Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R 
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used 
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners 
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today 
Attackers Are Crashing Cisco Firewalls Through Their VPN Login Page: The Three Conditions, the Fixed Versions and the Stopgap 
CISA’s Free Microsoft 365 Settings Checker Gets Its Biggest Update Since Launch
Here Is How Layered Defenses Turn a Settings Report Into Real ProtectionMost cloud breaches at small businesses do not start...
A Vendor’s Leaked Access Key Sat on a Public Website for 14 Months, Exposing 238,000 Denver Health Plan Members
No one broke down a door in this case. A key to a health plan’s data was simply left out...
How a Hijacked Analytics Script Turned Every Checkout on a Brazilian E-Commerce Platform Into a Card Skimmer
The online stores in this case did nothing wrong on their own websites. The card-stealing code reached their checkout pages...
A Ransomware Affiliate Who Worked for Both Nefilim and Hive Gets Nearly Six Years in U.S. Prison
A U.S. federal court has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for carrying out ransomware...
‘Unplug Your PC by Noon’: Inside GMO’s Week-Long Fight With the Hackers Behind Its Desktop Cloud Breach
It is not often that a hosting provider asks customers to physically pull the plug on their own computers. That...
Node2Shell Moves From Warning to Active Attacks as CISA Adds the Brotli Flaw to Its Exploited List
Last week, Node2Shell was a serious bug with patches on the way. As of Tuesday, it is a bug attackers...
A Flaw in Microsoft Authenticator for Android Let Rogue Apps Quietly Take Over Work Accounts
Here Is How Layered Defenses Keep One Bad App on One Phone From Handing Over Your Whole Work AccountMost people...
Hour by Hour: How a Cyberattack Sent Ambulances Away From New Mexico’s Only Level 1 Trauma Center
On Monday, October 26, New Mexico briefly had no emergency department able to treat the most serious injuries. A cybersecurity...
Your Security Camera Does Not Need to Be on the Internet to Be Hijacked: How Attackers Are Reaching Dahua Cameras Through the Cloud
Many small businesses assume a camera behind the office firewall is safe because nobody can reach it from outside. A...
Case File: A Former Penetration Tester, an AI Attack Framework, 90 Breached Organizations and 8.2 Million Stolen Records
Police in Seoul have put a face on one of the big worries about AI in cybercrime: that it lets...
