Attackers Are Now Hijacking Exposed Node-RED Automation Servers With a Single Web Request 
Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R 
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used 
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners 
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today 
Hackers Heated Supermarket Freezers to 50°C Overnight: A Timeline of the Attack on French Grocery Chains
Most cyberattacks steal data or lock files. This one spoiled food. Over one night, attackers took control of refrigeration at...
GitLab Rates a New Pipeline Flaw 10 Out of 10: What Self-Hosted Teams Are Asking
Plenty of small and mid-size companies run their own GitLab server, often set up years ago by a developer or...
Attackers Are Hiding Behind Real Microsoft Power BI Links to Install Remote Access Tools
Here Is How Layered Defenses Help When the Link Looks LegitimateMost staff are taught to check where a link goes....
One Web Host Hit, Nearly 70 Mississippi Government Websites Down: A Briefing on the U.S. Next Attack
When a shared hosting provider goes down, every customer goes down with it. Mississippi has been living that since Friday:...
Let’s Encrypt Is Shortening Certificates to 64 Days: The Dates That Matter and What to Fix Before Them
Website certificates are about to expire faster. Let’s Encrypt, the free certificate authority behind a huge share of the web’s...
An Attacker’s Open Folder Exposed an AI-Driven Break-In Operation Hitting WordPress Sites
Attackers rarely let defenders watch them work, but one recently left the door open. A misconfigured server exposed the live...
Malware on One Contractor’s PC Puts 8.7 Million Karaoke Customer and Staff Records at Risk: Your Questions Answered
A single infected computer at an outside contractor has put the personal records of millions of karaoke customers in Japan...
A Perfect-10 WordPress Plugin Flaw Is Under Attack: The Bricksforge Spec Sheet and a Site Owner’s Checklist
If your company website was built with the Bricks visual builder for WordPress, check today whether it also runs the...
Microsoft’s Satya Nadella Says to Treat AI Models Like Insider Risks. Here’s What That Looks Like for a Small Business
Here Is How Layered Defenses Help When the AI Itself Is the InsiderMost security programs already plan for the insider...
Heart Monitor Maker iRhythm Notifies 360,000+ After a Social Engineering Breach: The Incident on One Page
Medical device maker iRhythm, known for the Zio heart-monitoring patch, has started telling regulators and patients that their information was...
