Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
Ravie LakshmananJul 21, 2026Email Security / Vulnerability Zimbra has rolled out fixes to address multiple critical security issues, including a...
Security
Craneware Confirms Data Theft After Cyberattack, Investigations Underway
Hackers have stolen data from Craneware, a healthcare software provider serving thousands of U.S. hospitals and pharmacies, highlighting how cybercriminals...
AWS Billion-Dollar Software Bug Explained
A runaway cloud bill can trigger instant panic. For some Amazon Web Services (AWS) customers, that panic arrived in the...
Sophos ZTNA unlocks SaaS app control and so much more
For many of you, Sophos ZTNA has been a staple in your security stack for a few years now, providing...
Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine
At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine, using the feeds to...
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
Ravie LakshmananJul 20, 2026AI Security / Vulnerability In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that...
Suspected Chinese snoops caught breaking into universities’ Roundcube mailservers
Security Proofpoint researcher tells The Reg: 'We estimate the total volume of targets would be a few dozen' Suspected Chinese...
23andMe Agrees to $18M Settlement With 43 States Over 2023 Data Breach
An $18 million settlement is the latest consequence of 23andMe’s 2023 data breach—and a reminder that some stolen information can...
Microsoft’s ‘Project Perception’ Could Challenge Anthropic’s Mythos in AI Security
Microsoft is reportedly preparing a new security product, called Project Perception, that would work similarly to Anthropic’s Mythos, deployed within...
Critical Zoom Flaw Could Let Attackers Take Over Windows Accounts
A critical flaw in Zoom’s Windows software could allow an unauthenticated attacker to remotely take over an account, giving organizations...
New FCC Proposal Pits Phone Privacy Against Fraud Prevention
The days of buying an anonymous burner phone in the U.S. could be numbered. The Federal Communications Commission has proposed...
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared...
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared...
The Biggest Data Breaches of 2026 So Far, Ranked by Impact
A single cyber breach can expose millions of people, disrupt essential services, and leave victims dealing with the consequences for...