Cloud software provider Blackbaud has agreed to a $49.5 million settlement with 49 U.S. state attorneys general over its 2020 […]
Blackbaud Pays $49.5 Million Settlement for 2020 Ransomware Breach Read More »
CISA has updated its advisory on the critical WSUS vulnerability (CVE-2025-59287), attributing active, widespread exploitation to the Russian state-sponsored group
CISA Warns: Russian APT “Strontium” Actively Exploiting WSUS Flaw Read More »
A new phishing technique dubbed “GhostLink” has emerged. Attackers compromise a user’s account (e.g., Teams or Zoom) and join a
New “GhostLink” Phishing Tactic Uses Malicious QR Codes in Video Meetings Read More »
A critical unauthenticated remote code execution (RCE) vulnerability (CVE-2025-8201, CVSS 10.0) in the “JetStream” enterprise data streaming platform is being
Critical “JetStream” Data Platform RCE Flaw (CVE-2025-8201) Actively Exploited Read More »
The U.S. Treasury and SEC issued a joint bulletin warning financial institutions of sophisticated, AI-powered disinformation campaigns. State-sponsored actors are
U.S. Government Warns of AI-Powered Disinformation Targeting Financial Markets Read More »
A critical (CVSS 9.8) authorization flaw in the “Post SMTP” WordPress plugin, active on over 400,000 sites, is being actively
Critical WordPress Plugin “Post SMTP” Flaw Actively Exploited for Site Takeover Read More »
The new “2025 Insider Risk Report” from Cybersecurity Insiders finds that 93% of security leaders say insider threats are as
Report: 93% of Orgs Find Insider Threats as Hard as (or Harder than) External Attacks Read More »
Japanese media giant Nikkei, owner of the Financial Times, has disclosed a data breach impacting over 17,000 employees and business
Media Giant Nikkei Reports Data Breach via Compromised Slack Account Read More »
A critical (CVSS 9.8) vulnerability has been disclosed in the popular “@react-native-community/cli” NPM package, which receives ~2 million weekly downloads.
Critical Flaw in React Native NPM Package (CVE-2025-11953) Exposes Developers Read More »
Google’s November 2025 Android Security Bulletin patches a critical remote code execution (RCE) vulnerability in the Android System component. Tracked
Critical 0-Click RCE Flaw in Android System (CVE-2025-48593) Read More »
