On November 7, a hacker on a forum began offering what they claimed to be 353 GB of data from Doctor Alliance, a Texas-based vendor specializing in services for healthcare providers. The seller indicated the package consists of 1,240,640 files, cautioning potential buyers that “all your data will be sold”…
Critical Vulnerabilities Discovered in VMware vCenter Server: A Call to Action for Businesses On Tuesday, Broadcom issued urgent updates in response to a significant security vulnerability affecting VMware vCenter Server that could potentially allow remote code execution. This vulnerability, designated CVE-2024-38812 and rated with a CVSS score of 9.8, is…
A recent advisory from U.S. and U.K. intelligence agencies reveals that cyber operatives linked to the Russian Foreign Intelligence Service (SVR) have adapted their operational tactics in light of prior public revelations regarding their attack methodologies. This shift aims to circumvent detection and mitigation efforts from cybersecurity defenders. The National…
Wiz, a cloud security organization, has disclosed a recently patched vulnerability in Microsoft’s Azure Cosmos database that posed a significant risk by allowing unauthorized users to gain full administrative access to the database instances of other customers. This vulnerability, named “ChaosDB,” was particularly alarming due to its potential for exploitation…
Third-Party Risk Management, Governance & Risk Management, Operational Technology (OT) Sean Tufts of Claroty Discusses Security Challenges for Critical Infrastructure , Brian Pereira (creed_digital) • November 12, 2025 Sean Tufts, Field CTO, Claroty Recent findings indicate that third-party risks present significant cybersecurity challenges for critical infrastructure providers, potentially leading to…
Over the last decade, the English-speaking cybercriminal landscape, known as “The COM,” has grown from a niche group dedicated to trading rare social media usernames into a complex, service-driven underground economy orchestrating a wide array of global cyberattacks. Foundational communities like Dark0de and RaidForums have played a critical role in…
In a significant development for the cybersecurity landscape, GitLab has issued critical patches addressing a serious vulnerability in both its Community Edition (CE) and Enterprise Edition (EE) software. The flaw, categorized as an authentication bypass, could potentially allow unauthorized users to gain access to sensitive systems. This vulnerability is embedded…
Recent reports indicate a significant increase in fraudulent activities conducted by Chinese cybercriminals, who have successfully scammed individuals worldwide, primarily through the use of deceptive text messages. These messages often impersonate reputable entities such as the United States Postal Service or toll-road collection agencies, leading to the extraction of more…
The Jenkins project, a widely used open-source automation server, recently reported a security breach involving unauthorized access to one of its servers. The incident involved attackers exploiting a vulnerability in the Atlassian Confluence service to install a cryptocurrency mining application. The breach, which reportedly took place last week, targeted a…
