PwC Confirms Breach at the Vendor Hosting Its Employee Training Records After Extortion Group Claims 590GB
One of the world’s largest professional services firms has become the latest example of a familiar problem: the breach that...
L7 News
CISA Flags Active Attacks on Self-Hosted Nextcloud Servers Running Collabora’s Built-In Office App. Turning It Off Is Not Enough
Plenty of small firms run their own Nextcloud server so staff can share files and edit documents without paying for...
Microsoft Is Retiring Its Own Text-Message and Phone-Call Sign-In Codes. Here Are Your Three Paths Before February 1
Here Is How Layered Defenses Help Your Team Move Past Text-Message Codes Without Locking Anyone OutFor years, the six-digit code...
Two Marines Take the Pentagon to Court Over a Breach That Left 3 Million People’s Records Exposed for Nine Months
For about nine months, a flaw in a Defense Department file-sharing system left unencrypted personnel files open to people who...
Node2Shell, Explained: Your Questions About the Node.js Compression Bug That Researchers Just Turned Into Code Execution
When Node.js shipped security updates on Wednesday, October 21, the most serious fix was for a bug in the code...
Railway Breach Timeline: How a Cloud Hosting Platform Went From Strange Activity to Telling Every Customer to Change Their Keys
Developers have been passing one instruction around since Wednesday: if you have anything on Railway, rotate your secrets. Railway, a...
Quest Diagnostics Says an Intruder Reached Patient Records Through the Portal Doctors Use to Order Lab Tests
Lab testing company Quest Diagnostics has disclosed a breach in a system that medical practices use to order tests and...
Third Exploited VeloCloud Orchestrator Zero-Day Since July: Even a Read-Only Login Can Become a Superuser
If your branch offices connect through VeloCloud SD-WAN, the management console behind that network has a new problem. Arista Networks...
Under Three Hours From First Probe to Privileged Access: Microsoft Ties the ConnectWise Backup Breach to an AI-Driven Chinese Campaign
Here Is How Layered Defenses Help When the Attacker Arrives as an App You Already TrustedMost security advice assumes the...
Wi-Fi, Phones, Cameras and Attendance, All at Once: An Inventory of What a Cyberattack Shut Off Across Richmond’s Public Schools
On Wednesday morning, staff at Richmond Public Schools in Virginia opened their district-issued laptops and found a message claiming the...
