For individuals

Fixes have been issued by Taiwanese networking device manufacturer Zyxel to address five security vulnerabilities impacting its NAS326 and NAS542 network-attached storage devices that have not been supported since the end of 2023, including three critical flaws that could be exploited to facilitate remote code execution and command injection attacks, according to The Register.

Microsoft's new "Recall" feature, an artificial intelligence-powered functionality enabling the logging of past user activity in its recently introduced Copilot+ PCs, was regarded by cybersecurity researchers as vulnerable to cyberattacks that could compromise its stored data, Security Affairs reports.

Hackread reports that widely known Asian technology news outlet Tech in Asia was claimed by threat actor Sanggiero to have had information from more than 221,470 individuals compromised following a cyberattack this month.

Attacks with a Linux variant of the TargetCompany ransomware, also known as FARGO, Mallox, and Tohnichi, have been launched against VMware ESXi environments, BleepingComputer reports.

Intrusions targeting a high-level Southeast Asian government agency have been deployed by three clusters of Chinese state-backed hackers over nearly two years as part of the Crimson Palace cyberespionage campaign aimed at exfiltrating intelligence pertaining to the country's strategy on the territorial dispute in the South China Sea, according to The Record, a news site by cybersecurity firm Recorded Future.

Emergent RansomHub ransomware — which was leveraged in attacks against Change Healthcare, Frontier Communications, and Christie's auction house — was discovered by Symantec researchers to be an evolved iteration of the Knight ransomware, also known as Cyclops 2.0, reports The Hacker News.

Major U.S. automotive aftermarket parts vendor Advance Auto Parts had 3 TB of data containing sensitive customer and employee details claimed to be stolen by the threat actor dubbed "Sp1d3r" following the compromise of its Snowflake cloud storage environment, reports BleepingComputer.

In the rush to digital transformation, many organizations are exposed to security risks associated with citizen developer applications without even knowing it.

Inside the baseball team's strategy for building next-gen security operations through zero trust and a raft of future initiatives aiming to safeguard team data, fan info, and the iconic Fenway Park — which, by the way, is now a smart stadium.