Home

Symantec says the group behind Warlock hit a water utility, a telecom provider, a regional government and a university in the past two months, mostly through on-premises SharePoint flaws first patched in July 2025.

Researchers found more than 16,000 Supabase databases with tables open to the public, many behind apps built quickly with AI coding tools. Over half held personal information. No hacking required.

F5 patched CVE-2026-94127, a 9.8-rated flaw in BIG-IP APM that lets attackers run code without logging in. It was exploited before the fix shipped, and roughly 15,000 APM systems are reachable from the internet.

Attackers used a hardcoded Cloudflare API key to rewrite Brevo's embedded forms and chat scripts at the CDN edge. Visitors to customer sites got fake verification prompts. WordPress admins got a hidden backdoor.

Edtech platform Mathspace lost data on more than a million students, parents and teachers through its self-hosted Metabase server. The patch had been out for days. The advisory just never reached anyone who acted on it.

A pre-authentication flaw chain in PaperCut NG and MF is being actively exploited, the first emergency fix was bypassed, and 47% of installations one researcher tracks run versions with no patch at all. Campus print servers are a prime target.

A $10,000 phishing kit called iAuthFlow v2 uses a stolen login session to enroll the attacker's own passkey on the victim's account. The standard "reset password, kill sessions" playbook does not remove it.

Roughly 65,000 expired domains are re-registered every day, and attackers are paying millions for the ones with history. That old conference site, grant project or department vanity URL still carries your name and your traffic.

North Korea's Lazarus Group used fake job offers and a doctored PDF reader to reach a Windows kernel flaw nobody else knew about. Microsoft patched it on Aug. 11. Research labs and job-hunting students fit the target profile.

The FBI and EPA say attackers are logging into internet-facing PLCs at water utilities, changing the passwords and IP addresses, and leaving operators blind. Some plants saw pressure loss and flooding.