⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Written by: Kelli Vanderlee, Stuart Carrera For years, the cybersecurity industry's understanding of software supply chain compromise has been anchored by a few watershed events, including Russian cyber espionage actor ICE RELIC’s (formerly known as APT29) 2020 compromise of SolarWinds and North.
The US Federal Trade Commission (FTC), together with Utah and California, has <a href="https://www.ftc.
The U.S. Federal Trade Commission (FTC), alongside Utah and California, has filed a lawsuit against telehealth provider Hims & Hers, alleging the company shared consumers’ sensitive health data with third-party advertising platforms like Meta and Snap despite promising robust privacy protections. Hims & Hers, a digital health platform offering online consultations, prescription medications, and personal care products, is also accused of deceptive billing practices, including charging users before consultations and making subscription cancellations unnecessarily difficult.
The FTC, along with Utah and California, sued Hims & Hers for allegedly sharing sensitive health data with ad platforms and using deceptive billing and subscription practices that made cancellation difficult. The lawsuit highlights privacy and security concerns in telehealth.
A critical vulnerability in Microsoft's Azure Cosmos DB, dubbed CosmosEscape by researchers at Wiz, could have allowed attackers to gain full read and write access to any customer database. The flaw, discovered in November 2025 and patched by July 2026, stemmed from a sandbox escape in the Gremlin query engine, enabling attackers to execute arbitrary code and retrieve a platform-wide master key.
A vulnerability in Azure Cosmos DB's Gremlin query sandbox could allow an attacker to obtain a platform-wide key and access any database across tenants. Microsoft patched the issue within 48 hours and completed the fix across all regions, with no evidence of customer impact.