Binance, the world's largest crypto exchange, experienced a major theft of approximately $6.3 billion in cryptocurrency linked to a compromised DevOps engineer's laptop, marking a significant security incident in October.
Security researchers have developed an exploit for a critical Linux kernel flaw that enables unauthenticated remote attackers to gain root access on MPTCP servers.
A trojanized version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 days, planting persistent SSH backdoors on developer machines.
A critical zero-day vulnerability in Cisco Secure Firewall with a CVSS score of 8.6 is being actively exploited in the wild to attack SSL VPN devices.
CISA warns that a maximum-severity GitLab vulnerability patched earlier this month is now being actively exploited by attackers in the wild.
Chinese threat actors used a low-severity VMware ESX logging flaw as a zero-day combined with PHP2Shell and other exploits to gain root access to Palo Alto Networks PAN-OS firewalls while reducing audit visibility.
Trezor has received credible reports of a suspected hardware crypto-theft implant discovered in some Trezor Safe 5 devices sold to customers.
Northflank suffered a security breach that may have exposed encrypted environment variables, prompting immediate rotation of all keys and credentials.
Several healthcare entities including Marathon Health and Covenant Health experienced data breaches exposing personal information and Social Security numbers, leading to settlements and legal action.
Multiple school districts and educational institutions, including Richland Parish Schools and Jerome schools, experienced ransomware attacks that exposed student Social Security numbers and disrupted daily operations.
The Florida Department of Education announced a significant data breach affecting approximately 4.9 million individuals.
Cathay Pacific disclosed that an Amadeus breach affected 53,000 of its bookings, while major Canadian law firms Bennett Jones and Borden Ladner Gervais were hit in a separate breach targeting Bay Street firms.