A zero-day windows vulnerability HiveNightmare leads to local privilege escalation, exposing system files, registry, and SAM database to non-admin users.
WeChat has suspended new user registrations until at least "early August" as it rolls out a security upgrade, assumed to be prompted by recent Chinese laws regarding the storage and transmission of the personal data of the country's citizens.
Google is now calling for Privacy Sandbox technologies to be in place in the Chrome web browser and available to third party developers by the end of 2022, and for tracking cookies to be phased out of the browser beginning in mid-2023.
A set of documents obtained by Sky News, allegedly obtained from the Iranian cyber command, details plans by Iran to do advanced real-world damage with cyber attacks. Targets include retail fuel pumps and container ships.
A Japanese government official disclosed a data leak that exposed Olympics ticket buyers' account credentials but the Olympics organizers denied being the source of the breach.
Second special directive from the TSA is requiring pipeline operators to implement specific mitigation measures and create contingency and recovery plans, though most of the details are being kept from the public.
Contentious WhatsApp privacy update has caused new consumer complaints to be filed by watchdog groups, which say that users are being unfairly pressured into accepting.
After the breach of Kaseya and thousands of clients downstream from it by REvil ransomware, the perpetrators disappeared abruptly but Kaseya appears to have received a decryption key nearly three weeks into the attack.
Saudi Aramco data breach leaking 1 TB of proprietary company information and full employee profiles came about due to a third party security lapse at an unnamed contractor.
F5 Labs says web application security is the greatest cybersecurity challenge, and the cause for more than half of all the largest software security incidents experienced over the last 5 years.
