Explore

Rapid Read Rapid Read
Check Point Addresses SmartConsole Zero-Day Vulnerability Exploited in Attacks

Check Point Addresses SmartConsole Zero-Day Vulnerability Exploited in Attacks

Check Point Software has patched a zero-day vulnerability in its SmartConsole admin panel, identified as CVE-2026-16232. This authentication bypass flaw allows attackers to gain administrator privileges and alter security configurations. The vulnerability affects systems where the Management Server is exposed to the internet without IP restrictions. Check Point has notified affected customers and provided guidance on securing systems. The Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw to its catalog of known exploited vulnerabilities, urging U.S. federal agencies to patch affected systems by July 25.
TheStreet TheStreet
OpenAI just disclosed something genuinely alarming

OpenAI just disclosed something genuinely alarming

Every industry builds a room where it keeps the dangerous thing. Chemical plants have containment vessels. Banks have vaults. Artificial intelligence (AI) labs have sandboxes, sealed computing environments where a model can be pushed to its limits without touching anything real. The rule is simple. ...
Trendline Trendline
Chick-fil-A Security Breach Potentially Exposes Customer Data

Chick-fil-A Security Breach Potentially Exposes Customer Data

Chick-fil-A Security Breach Potentially Exposes Customer Data
Rapid Read Rapid Read
Russian Espionage Group Exploits Zimbra Flaw to Access Western Emails

Russian Espionage Group Exploits Zimbra Flaw to Access Western Emails

A Russian state-supported espionage group has been exploiting a vulnerability in Zimbra's webmail client to access emails and two-factor authentication codes from Western organizations. The flaw, identified as CVE-2025-66376, is a stored cross-site scripting vulnerability that allows malicious HTML emails to execute JavaScript within authenticated webmail sessions. This exploit, which requires no user interaction beyond viewing the email, has been used to target government and commercial organizations in NATO member states, Ukraine, and the U.S., among others. The group, tracked by Proofpoint as TA488, has been active since at least July 2025, using the vulnerability to steal sensitive information and credentials.
Rapid Read Rapid Read
Fourth SharePoint Vulnerability Exploited Amid Recent Cyber Attacks

Fourth SharePoint Vulnerability Exploited Amid Recent Cyber Attacks

A new SharePoint vulnerability, CVE-2026-50522, has been exploited in the wild, marking the fourth such incident in the past month. This critical remote code execution vulnerability, which stems from the deserialization of untrusted data, was patched by Microsoft on July 14. Despite the patch, threat actors have been actively exploiting the flaw, with reports indicating that attackers are stealing machine keys to maintain long-term access to compromised systems. Security firm WatchTowr confirmed the active exploitation following the release of proof-of-concept exploit code. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has previously warned organizations about attacks targeting SharePoint instances, highlighting the ongoing threat posed by these vulnerabilities.
Trendline Trendline
Zimbra Releases Critical Security Update to Address Nine Vulnerabilities

Zimbra Releases Critical Security Update to Address Nine Vulnerabilities

Zimbra Releases Critical Security Update to Address Nine Vulnerabilities
Trendline Trendline
Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns

Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns

Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns
Trendline Trendline
Ubuntu Vulnerability Allows Local Root Access, Posing Security Risks

Ubuntu Vulnerability Allows Local Root Access, Posing Security Risks

Ubuntu Vulnerability Allows Local Root Access, Posing Security Risks
Trendline Trendline
Chick-fil-A Discloses Data Breach Following Credential Stuffing Attacks Affecting Customer Accounts

Chick-fil-A Discloses Data Breach Following Credential Stuffing Attacks Affecting Customer Accounts

Chick-fil-A Discloses Data Breach Following Credential Stuffing Attacks Affecting Customer Accounts
Rapid Read Rapid Read
Massive Data Breaches at Suno and Paidwork Affect Millions of Users

Massive Data Breaches at Suno and Paidwork Affect Millions of Users

Data breaches at AI music generator Suno and gig-work platform Paidwork have compromised tens of millions of user accounts. Suno's breach, which occurred in November 2025, exposed 55.3 million email addresses and payment records. Paidwork's breach, revealed last week, involved an 11 GB database containing information of approximately 22 million users, including email addresses, names, and financial data. Both companies are under scrutiny, with Paidwork denying confirmed evidence of compromise while escalating the matter for investigation.
Rapid Read Rapid Read
Nichirei Corp Restores Operations After Cyber Attack Disrupts Food Delivery Services

Nichirei Corp Restores Operations After Cyber Attack Disrupts Food Delivery Services

Tokyo-based Nichirei Corp, a major food producer and distributor, announced the full resumption of its operations following a cyber attack that disrupted its food delivery services. The attack affected clients nationwide, including Kentucky Fried Chicken Japan. Nichirei's logistics arm, responsible for frozen food shipments, was particularly impacted. The company is implementing enhanced security measures in collaboration with an external security firm. The cyber attack was claimed by a hacker group named 'RansomHouse,' which alleged to have obtained internal data from Nichirei. The company is cooperating with authorities as investigations continue. Meanwhile, KFC Japan has resumed normal operations and is offering discounts to apologize to customers for the inconvenience.
Rapid Read Rapid Read
Ransomware Threats Escalate with New Groups Emerging Weekly, Report Warns

Ransomware Threats Escalate with New Groups Emerging Weekly, Report Warns

A report by Black Kite has revealed that more than one new ransomware group is emerging every week, contributing to a fragmented and expanding criminal ecosystem. As of June 2026, there are 146 active ransomware groups, a significant increase from 105 the previous year. The report highlights that 2026 alone has seen the emergence of 61 new groups. Despite the fragmentation, a few groups continue to dominate, with the top five accounting for nearly half of the publicly disclosed victims. The report emphasizes the importance of addressing common cybersecurity vulnerabilities, recommending that organizations prioritize patching systems and software, especially those with high CVSS scores.