Explore

Trendline Trendline
Coca-Cola's Fairlife Halts U.S. Production After Cybersecurity Breach

Coca-Cola's Fairlife Halts U.S. Production After Cybersecurity Breach

Coca-Cola's Fairlife Halts U.S. Production After Cybersecurity Breach
Rapid Read Rapid Read
Hackers Breach Tech Firm, Compromising Data of US Hospitals and Pharmacies

Hackers Breach Tech Firm, Compromising Data of US Hospitals and Pharmacies

Craneware, a UK-based healthcare billing software company, has reported a cyberattack resulting in the theft of a significant amount of customer data. The breach affected thousands of US hospitals and pharmacies that rely on Craneware's software for billing and patient data management. The company is investigating the incident and has expelled the hackers from its systems. The breach is part of a larger trend of cyberattacks targeting healthcare tech firms, posing risks to sensitive medical and patient data.
Rapid Read Rapid Read
SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

Two zero-day vulnerabilities in SonicWall appliances were exploited by threat actors for several weeks before patches were released, according to cybersecurity firm Volexity. The vulnerabilities, identified as CVE-2026-15409 and CVE-2026-15410, affected SMA1000 secure remote access appliances. SonicWall issued a public advisory on July 14, alerting customers to the exploitation of these flaws. Volexity, which assisted in the investigation, attributed the attacks to a threat actor it tracks as UTA0533. The exploitation reportedly began as early as June 22. The attackers deployed custom malware named KnuckleBall, which injected additional tools into legitimate processes. Despite the significant capability demonstrated by UTA0533 in compromising the appliances, the group was reportedly less successful in moving laterally or accessing other systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added these vulnerabilities to its Known Exploited Vulnerabilities catalog.
Rapid Read Rapid Read
New 'ClickLock' Malware Targets Mac Users, Compromising Security

New 'ClickLock' Malware Targets Mac Users, Compromising Security

A new malware, known as 'ClickLock Stealer,' has been identified by security firm Group-IB, targeting macOS users by coercing them into revealing their passwords. The malware operates without the need for exploits or elevated privileges, relying instead on users pasting a command into Terminal. This command is often disguised as a verification step on fake 'ClickFix' pages. Once executed, the malware downloads modules and locks system usage until the user enters their password. It then harvests sensitive data, including browser credentials and cryptocurrency wallets, sending it to a Telegram bot. The campaign has been active since May 2026, affecting over 100 victims across 33 countries, with a significant number in Europe.
Rapid Read Rapid Read
Cruciferra Crypter Utilizes Process Ghosting to Evade Detection in Cybersecurity Threats

Cruciferra Crypter Utilizes Process Ghosting to Evade Detection in Cybersecurity Threats

A new crypter service known as Cruciferra is being used by various cyber-criminal groups to cloak malware, according to research by Proofpoint. First appearing on the Exploit forum in 2025, Cruciferra is now involved in numerous campaigns delivering malware such as AsyncRAT and Agent Tesla. The service employs techniques like process ghosting and kernel-driver abuse, alongside over 90 encryption routines, to evade detection. Cruciferra's method involves DLL side-loading, where a legitimate executable is paired with a malicious DLL to deliver the payload. The crypter also disables endpoint detection by unhooking monitoring systems and using vulnerable drivers to terminate security processes. This approach has been linked to campaigns targeting sectors like financial services, healthcare, and government, with a significant portion of attacks attributed to the Chinese-speaking group TA4922.
Trendline Trendline
Coca-Cola's Fairlife Dairy Production Halted by Ransomware Attack, Impacting U.S. Operations

Coca-Cola's Fairlife Dairy Production Halted by Ransomware Attack, Impacting U.S. Operations

Coca-Cola's Fairlife Dairy Production Halted by Ransomware Attack, Impacting U.S. Operations
Rapid Read Rapid Read
OpenSSL Addresses 'HollowByte' DoS Vulnerability with Silent Fixes

OpenSSL Addresses 'HollowByte' DoS Vulnerability with Silent Fixes

A vulnerability in OpenSSL, known as 'HollowByte', has been identified, allowing attackers to exhaust a server's memory before any security handshake. Discovered by Okta's red team, the denial-of-service (DoS) bug can be triggered by a malicious payload of only 11 bytes, which declares a larger incoming message body to initiate a buffer pre-allocation that is not immediately freed. This vulnerability existed because older OpenSSL versions pre-allocated receive buffer sizes based on the incoming message body length declared in the handshake message's 4-byte header. The issue has been silently fixed in OpenSSL version 4.0.1 and backported to earlier versions.
Trendline Trendline
ServiceNow Issues Patches Following Exploitation of AI Platform Vulnerability

ServiceNow Issues Patches Following Exploitation of AI Platform Vulnerability

ServiceNow Issues Patches Following Exploitation of AI Platform Vulnerability
Rapid Read Rapid Read
Hugging Face Warns of Network Breach by Autonomous AI Agent

Hugging Face Warns of Network Breach by Autonomous AI Agent

Hugging Face, an open-source AI and machine learning platform, disclosed a security breach where attackers accessed internal datasets and credentials using an autonomous AI agent system. The breach exploited vulnerabilities in the company's data-processing pipeline, allowing attackers to steal cloud and cluster credentials. Hugging Face has since closed the vulnerable paths, evicted the attacker, and is working with forensic experts to assess the impact. The company is investigating whether partner or customer data was affected and has advised users to rotate access tokens and review account activity.
Rapid Read Rapid Read
OpenSSL Addresses 'HollowByte' Vulnerability to Prevent Denial-of-Service Attacks

OpenSSL Addresses 'HollowByte' Vulnerability to Prevent Denial-of-Service Attacks

OpenSSL has silently patched a vulnerability known as 'HollowByte' that could allow attackers to exhaust a server's memory, leading to a denial-of-service (DoS) condition. Discovered by Okta's red team, the vulnerability involves a malicious payload that triggers a buffer pre-allocation based on a declared message size, which is not immediately freed. This flaw affects older OpenSSL versions, allowing attackers to send multiple payloads to exhaust server memory. The vulnerability impacts various applications and servers using OpenSSL, including Apache, NGINX, and MySQL. Patches have been included in OpenSSL version 4.0.1 and backported to earlier versions, addressing the issue by adjusting buffer allocation practices.
Rapid Read Rapid Read
Interpol Warns of Cybersecurity Risks from Pirated Streaming Services

Interpol Warns of Cybersecurity Risks from Pirated Streaming Services

Interpol and the Spanish National Cybersecurity Institute (INCIBE) have issued warnings about the cybersecurity risks associated with using pirated streaming services like Fútbol Libre. These platforms, often used to watch events such as the Argentina vs. Spain World Cup final, pose significant threats to personal data security. Users accessing these services risk installing malware on their devices, which can lead to the theft of personal information, including passwords and banking details. The malware can also spread to other devices on the same network, exacerbating the security threat.
Trendline Trendline
Airbnb CEO Brian Chesky's Social Media Account Hacked, Promotes Crypto

Airbnb CEO Brian Chesky's Social Media Account Hacked, Promotes Crypto

Airbnb CEO Brian Chesky's Social Media Account Hacked, Promotes Crypto