24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform...
after
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
In one of the cases we have investigated, a few hours after the user approved the request, the attacker signed...
Trump’s AI Safety Chief Is Out — After Just 90 Days on the Job
The Trump administration’s top AI testing official is out after just 90 days on the job. Chris Fall has resigned...
Mythos Didn’t Break Your Security Program. Your Exposure Window Could.
The industry spent the initial months after Anthropic's April 7 Mythos reveal focused on volume. How many new CVEs would...
Meta Removes Muse Image Instagram Feature After Consent Backlash
Meta’s newest AI image feature barely made it through the week. Days after launching Muse Image, Meta scrapped a feature...
OpenAI’s New GPT-5.6 Is Coming Sooner Than You Think
OpenAI’s next GPT model is coming after an unusual pause. GPT-5.6 is expected to roll out this week after US...
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet's FortiGuard Labs identified the...
Europol, Microsoft Hit Malware Network Behind 27M Stolen Logins, 140,000 Infected Computers
Europol, Microsoft, and international partners have disrupted a global malware network after investigators recovered 27 million stolen login credentials and...
Madison Square Garden Hack Exposes 26 Million Visitor Records
A ticket scan may not be the only thing Madison Square Garden kept after a night out. Hackers linked to...
Maine forced to take down data breach portal after fake notices filed with authorities
The US state of Maine has taken its public data breach notification portal offline after someone submitted fraudulent breach disclosures...
Jamf CEO: ‘AI is happening whether organizations know it or not’
Apple, WWDC, and the enterprise Tschida’s comments come shortly after WWDC 2026, where Apple introduced a raft of AI advances...
Nintendo Alleged Data Breach: Threat Actor Demands $2M Ransom
Nintendo is facing a potential incident after a threat actor claimed to have stolen nearly a decade’s worth of internal...
Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack
Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack Pierluigi Paganini May 26, 2026 Attackers have poisoned four...
FBI director Kash Patel’s brand website taken offline after malware reports
FBI director Kash Patel’s brand website taken offline after malware reports Pierluigi Paganini May 25, 2026 The merchandise website of...
GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP...
