Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reports that Surfshark VPN confirmed a breach of their internal testing environment that may have exposed limited customer data. The company recommends users change passwords as a precaution.
This article states that Microsoft Excel's KB5002914 update breaks copy and paste functionality for some users, affecting cells, formulas, and formatting. Microsoft has acknowledged the issue and is working on a fix.
Identity verification company IDScan confirmed a data breach after hackers offered 153 million driver's license records for sale on a hacking forum. The stolen data includes names, addresses, license numbers, and dates of birth.
US Cyber Command has appointed a veteran intelligence agency leader to guide its artificial intelligence strategy. The move aims to strengthen collaboration between Cyber Command and the intelligence community in cyber defense and offense.
The article challenges the common use of the word 'burnout' to describe the psychological toll of cybersecurity work. The author shares personal experiences and research into trauma among first responders, doctors, and military personnel to highlight more accurate terms like vicarious trauma and moral injury.
This week's ThreatsDay bulletin reveals a pattern of attackers exploiting existing access, trust, and weak edges rather than using novel methods. Specific incidents include malicious browser extensions stealing crypto data and Chinese-speaking actors using AI to automate intrusions against Asian targets.