Explore

Trendline Trendline
GreatXML Zero-Day Exploit Bypasses BitLocker, Raising Security Concerns

GreatXML Zero-Day Exploit Bypasses BitLocker, Raising Security Concerns

GreatXML Zero-Day Exploit Bypasses BitLocker, Raising Security Concerns
Trendline Trendline
GitHub Implements Security Changes in npm to Combat Software Supply Chain Attacks

GitHub Implements Security Changes in npm to Combat Software Supply Chain Attacks

GitHub Implements Security Changes in npm to Combat Software Supply Chain Attacks
Rapid Read Rapid Read
US Department of Justice Charges Suspected Russian Hacker in Cyber Espionage Case

US Department of Justice Charges Suspected Russian Hacker in Cyber Espionage Case

Denis Obrezko, a suspected Russian hacker, has been extradited from Thailand to the United States and charged with facilitating a cyber espionage campaign. The campaign, allegedly conducted by a group known as Void Blizzard, targeted numerous U.S. companies. Obrezko, 36, appeared in federal court in Boston and is charged with conspiring to commit unauthorized access to protected computers. He is currently held without bond, with the case being prosecuted by the U.S. Department of Justice's National Security Division. The Thai government extradited Obrezko in accordance with its domestic laws and international treaties. Void Blizzard, identified by Microsoft in 2025, has been active since at least April 2024, targeting organizations in NATO member states and Ukraine across various sectors, including government and defense.
Rapid Read Rapid Read
Russian National Charged in Connection with Void Blizzard Espionage Campaign Targeting U.S. Companies

Russian National Charged in Connection with Void Blizzard Espionage Campaign Targeting U.S. Companies

Federal prosecutors have charged Denis Nikolayevich Obrezko, a Russian national, with conspiracy to commit unauthorized computer access. This charge is linked to a cyber-espionage campaign conducted by the Russia-aligned threat group Void Blizzard. According to an FBI affidavit, Obrezko facilitated the campaign by purchasing a virtual private server and domain names used in attacks targeting businesses, educational institutions, and other organizations in the United States and elsewhere. The group, identified by Microsoft as a state-sponsored Russian threat group, has been involved in large-scale espionage operations against government agencies, defense suppliers, and critical infrastructure providers across NATO member states, Ukraine, and beyond. The FBI's investigation revealed that Void Blizzard primarily relied on stolen session tokens to authenticate to victim accounts and used a U.S.-based commercial proxy service to mask the connection's location.
Trendline Trendline
Oracle Identifies Critical Security Flaw Exploited by Hackers in PeopleSoft Software

Oracle Identifies Critical Security Flaw Exploited by Hackers in PeopleSoft Software

Oracle Identifies Critical Security Flaw Exploited by Hackers in PeopleSoft Software
Trendline Trendline
Oracle Warns of Critical Security Flaw in PeopleSoft Software Affecting Over 100 Companies

Oracle Warns of Critical Security Flaw in PeopleSoft Software Affecting Over 100 Companies

Oracle Warns of Critical Security Flaw in PeopleSoft Software Affecting Over 100 Companies
Reuters Reuters
Google says ShinyHunters hackers targeting education sector via Oracle exploit

Google says ShinyHunters hackers targeting education sector via Oracle exploit

June 11 (Reuters) - Alphabet's cybersecurity unit Mandiant and Google Threat Intelligence Group said Thursday they had identified an active compromise and extortion campaign targeting Oracle's PeopleSoft enterprise software, which they attributed to the hacking group ShinyHunters.
Trendline Trendline
Oracle Issues Advisory on PeopleSoft Vulnerability Amid Hacker Exploits

Oracle Issues Advisory on PeopleSoft Vulnerability Amid Hacker Exploits

Oracle Issues Advisory on PeopleSoft Vulnerability Amid Hacker Exploits
Trendline Trendline
Jaguar Land Rover Enforces In-Person Password Resets Following Cyber-Attack

Jaguar Land Rover Enforces In-Person Password Resets Following Cyber-Attack

Jaguar Land Rover Enforces In-Person Password Resets Following Cyber-Attack
Rapid Read Rapid Read
Windows BitLocker 0-Day Vulnerability Exposes Data to Physical Attacks

Windows BitLocker 0-Day Vulnerability Exposes Data to Physical Attacks

Microsoft has disclosed a new vulnerability in Windows BitLocker, tracked as CVE-2026-50507, which allows attackers with physical access to bypass the security feature and access sensitive data. This vulnerability affects a wide range of Windows client and server releases, including Windows 10 and 11, as well as Windows Server versions. The flaw is due to a missing authentication check, enabling unauthorized access to encrypted data on devices. Microsoft has released patches as part of its June 2026 security updates, but the vulnerability was publicly disclosed before patches were available, increasing the risk of exploitation.
Trendline Trendline
ServiceNow Patches Vulnerability Exploited Against Customers, Raises Security Concerns

ServiceNow Patches Vulnerability Exploited Against Customers, Raises Security Concerns

ServiceNow Patches Vulnerability Exploited Against Customers, Raises Security Concerns
Trendline Trendline
Check Point VPN Vulnerability Exploited in Qilin Ransomware Attacks

Check Point VPN Vulnerability Exploited in Qilin Ransomware Attacks

Check Point VPN Vulnerability Exploited in Qilin Ransomware Attacks