Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
A critical vulnerability in on-premises SharePoint Server is being weaponized in real-world attacks against government agencies, universities, and energy infrastructure. Microsoft released an emergency update on July 20 after discovering the flaw was only partially addressed by an earlier patch.
Following a breach of White House Chief of Staff Susie Wiles's phone contacts that enabled impersonators to target lawmakers, Senator Ron Wyden has criticized the FBI for offering only basic mobile security advice instead of recommending stronger protections already available on consumer devices.
Microsoft's latest security release addresses at least 67 vulnerabilities across its operating systems and applications, with one actively exploited flaw and proof-of-concept code now available for a critical Windows bug.
The Treasury Department has sanctioned Funnull Technology Inc. and its administrator for operating a content delivery network that hosted hundreds of thousands of websites used in "pig butchering" fraud schemes, which cost Americans over $200 million in reported losses.
Tyler Robert Buchanan, 23, was transferred from Spain to face U.S. charges including wire fraud and identity theft for his alleged role in a prolific cybercriminal collective that targeted major tech firms.
A security architect at the National Labor Relations Board has alleged that accounts created for Elon Musk's Department of Government Efficiency accessed gigabytes of sensitive case files in March, with one downloaded code repository traced to a 25-year-old DOGE employee.
Security researchers have uncovered a network of fake recruitment websites designed to ensnare Russians interested in Ukrainian paramilitary groups opposing the Kremlin, with potential consequences far graver than typical phishing attacks.
The Russia-based malware and spam hosting service Prospero OOO has begun channeling its operations through infrastructure operated by Kaspersky Lab, drawing scrutiny from security researchers and spam-fighting organizations.
