Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
A new free service called DecryptAds aggregates publicly available advertising data to reveal which companies are serving ads and collecting information from websites and mobile apps—including those based in geopolitically sensitive regions.
Microsoft released fixes for 398 security flaws this month, including one actively exploited zero-day and two previously disclosed vulnerabilities. The massive patch volume reflects an industry-wide trend driven by AI-assisted vulnerability discovery.
A 26-year-old from Ontario has pleaded guilty to orchestrating a scheme that compromised customer data at over 165 firms using Snowflake, along with stealing records from more than 100 million AT&T customers.
Security researchers have uncovered that budget TV streaming devices engage in a dual operation: they function as residential proxies when users watch content, then switch to participating in large-scale ad fraud schemes when idle.
LG Electronics USA announced plans to remove residential proxy functionality from smart TV applications following research showing over 42 percent of webOS apps contained such components.
Microsoft shipped updates addressing at least 570 security flaws this month, nearly triple last month's already-record count, with the company attributing the surge to artificial intelligence accelerating vulnerability detection across its software portfolio.
A six-month exposure of CISA's AWS keys and internal passwords in a public GitHub repository has prompted the agency to release a detailed postmortem highlighting systemic weaknesses in secret management and external reporting channels.
Two key members of the Scattered Spider cybercrime group pleaded guilty in UK court to charges related to the August 2024 disruption of Transport for London, with additional U.S. indictments revealing a sprawling operation targeting healthcare providers, retailers, and tech companies.
