Stay Informed

Cybersecurity News

Home / News

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

The Hacker News
The Hacker News Vulnerabilities

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused…

DataBreaches.net
DataBreaches.net Breaches & leaks

KR: Bithumb discloses data leak after internal system breach; One of three financial firm breaches reported that day

CoinTelegraph reports: South Korea’s crypto exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system earlier …

DataBreaches.net
DataBreaches.net Breaches & leaks

Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat

Sead Fadilpašić reports: Japanese internet giant GMO Group has told its customers to scan their computers for viruses, back up all of their data, disconnect th…

DataBreaches.net
DataBreaches.net Breaches & leaks

AU: Northern Territory Health backtracks on claim only five patients impacted by RDH privacy breach

Grace Atta reports: The Northern Territory health department has backtracked on its claim that only five patients were affected by a privacy breach that led to…

BleepingComputer
BleepingComputer Vulnerabilities

Hackers now scanning systems for recently-patched Oracle flaw

Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability.…

DataBreaches.net
DataBreaches.net Breaches & leaks

Traceability becomes the new battleground in healthcare data breach litigation

Abbye Alexander, Esq., Henry Norwood, Esq., and Emily Taing, Esq. of Kaufman Dolowich LLP write: Recent caselaw suggests a shift in how courts analyze healthca…

DataBreaches.net
DataBreaches.net Breaches & leaks

Court denies motions to dismiss in PowerSchool Data Breach Litigation

In previous litigation involving Illuminate (J.M. v. Illuminate Educ. Inc.), the district court held that Illuminate could be considered a provider of healthca…

DataBreaches.net
DataBreaches.net Breaches & leaks

Ukrainian National Sentenced for Role in Hacking Hospitals, Businesses, and Governments as Part of Ransomware Conspiracies Causing Over $100 Million in Losses

A press release from the U.S. Department of Justice: Artem Stryzhak, 36, a Ukrainian national, was sentenced today to 70 months in prison for conspiracy to com…

DataBreaches.net
DataBreaches.net

Whitsett, NC sends out alert about phishing email

The Town of Whitsett, North Carolina issued an alert on Facebook on October 22: The Town of Whitsett is notifying residents, vendors, community partners, and o…

The Record
The Record

FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering

The FBI seized the domain of a “bulletproof” hosting provider accused of facilitating a range of cybercrimes, including money laundering and the distribution o…

DataBreaches.net
DataBreaches.net Breaches & leaks

NZ: Grieving families’ ‘incredibly stressful’ wait for answers after major NZ cyber attack

Nicholas Jones reports: A major cyber attack has caused delays to coronial investigations, with one grieving family wanting answers after their mother’s unexpe…

The Hacker News
The Hacker News Vulnerabilities

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers

A critical 16-year-old flaw in EDK II, the open-source code that most hardware makers use to build UEFI firmware, can allow an attacker to run code on a machin…

The Hacker News
The Hacker News Vulnerabilities

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code exec…

BleepingComputer
BleepingComputer Vulnerabilities

CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known a…

The Hacker News
The Hacker News Breaches & leaks

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, au…

BleepingComputer
BleepingComputer Breaches & leaks

Nefilim and Hive ransomware affiliate gets 70 months in prison

A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue busines…

The Hacker News
The Hacker News Vulnerabilities

Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, t…

Linux Windows Android

The Hacker News
The Hacker News

FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering

The U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The mo…

The Hacker News
The Hacker News Breaches & leaks

Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach

Japan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, afte…

Windows

The Hacker News
The Hacker News Breaches & leaks

Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Tailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only t…

The Hacker News
The Hacker News Vulnerabilities

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said t…

The Hacker News
The Hacker News Breaches & leaks

Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli…

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

Godot Vulnerability Could Let a Language File Run Code in a Game

A Godot vulnerability could let an attacker hide code in a language file and make a game run it on a player's computer.

LinuxSecurity - Security Articles
LinuxSecurity - Security Articles Vulnerabilities

MCP Security Flaw in Google Toolbox Could Expose Server Files

An MCP security flaw in Google's open-source Toolbox for Databases could let an attacker copy files off the server running it or replace files on that machine.