A recent breakthrough in cybersecurity research reveals a significant vulnerability within air-gapped systems, which are designed to be isolated from unsecured networks. Researchers have successfully demonstrated a method for exfiltrating sensitive data using a novel attack called AIR-FI. This technique…
New Bipartisan Bill Aims to Fortify Healthcare Cybersecurity with Enhanced Regulations and Support Marianne Kolbasuk McGee (HealthInfoSec) • December 8, 2025 A bipartisan coalition of U.S. senators has reintroduced a significant cybersecurity bill aimed at enhancing protections in the healthcare…
Coupang Faces U.S. Lawsuit for Punitive Damages Following Data Breach In a significant development within the cybersecurity landscape, Coupang, a prominent South Korean e-commerce platform, is now facing a lawsuit in the United States related to a recent data breach.…
A significant security vulnerability has been identified within the decentralized social network Mastodon, enabling attackers to impersonate any user and seize control of their accounts. The issue stems from inadequate origin validation, as stated in a recent advisory from Mastodon’s…
SolarWinds, a Texas-based supplier of enterprise monitoring software, has acknowledged a major cybersecurity incident linked to a compromised version of its Orion products. Up to 18,000 customers, including numerous Fortune 500 companies and U.S. military branches, may have implemented this…
In a significant enforcement action under the European Union’s General Data Protection Regulation (GDPR), France’s data protection authority, CNIL, has imposed a €50 million (approximately $57 million) fine on Google. This marks the first major penalty levied under the GDPR…
Growing Concerns Over AI Vulnerabilities in the UK: NCSC Warns of Prompt Injection Risks The National Cyber Security Centre (NCSC) has issued a significant warning regarding a misunderstanding that could expose UK organizations to serious data breaches. As generative AI…
Mass Exploitation of SSRF Vulnerability in Ivanti Products A significant server-side request forgery (SSRF) vulnerability affecting Ivanti Connect Secure and Policy Secure products has been widely exploited. Recent reports indicate that attacks are emanating from over 170 distinct IP addresses,…
The ongoing investigation into the SolarWinds breach continues to reveal the intricate tactics employed by the attackers who infiltrated the company’s internal systems and manipulated its software update processes. This meticulous and well-coordinated supply chain attack appears to have been…
The Space Bears ransomware group has announced that it has acquired internal documents from Comcast by taking advantage of a breach at Quasar Inc., a telecommunications engineering firm located in Georgia. This information surfaced on the group’s dark web leak…
