CISA’s Free Microsoft 365 Settings Checker Gets Its Biggest Update Since Launch
Here Is How Layered Defenses Turn a Settings Report Into Real ProtectionMost cloud breaches at small businesses do not start...
Day: October 28, 2026
A Vendor’s Leaked Access Key Sat on a Public Website for 14 Months, Exposing 238,000 Denver Health Plan Members
No one broke down a door in this case. A key to a health plan’s data was simply left out...
How a Hijacked Analytics Script Turned Every Checkout on a Brazilian E-Commerce Platform Into a Card Skimmer
The online stores in this case did nothing wrong on their own websites. The card-stealing code reached their checkout pages...
A Ransomware Affiliate Who Worked for Both Nefilim and Hive Gets Nearly Six Years in U.S. Prison
A U.S. federal court has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for carrying out ransomware...
‘Unplug Your PC by Noon’: Inside GMO’s Week-Long Fight With the Hackers Behind Its Desktop Cloud Breach
It is not often that a hosting provider asks customers to physically pull the plug on their own computers. That...
Node2Shell Moves From Warning to Active Attacks as CISA Adds the Brotli Flaw to Its Exploited List
Last week, Node2Shell was a serious bug with patches on the way. As of Tuesday, it is a bug attackers...
