11 article(s) in our index mention this organisation.
A breach of PingCAP, the maker of the open-source database TiDB, exposed a significant security gap in how companies manage their cloud security. The attackers, known as FulcrumSec, exploited stolen service account crede…
A company called Magnet Forensics, known for its GrayKey tool used by law enforcement, has developed a method to bypass Apple’s automatic reboot feature on iPhones. Apple is aware of the vulnerability and is likely worki…
This advisory details a vulnerability in the OHIF Viewers DICOM framework, specifically versions up to v3.12.0, that allows attackers to steal authenticated user tokens via crafted links. The vulnerability stems from unc…
This Smashing Security podcast episode discusses a potential security risk at FIFA where a hacker could have used a ‘rickroll’ tactic to disrupt the World Cup. The conversation highlights a Black Kite report detailing a…
This article highlights a significant security risk: attackers leveraging legacy infrastructure to compromise AI agent environments. Despite organizations investing heavily in securing AI workloads against direct attacks…
A breach at Novo Nordisk, facilitated by a leaked GitHub token, exposed a significant amount of sensitive data, including patient clinical trial information, healthcare professional records, and proprietary drug developm…
A new Android banking trojan, Rokarolla, has been identified by Zimperium, targeting over 200 banking and cryptocurrency apps. The malware utilizes techniques like fake login pages and Accessibility abuse to steal sensit…
This executive order from the Trump administration aims to bolster federal cybersecurity and prepare for the risks associated with frontier AI models like Anthropic’s Claude Mythos. The order establishes a voluntary fram…
A critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin has been exploited by threat actors, allowing for remote code execution and potential site compromise. Attackers have been actively targe…
A Magecart campaign is exploiting Stripe's infrastructure to steal credit card data from online stores. The attackers leverage Google Tag Manager to deliver the malicious code, bypassing standard security measures. This…
Project Zero researchers discovered a 0-click exploit chain targeting the Pixel 9 and other Android devices, leveraging a vulnerability in the Dolby UDC audio codec. The exploit chain, requiring only two software defects…
