Barracuda Patches Two Flaws That Could Lead to Root Access
Barracuda released patches for two high-severity vulnerabilities that could be chained to obtain root access on affected appliances.
3AM Ransomware Encrypts 37 Machines at UK School Estate
Bitdefender says a 3AM affiliate encrypted 37 machines at a UK school estate, with signs of possible AI-assisted command execution.
Apple Sets 18+ Rating for Dating Apps and Romantic AI Companions
Apple is adding App Store disclosures for dating, romantic AI companions and location sharing, with an 18+ minimum for relationship features.
Trigger.dev Says Attacker Accessed Customer Environment Variables
Trigger.dev says an attacker accessed environment variables for some customer organizations. The exploit has been blocked, but the scope remains undisclosed.
Binance Hack Began With Fake Job Interview, Exchange Says
Binance says attackers used a fake recruitment process, tampered developer tools and employee computers before stealing about $6.3 billion on October 29.
Harvard Breach Exposes 851,000 Email Addresses
Have I Been Pwned has added 851,000 email addresses from Harvard's 2025 alumni and fundraising breach, revealing the scale of the exposed data.
Europol Seizes 100 Servers in Investment Scam Crackdown
An international operation backed by Europol and Eurojust seized more than 100 servers and arrested seven suspects over fake investment platforms.
NVIDIA Brev Incident May Have Exposed Customer SSH Keys
NVIDIA says unauthorized activity on Brev may have exposed SSH keys provisioned for customer virtual machines. The company rotated affected keys.
Android November Patch Fixes Critical RCE, 23 Critical Flaws
Google’s November Android bulletin fixes a critical Framework remote-code-execution flaw and lists 23 critical vulnerabilities across two patch levels.
Revolve Breach Notices Reach at Least 197,072 People
Revolve says an attacker may have obtained names, contact details and saved payment-card data. At least 197,072 people received breach notices.
Claude Cowork Adds Beta EDR Monitoring Inside Local VM
Anthropic’s beta lets enterprise security teams run approved EDR sensors inside Claude Cowork’s local virtual machine, bringing agent activity into managed endpoint monitoring.
PapRAT Malware Targets South Asian Organizations in BITTER Campaign
FortiGuard Labs says the suspected South Asian group BITTER used three Windows infection chains to deploy PapRAT and maintain access to targeted organizations.
North Korea Denies $6.3 Billion Binance Hack Allegations
North Korea has denied responsibility for the $6.3 billion Binance cryptocurrency hack, dismissing FBI allegations as politically motivated.
Loading
