Security researchers at Wiz Research have discovered a critical vulnerability in the Redis in-memory database that could allow an attacker to gain remote code execution (RCE) capabilities and take over the host.
Both suspected state-backed foreign adversaries and more run-of-the-mill cyber criminals appear to mostly still be focused on using AI tools to make their existing operations faster, more efficient and more error-free. OpenAI's ChatGPT and other models appear to have fairly strong guardrails that are highly resistant to creation of malware or automation of attack operations.
North Korean hackers have now plundered $2 billion this year and an overall total of $6 billion in stolen crypto. The state-sponsored hacking teams have demonstrated creative means of penetrating crypto platforms and are responsible for at least 30 incidents in 2025, including a $1.46 billion theft from Bybit.
California’s $1.35 million penalty against Tractor Supply marks a turning point in retail privacy enforcement. Until now, many retailers assumed regulators were more interested in tech giants than store chains. That assumption is over.
Open-source software company Red Hat has confirmed a security breach on one of its GitLab instances after a threat actor claimed to have stolen nearly 570 GB of data from across various repositories.
Japan’s top brewer, Asahi, has indefinitely suspended domestic ordering and shipment operations following a major system failure caused by a disruptive cyber attack.
Several of the California AI safety law's terms are even more stringent than comparable rules put into play in the European Union. But despite seemingly broad support there is still criticism of its expected negative impact on innovation, and from the privacy and security side some note that key regulations have yet to be placed on AI developers.
A months-long data breach has exposed the personal information of the Federal Emergency Management Agency (FEMA) and U.S. Customs and Border Protection (CBP) workers.
A WestJet data breach has exposed the sensitive personal information of 1.2 million passengers after sophisticated hackers breached the airline’s internal systems, locking some users out of their accounts.
Harrods has disclosed a third-party data breach after cybercriminals claimed to have stolen over 430,000 customer records. The luxury department learned of the breach after the attackers approached the company and demanded a ransom to avoid leaking the stolen data online.
