Mass Exploitation of SSRF Vulnerability in Ivanti Products A significant server-side request forgery (SSRF) vulnerability affecting Ivanti Connect Secure and Policy Secure products has been widely exploited. Recent reports indicate that attacks are emanating from over 170 distinct IP addresses,…
The ongoing investigation into the SolarWinds breach continues to reveal the intricate tactics employed by the attackers who infiltrated the company’s internal systems and manipulated its software update processes. This meticulous and well-coordinated supply chain attack appears to have been…
The Space Bears ransomware group has announced that it has acquired internal documents from Comcast by taking advantage of a breach at Quasar Inc., a telecommunications engineering firm located in Georgia. This information surfaced on the group’s dark web leak…
In a recent announcement, Airbus, the European aerospace manufacturer, confirmed a data breach that affected its Commercial Aircraft business information systems, leading to the unauthorized access of certain employee personal data. While the specifics of the breach have not been…
Pharma Firm Inotiv Confirms Data Breach Following Ransomware Attack In a significant cybersecurity incident, pharmaceutical company Inotiv has reported a data breach that was triggered by a recent ransomware attack. The company disclosed the breach to its stakeholders, emphasizing its…
Recent findings have unveiled three significant security vulnerabilities in Azure HDInsight, particularly affecting its Apache Hadoop, Kafka, and Spark services. These vulnerabilities could potentially be exploited to facilitate privilege escalation and launch a regular expression denial-of-service (ReDoS) attack, leaving systems…
Recent reports reveal a sophisticated supply-chain attack targeting the Vietnam Government Certification Authority (VGCA). This breach involved the manipulation of the agency’s digital signature toolkit, allowing hackers to implant a backdoor into affected systems. The incident was brought to light…
Google Launches Privacy-Focused Password Checkup Service Amid Rising Data Breaches In an era of escalating data breaches, where compromised credentials are frequently traded across the web, users face a daunting challenge: determining if their login information has been exposed. Recognizing…
Australia Shifts to Voluntary AI Framework, Leaving Regulatory Gaps On December 2, 2025, the Australian government unveiled a national strategy that favors voluntary frameworks for artificial intelligence, diverging sharply from its earlier proposal for enforceable regulations. Three months prior, officials…
NEWTOWN, Pa., Dec. 07, 2025 (GLOBE NEWSWIRE) — National class action law firm Edelson Lechtzin LLP is currently investigating claims related to a data breach at Petco Health and Wellness Company, Inc. (“Petco”). Petco, a prominent pet care retailer based…
