Nearly a Year Later, Harvard’s Alumni and Donor Breach Finally Has a Number: 851,000 Email Addresses
When Harvard University disclosed a break-in at its Alumni Affairs and Development systems last November, it did not say how...
L7 News
Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request
Node-RED is the kind of tool that quietly ends up everywhere. It lets people wire together sensors, web services and...
Microsoft Quietly Closed a Windows 11 Path From Standard User to SYSTEM, With No CVE to Track
Here Is How Layered Defenses Help When a Fix Ships Without a CVEMany small businesses make a sensible choice: staff...
Five Things to Know About the DHS Staff Directory Leak, and What It Shows About Identity Data
A leak of personnel records from the U.S. Department of Homeland Security has become one of the most closely watched...
A Page-Speed Script Turned Thief: Questions and Answers on the Polymarket DebugBear Hijack
Most business websites load small pieces of code from other companies: analytics, chat widgets, ad tags, performance monitors. On October...
Meet VOLTA, the Infostealer That Hands Your Stolen Data to an AI and Asks What You’re Worth
Infostealers have long been a volume business: grab every password and cookie from thousands of machines, then sort through the...
One Supplier, Many Airlines: The Amadeus Booking Breach Keeps Growing
Most travelers have never heard of Amadeus, yet it sits behind the reservations, ticketing and check-in systems of a large...
Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R
Synology does not often sound the alarm. The storage maker’s last public warning about active attacks on customer devices came...
Fake Recruiters, Fake Candidates and Lures by the Hundred: Microsoft Maps How North Korean Hackers Are Scaling Up With AI
Here Is How Layered Defenses Keep Up When Attackers Scale With AINorth Korea’s hacking groups have not changed what they...
The Hacker Behind the Fake AP Tweet That Rattled Wall Street Gets 42 Months: The Syrian Electronic Army Case File
In 2013, a single false post from the Associated Press’s Twitter account claimed President Barack Obama had been hurt in...
