A new report from BitSight reveals a significant security gap between financial firms and their third-party vendors. While the financial […]
Financial Sector Vendors Have Weaker Security Than Banks, Creating Risk Read More »
Hyundai AutoEver America, the in-house IT and software company for Hyundai and Kia, has disclosed a data breach. Attackers had
Hyundai AutoEver (IT Firm for Hyundai & Kia) Discloses Data Breach, SSNs Stolen Read More »
A critical (CVSS 9.8) vulnerability, CVE-2025-11953, has been disclosed in the popular “@react-native-community/cli” NPM package, which has ~2 million weekly
Critical (CVSS 9.8) Flaw in React Native NPM Package Exposes Developers to RCE Read More »
Cisco has released patches for two critical vulnerabilities in its Unified Contact Center Express (UCCX) appliance. The most severe, CVE-2025-20354
Critical RCE Flaws in Cisco Contact Center (CVSS 9.8) Allow Root Access Read More »
Cloud software provider Blackbaud has agreed to a $49.5 million settlement with 49 U.S. state attorneys general over its 2020
Blackbaud Pays $49.5 Million Settlement for 2020 Ransomware Breach Read More »
CISA has updated its advisory on the critical WSUS vulnerability (CVE-2025-59287), attributing active, widespread exploitation to the Russian state-sponsored group
CISA Warns: Russian APT “Strontium” Actively Exploiting WSUS Flaw Read More »
A new phishing technique dubbed “GhostLink” has emerged. Attackers compromise a user’s account (e.g., Teams or Zoom) and join a
New “GhostLink” Phishing Tactic Uses Malicious QR Codes in Video Meetings Read More »
A critical unauthenticated remote code execution (RCE) vulnerability (CVE-2025-8201, CVSS 10.0) in the “JetStream” enterprise data streaming platform is being
Critical “JetStream” Data Platform RCE Flaw (CVE-2025-8201) Actively Exploited Read More »
The U.S. Treasury and SEC issued a joint bulletin warning financial institutions of sophisticated, AI-powered disinformation campaigns. State-sponsored actors are
U.S. Government Warns of AI-Powered Disinformation Targeting Financial Markets Read More »
A critical (CVSS 9.8) authorization flaw in the “Post SMTP” WordPress plugin, active on over 400,000 sites, is being actively
Critical WordPress Plugin “Post SMTP” Flaw Actively Exploited for Site Takeover Read More »
