Widely Used Malicious Extensions Steal ChatGPT, DeepSeek Conversations
Two malicious extensions made to look like a legitimate tool and installed more than 900,000 times were used by...
Social – X
Best of 2025: Oracle Breach: The Impact is Bigger Than You Think | Grip
More than 140,000 cloud tenants potentially compromised. Over 6 million sensitive records exposed, including encrypted SSO, LDAP passwords, Java...
Best of 2025: Indirect prompt injection attacks target common LLM data sources
While the shortest distance between two points is a straight line, a straight-line attack on a large language model...
Best of 2025: Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’
Larry’s PR angels desperately dance on the head of a pin.Oracle is now admitting that, yes, an Oracle cloud service...
Best of 2025: UNC6395 and the Salesloft Drift Attack: Why Salesforce OAuth Integrations are a Growing Risk
Is your Salesforce environment integrated with third-party apps like Salesloft Drift? If so, your organization could be at risk...
Best of 2025: Ukraine Pwns Russian Drone Maker — Gaskar is ‘Paralyzed’
Ukrainian Cyber Alliance and Black Owl team up to hack manufacturer of Russian military drones, sources say.Gaskar Group, Russian designer...
Best of 2025: LDAPNightmare: SafeBreach Labs Publishes First Proof-of-Concept Exploit for CVE-2024-49112
SafeBreach Labs Researchers have developed a zero-click PoC exploit that crashes unpatched Windows Servers using the Windows Lightweight Directory...
Best of 2025: Microsoft’s January 2025 Patch Tuesday Addresses 157 CVEs (CVE-2025-21333, CVE-2025-21334, CVE-2025-21335)
10Critical147Important0Moderate0LowMicrosoft addresses 157 CVEs in the first Patch Tuesday release of 2025 and the largest Patch Tuesday update ever...
Best of 2025: Blue Shield of California Data Breach Exposes 4.7M Members’ Info
Blue Shield of California has confirmed a data breach affecting 4.7 million members due to a misconfigured Google Analytics...
Best of 2025: Inside the Minds of Cybercriminals: A Deep Dive into Black Basta’s Leaked Chats
The leaked internal chat communications of the Black Basta ransomware group offer an unprecedented view into how cybercriminals operate,...
NCC Group Taps Qualys to Extend Managed Security Service into Shadow IT Realm
NCC Group this week revealed it has allied with Qualys to expand the scope of its managed attack surface...
NCC Group Taps Qualys to Extend Managed Security Service into Shadow IT Realm
NCC Group this week revealed it has allied with Qualys to expand the scope of its managed attack surface...
NCC Group Taps Qualys to Extend Managed Security Service into Shadow IT Realm
NCC Group this week revealed it has allied with Qualys to expand the scope of its managed attack surface...
NCC Group Taps Qualys to Extend Managed Security Service into Shadow IT Realm
NCC Group this week revealed it has allied with Qualys to expand the scope of its managed attack surface...
NCC Group Taps Qualys to Extend Managed Security Service into Shadow IT Realm
NCC Group this week revealed it has allied with Qualys to expand the scope of its managed attack surface...
