When the Algorithm Fires You: Uber Faces €825M Fine

Uber faces an €825M GDPR fine for automatically suspending drivers without human review, highlighting the risks of AI decisions affecting workers. The Dutch Data Protection Authority handed Uber its... Read more »

Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack

Norway ’s shared government infrastructure suffered a third DDoS attack, disrupting digital services but showing no signs of data compromise. Norway ‘s shared digital government infrastructure has been hit... Read more »

Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable

Two CVSS 9.8 miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability database. Manual patch required. Two critical authentication bypass vulnerabilities in... Read more »

Apollo Confirms Data Breach Amid Cyberattacks Targeting Financial Firms

Apollo Global Management confirmed a social-engineering breach exposing sensitive personal data amid a wider hacking campaign targeting financial firms. The post Apollo Confirms Data Breach Amid Cyberattacks Targeting Financial... Read more »

Microsoft Teams’ New Policy Lets Admins Automatically Block Meeting Bots

Microsoft Teams is adding a policy that lets IT admins automatically block detected external meeting bots instead of relying on organizer approval. The post Microsoft Teams’ New Policy Lets... Read more »

US Treasury sets up quantum readiness unit

The US Treasury has established a quantum readiness taskforce to help financial services institutions through the transition to post-quantum cryptography. Read more »

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks,... Read more »

U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Oracle HTTP Server and... Read more »

Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown

WeedHack Minecraft Malware Survives C2 Takedown: Fake Client Sites Still Active, SEO Poisoning Puts Malicious Downloads at the Top of Google McAfee Labs published a follow-up report on the... Read more »

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups’ servers in exchange for... Read more »
Subscribe to our Newsletter