⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The founder of QR generation service Pageloot learned the hard way that sensitive information stored in Google Docs with anyone with the link permissions can be indexed by Google Search. A contractor accidentally exposed login credentials for the company's staging environment in a Google Doc set to anyone with the link can view, and the document was subsequently discovered through Google Search when a developer typed the company's domain while debugging.
Microsoft has started testing a faster Windows File Explorer and a less cluttered, more customizable context menu in Windows 11 preview builds rolling out to Insiders this week. The updated File Explorer promises improved performance, while the new context menu design reduces visual clutter and offers more customization options for users.
Heights Finance Holdings disclosed a data breach after an unauthorized party accessed a third-party cloud platform containing sensitive customer data, including personal, banking, and identity information. The consumer lender filed a report with Texas regulators mentioning up to 734,828 affected individuals, though this figure covers operations across multiple states including Alabama, Tennessee, Georgia, Texas, and South Carolina.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April.
Microsoft confirmed an outage affecting search functionality in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive. Some users experienced issues searching for emails, files, and other content across these services during the disruption.
SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers. The hardware wallet maker confirmed that all affected customers were notified individually by email on August 16, 2026.