Stories tagged security.
ransomware.live
The Catholic University of El Salvador (UNICAES) is a private Catholic university founded in 1982 in Santa Ana, El Salvador.
BleepingComputer
FedRAMP's new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements. Anecdotes explains why the December 7 deadline is just the beginning of a broader shift toward continuous, automated…
CyberScoop
The legislation from Senate Intelligence Vice-Chairman. Mark Warner, D-Va., and Senate Commerce Chairman Ted Cruz, R-Tex., would create a government-industry group to write voluntary best practices. The post Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to…
PyPI / crates.io / RubyGems / Go index / NuGet
RCE detection & confirmation toolkit for authorised penetration testing
ransomware.live
Wallatec creates high-performance carbonation systems for restaurants and busy kitchens. Their equipment is built to handle intense daily use, working perfectly even in the most hectic envir onments. We will upload 15gb of corporate data soon. Employee information (passports), projects, financi…
Help Net Security
SymphonyAI has introduced Symphony Risk Intelligence (SRI), an enterprise-grade, agent-native platform built to unlock Always-on Compliance. This is a critical shift from periodic to continuous risk and compliance management, in which institutions continuously reassess risk and adapt controls as…
PyPI / crates.io / RubyGems / Go index / NuGet
Client for the UCIP API: Mumbai ward-level heat vulnerability data and cited nature-based cooling recommendations, as pandas and geopandas frames.
Dark Reading
Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization's entire M365 environment.
The Record (Recorded Future)
At least four internet providers serving Kyiv and other parts of Ukraine suffered partial connectivity losses following Wednesday’s drone attack, according to internet monitoring group NetBlocks.
Semafor (filter tech)
The region is carrying on even as the Middle East conflict exposes its vulnerability to supply shocks.
BleepingComputer
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. [...]
ransomware.live
Strack Construction is a commercial and industrial construction contractor headquartered in St. Joseph, Minnesota. Founded in 1938, the family-owned company provides design-build, general co ntracting, construction management, and real estate development services. We will upload 60gb of corporate…
ransomware.live
Revolut data on sale. Contact information at the bottom of the page. Includes 680 high-value networth users.
ransomware.live
Italy is being exposed for failing to follow proper data protection laws. Includes 85,000+ Files — 150GB. Top departments, units, offices affected.
The Record (Recorded Future)
The healthcare firm Astrana warned regulators that hackers accessed confidential information by impersonating company personnel.
Wiz Research
New initiative partners with under-resourced organizations to uncover, remediate exploitable risk at scale.
Dark Reading
AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.
Rapid7
Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets. This dynamic is central to our analysis as we kick off a series…
TechRadar / Tom's Guide / PCWorld / Pocket-lint / Stuff
Three AI frameworks operated almost entirely on their own.
TechCrunch
The incident is the first known breach to affect a government agency, and Australia's prime minister has vowed to hold OpenAI accountable.
Help Net Security
Before the Hugging Face and RubyGems hacks, autonomous OpenAI agents attempted to hack into three other websites, including an Australian government public health website, independent research lab Transluce revealed on Wednesday. “Notably, the tasks the agents were trying to solve were not…
SecurityWeek
A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration. The post AI-Powered Campaign Targets Hundreds of Online Retailers appeared first on SecurityWeek.
Help Net Security
Cloud Range has announced the official launch of its AI Validation Range and Cloud Range AI Readiness Framework. They give organizations a structured way to test AI models and agents in realistic environments, validate their readiness for operational responsibility and safety, and determine which…
PyPI / crates.io / RubyGems / Go index / NuGet
Labeling of objects of the Software Heritage archives with known vulnerabilities affecting them.