After recent news stories revealed that current versions of iOS can be compromised with a zero-click exploit used by the controversial Pegasus spyware, Apple has issued a security update that it promises closes the hole for all users.
Cisco Duo customers may have had VoIP and SMS MFA logs exposed to an attacker in early April. Third party breach is the result of one of the provider's employees being phished. The attackers then seemed to target the MFA logs of specific clients of interest.
A known state-sponsored hacking group from China has been sanctioned by the US Treasury Department for a campaign of cyber attacks over the past decade, and has been named by the UK's National Cyber Security Centre (NCSC) as the culprit in a 2021 cyber espionage campaign against parliamentarians.
American automaker Ford is investigated a data breach affecting 44,000 customers after prolific threat actor IntelBroker published the stolen data on a dark web hacking forum.
Many have turned to VPN services to protect their privacy. However, the 2018 high-profile hack which NordVPN only acknowledged recently has raised questions on just how safe they really are.
The CircleCI security breach leaves most of its CI/CD platform clients with a pile of time-consuming cleanup of assorted keys, tokens and variables as they are forced to immediately rotate secrets.
The fourth draft data protection bill looks to be no less contentious, as it adds vital protections but also exempts the country's government from all of its terms and appears to give tech platforms a fairly free hand in sending citizen data overseas.
A data breach at France's national unemployment agency may have exposed 20 years worth of records, a possible total of 43 million between that and a related breach of an employment service for people with disabilities.
Bloomberg reported that Chinese spies planted a grain-sized microchip in motherboards supplied to server manufacturers in an alleged supply chain attack. What are the lessons for enterprises?
The state government of Maine has confirmed a MOVEit data breach that leaked extensive personally identifiable information of basically all 1.3 million residents.
