Browsing: Flaw

Security researchers said that attackers can gain access to credentials, stored mail and other connected systems.

Hackers stole patient data from Qbusoft, a Polish medical software maker, weeks after a breach at another provider exposed records of nearly 19 million people in the country.

I’ve watched four YouTube videos, done a load of laundry, and scored some amazing deals online, getting ready to write this post. Or I might say, avoiding writing this post.

Japanese software company Helpfeel has confirmed a data breach on its screenshot-sharing platform Gyazo, in which attackers exploited a vulnerability in its image upload server, stealing approximately 23.62 million user records and metadata tied to hundreds of millions of images.

Researchers warn the vulnerability could be used by state-linked actors for espionage.

Japan ‘s Digital Agency disclosed that attackers exploited a vulnerability in a VPN device to access its Government Solution Service (GSS), potentially leaking personal information belonging to approximately 246,000 government employees, public officials, and contractors. The breach was detected on June 25 and confirmed as a VPN exploitation on July 9, meaning the public disclosure…

GitLab users are being urged to patch a maximum severity vulnerability in the platform after reports of “in-the-wild” exploitation.

Cisco Talos says three separate threat groups are exploiting two recently patched Secure Firewall Management Center (FMC) flaws. The main target is CVE-2026-20079, a critical authentication bypass that lets unauthenticated attackers remotely bypass security controls, run scripts and potentially gain root access. Attackers also exploit CVE-2026-20316 to access sensitive data through a low-privilege account. The…

Users are urged to be careful about what they connect to AI services and the data shared

Security researchers warned the company of unusual threat activity in a recently updated N-able environment.