⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article details a critical SQL injection vulnerability in Metabase that was exploited in zero-day attacks. The attacks aimed to steal customer data, affecting systems like Framework and Tally.
This article celebrates the ten-year anniversary of AWS Managed Microsoft AD, which started as a solution for running directory-aware workloads in the cloud. It has since evolved to support enterprise identity for thousands of organizations worldwide.
Unlimited Technology Systems reported a data breach that impacted over 3.8 million individuals, which occurred in October 2025. The incident highlights security vulnerabilities in healthcare software companies.
The National Rural Water Association has partnered with cybersecurity experts to launch the Water Watch Center, a program designed to help financially constrained water utilities combat growing cyber threats. The initiative aims to give smaller utilities access to needed security support.
This article reports on a campaign that published nearly 800 malicious npm packages capable of infecting Windows, macOS, and Linux systems with a RAT and infostealer. The attack chain starts with a README instructing developers to use require(), which triggers the WEL1DROPPER downloader.
This article from Broadcom explains why native telemetry correlation is essential for effective XDR. It argues that the best XDR does not just collect signals but connects them, highlighting 11 reasons this integration matters for security operations.