Security Bulletin

While RansomHub admitted to having compromised Rite Aid customers' ID numbers and rewards numbers, Rite Aid emphasized that none of its clients' health information, financial details, and Social Security numbers have been exposed.

Allegedly included in the data dump were messages, files, and data sent by Disney's development team via Slack.

Infiltration of American Golf's systems has purportedly enabled the exfiltration of members' information, user IDs, passwords, and secret keys, as well as emails, licenses, passports, reports, and financial details.

Malicious Microsoft Excel files have been used by threat actors to facilitate the execution of a Samba file share-hosted VBS code.

Several decentralized finance platforms, including Compound Finance, Celer Network, and Pendle, had domains registered with Squarespace impacted by DNS hijacking attacks on Thursday.

GenAI has created great excitement and promise, but security teams still must grapple with the risks.

Many organizations lack policies and training to address the risk of shadow IT, including GenAI.

The bug (CVE-2024-6385) is similar — but not identical — to a critical flaw GitLab patched just two weeks ago.

U.S. government organizations are falling short on their cybersecurity practices.

In the scrum, countless call and text records leaked, other cell companies caught strays, the DoJ became involved, and someone has already been arrested.