Security Bulletin

More than 948,000 records from major nonprofit management software provider DonorView have been exposed online as a result of an insecure database, according to TechRadar.

U.S. multinational food and beverage company Kraft Heinz has launched an investigation into the Snatch ransomware gang's recently emerged claims of an August attack even though there has been no indication of any systems compromise, BleepingComputer...

More than $500,000 worth of cryptocurrency was noted by Blockaid to have been exfiltrated across 500 to 1,000 wallets following a cyberattack against crypto asset hardware wallet manufacturer Ledger's Ledger Connect Kit software, reports BNN...

Novel stealthy NKAbuse malware detailed BleepingComputer reports that Mexico-, Vietnam-, and Colombia-based Linux systems have been primarily impacted by the new stealthy NKAbuse multi-platform malware, which is the first-ever backdoor exploiting the...

New attacks involving the Pierogi++ malware have been launched by Hamas-affiliated threat operation Gaza Cybergang against Palestinian entities, The Hacker News reports.

Israeli organizations previously compromised by Iranian advanced persistent threat operation OilRig, also known as APT34, including a local government entity, a manufacturing firm, and healthcare organizations, have been targeted by the APT anew with...

AI will make Meta's smart glasses more attractive for consumers. But can the company straddle cutting-edge functionality and responsible data stewardship?

The large dental insurance company said protected health information was exposed, including details about dental procedures and claims payments.

CVE-2023-50164 is harder to exploit than the 2017 Struts bug behind the massive breach at Equifax, but don't underestimate the potential for attackers to use it in targeted attacks.

Google twice postponed disabling third-party cookies, but plans to phase them out for all Chrome users by the end of 2024.

Xeol's technology secures an organization’s end-of-life software.

Bug hunter programs can help organizations foster third-party discovery and reporting of issues and vulnerabilities specific to AI systems.