 more CA certificates after private key mishap

Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation into its ...