Proton’s new Data Breach Observatory shines a light into the dark web

Ian Barker / betanews - Date breaches affecting businesses and online services are ever more frequent and can affect anyone who is unfortunate enough to be a customer or supplier. Finding out the facts about a breach can be tricky, however, as information is heavily reliant on s…

Back to Top / Thursday, October 30, 2025, 7:20 am / permalink 15536 / 4 stories in 4 months

Former L3Harris Trenchant boss pleads guilty to selling zero-day exploits to Russian broker

Lorenzo Franceschi-Bicchierai / techcrunch - Prosecutors confirmed Peter Williams, the former Trenchant boss, sold eight exploits to a Russian buyer. TechCrunch exclusively reported that the Trenchant division was investigating a leak of its hacking tools, after another employee was accused of invol…

Back to Top / Wednesday, October 29, 2025, 4:21 pm / permalink 15529 / 3 stories in 4 months

X to Retire Twitter.com Domain for Good

Laurent Giret / thurrott - X/Twitter is urging users who set up two-factor authentication with a security key to make some changes, as it’s preparing to fully retire the twitter.com domain.The post X to Retire Twitter.com Domain for Good appeared first on Thurrott.com.

Back to Top / Monday, October 27, 2025, 11:21 am / permalink 15460 / 9 stories in 4 months

CISA orders feds to patch Windows Server WSUS flaw used in attacks

Sergiu Gatlan / bleepingcomputer - The Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. government agencies to patch a critical-severity Windows Server Update Services (WSUS) vulnerability after adding it to its catalog of security flaws exploited in attacks. [...]

Back to Top / Monday, October 27, 2025, 9:21 am / permalink 15450 / 3 stories in 4 months

Researchers exploit OpenAI's Atlas by disguising prompts as URLs

Richard Speed / theregister - NeutralTrust shows how agentic browser can interpret bogus links as trusted user commands Researchers have found more attack vectors for OpenAI's new Atlas web browser – this time by disguising a potentially malicious prompt as an apparently harmless URL.…

Back to Top / Monday, October 27, 2025, 9:20 am / permalink 15448 / 5 stories in 4 months

Microsoft Issues Emergency Patch for Actively Exploited Windows Server Flaw CVE-2025-59287

Markus Kasanmascheff / winbuzzer - Microsoft has released an urgent out-of-band patch for CVE-2025-59287, a critical, wormable RCE vulnerability in WSUS that is being actively exploited in the wild.The post Microsoft Issues Emergency Patch for Actively Exploited Windows Server Flaw CVE-202…

Back to Top / Friday, October 24, 2025, 10:21 am / permalink 15378 / 5 stories in 4 months

AWS says faulty automation caused major internet outage

Suhasini Srinivasaragavan / siliconrepublic - Downdetector recorded more than 11m user reports over Monday’s AWS-linked outage.Read more: AWS says faulty automation caused major internet outage

Back to Top / Friday, October 24, 2025, 8:20 am / permalink 15375 / 6 stories in 4 months

Toys “R” Us Canada warns customers' info leaked in data breach

Bill Toulas / bleepingcomputer - Toys "R" Us Canada has sent notices of a data breach to customers informing them of a security incident where threat actors leaked customer records they had previously stolen from its systems. [...]

Back to Top / Thursday, October 23, 2025, 6:21 pm / permalink 15363 / 3 stories in 4 months

Microsoft: October updates break USB input in Windows Recovery

Sergiu Gatlan / bleepingcomputer - Microsoft has confirmed that this month's security updates disable USB mice and keyboards in the Windows Recovery Environment (WinRE), making it unusable. [...]

Back to Top / Monday, October 20, 2025, 3:20 pm / permalink 15236 / 3 stories in 4 months

Cyber giant F5 Networks says government hackers had ‘long-term’ access to its systems, stole code and customer data

Zack Whittaker / techcrunch - The company, which provides cybersecurity defenses to most of the Fortune 500, said the DOJ allowed it to delay notifying the public on national security grounds.

Back to Top / Wednesday, October 15, 2025, 11:21 am / permalink 15148 / 8 stories in 4 months

The company Discord blamed for its recent breach says it wasn't hacked

Andre Revilla / engadget - Customer service support company 5CA has released a statement contradicting claims by Discord that it was the victim of a hack last month. On October 3, Discord disclosed a data breach that the company says included a “small number” of government IDs like…

Back to Top / Tuesday, October 14, 2025, 1:21 pm / permalink 15120 / 3 stories in 4 months

Apple doubles its biggest bug bounty reward to $2 million

Mariella Moon / engadget - Apple is updating its Security Bounty program this November to offer some of the highest rewards in the industry. It has doubled its top award from $1 million to $2 million for the discovery of "exploit chains that can achieve similar goals as sophisticat…

Back to Top / Friday, October 10, 2025, 8:20 am / permalink 15063 / 12 stories in 4 months

Discord says hackers stole government IDs of 70,000 users

Dan Goodin / arstechnica - As more sites require IDs for user age verification, expect more such breaches to come.

Back to Top / Thursday, October 9, 2025, 4:20 pm / permalink 15055 / 7 stories in 4 months

Hackers claim Discord breach exposed data of 5.5 million users

Lawrence Abrams / bleepingcomputer - Discord says they will not be negotiating with threat actors who claim to have stolen the data of 5.5 million unique users from the company's Zendesk support system instance, including government IDs and partial payment information for some people. [...]

Back to Top / Wednesday, October 8, 2025, 8:20 pm / permalink 15038 / 8 stories in 4 months

Discord users' IDs and data compromised in customer service provider hack

Mariella Moon / engadget - One of Discord's third-party customer service providers has been infiltrated by an unauthorized party who was able to gain access to users' information. Discord said it recently discovered the incident, which took place on September 20. The compromised da…

Back to Top / Saturday, October 4, 2025, 10:20 am / permalink 14978 / 3 stories in 5 months

Japanese beer giant Asahi confirms ransomware attack

Sergiu Gatlan / bleepingcomputer - Japanese beer-making giant Asahi has disclosed today that a ransomware attack caused the IT disruptions that forced it to shut down factories this week. [...]

Back to Top / Friday, October 3, 2025, 10:21 am / permalink 14974 / 6 stories in 5 months

US gov shutdown leaves IT projects hanging, security defenders a skeleton crew

Brandon Vigliarolo / theregister - The longer the shutdown, the less likely critical IT overhauls happen, ex Social Security CISO tells The Register The US government shut down at 1201 ET on October 1, halting non-essential IT modernization and leaving cybersecurity operations to run on sk…

Back to Top / Wednesday, October 1, 2025, 5:21 pm / permalink 14952 / 6 stories in 5 months