One Hacker, a Team of AI Agents and About $5,000: Who’s Who in the Spree That Broke Into More Than 100 Company Websites
For years, the limit on how many companies one criminal could attack was the criminal’s own time. A new report...
L7 News
Outlook on the Web Failing or Mail Stuck in the Outbox? A Symptom Checker for Exchange Servers After October’s Windows Updates
If your company still runs its own Exchange server and people started complaining about email after Patch Tuesday, the server...
Fake Meeting Invites Are Phishing for Microsoft 365 Logins at Scale: Each Step of the Lure, Matched to a Defense
Here Is How Layered Defenses Help When a Calendar Invite Is the Phishing LureNobody thinks twice about a meeting invitation....
How One IT Provider’s Breach Became a $2.7 Million Penalty for a New York Pediatric Health Network
On Friday, the attorneys general of New York and Connecticut announced a $2.7 million settlement with Boston Children’s Health Physicians...
Case File: MALFEX, the npm Campaign That Keeps Re-Publishing Its Windows Malware Under New Names
When a registry takes down a malicious package, the usual assumption is that the threat is over. The operators behind...
Cyber Job Postings Fall to a Four-Year Low While AI Security Engineer Demand Jumps 268%: The Risers and Fallers
The U.S. cybersecurity job market is shrinking and reshaping at the same time. Employers posted far fewer security jobs in...
Save-On-Foods’ Loyalty Program Breach, Day by Day: What Was Taken, What Wasn’t, and the Scam Risk That Follows
Loyalty programs feel harmless. You trade a phone number and an email address for cheaper groceries. But this week shoppers...
Drupal’s Critical Field UI Flaw: A Patch Triage Card for Site Owners Before Exploits Arrive
Drupal’s security team does not usually ask site owners to block out time on their calendars ahead of a release....
A Backup App’s Stolen Key Opened 173 Microsoft 365 Tenants: A Playbook for Owners, IT Leads and MSPs
Here Is How Layered Defenses Help When a Trusted Third-Party App Becomes the Way InThird-party apps that back up Microsoft...
Maryland’s Anne Arundel County Confirms Files Were Stolen After a Ransomware Claim: The Confirmed Facts and the Open Questions
Anne Arundel County, the Maryland county that includes the state capital of Annapolis, has confirmed that an intruder copied files...
