Explore

Trendline Trendline
cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass

cPanel WHM Vulnerability Exposes Internet Infrastructure to Authentication Bypass
Trendline Trendline
GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits
Rapid Read Rapid Read
Sandhills Medical Foundation Discloses Ransomware Breach Affecting 170,000 Individuals

Sandhills Medical Foundation Discloses Ransomware Breach Affecting 170,000 Individuals

Sandhills Medical Foundation, a healthcare provider based in South Carolina, has revealed a significant data breach affecting nearly 170,000 individuals. The breach was the result of a ransomware attack discovered on May 8, 2025. The organization has been collaborating with law enforcement, cybersecurity experts, and a forensics firm to investigate the breach and assess its impact. The compromised data includes sensitive personal information such as names, dates of birth, Social Security Numbers, and personal health information. The Inc Ransom group, responsible for the attack, has listed Sandhills Medical on its leak website and made the stolen data available for download.
Trendline Trendline
Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project
Rapid Read Rapid Read
Sri Lankan Hackers Divert $625,000 Payment Meant for U.S. Postal Service

Sri Lankan Hackers Divert $625,000 Payment Meant for U.S. Postal Service

Sri Lanka has reported a missing payment of approximately $625,000 intended for the U.S. Postal Service, which has been unaccounted for several weeks. This incident follows a recent theft of $2.5 million from Sri Lanka's finance ministry by hackers. The Treasury Secretary, Harshana Suriyapperuma, indicated that these incidents are likely business email compromise attacks, where hackers manipulate bank accounts and routing numbers during invoice payments. Such scams are prevalent among cybercriminals, with the FBI noting that email compromise attacks resulted in billions of dollars in losses last year. The Sri Lankan government is under pressure due to these security breaches, especially as the country is still recovering from an economic crisis that led to a debt default in 2022.
Rapid Read Rapid Read
LiteLLM Vulnerability Exploited Shortly After Disclosure, Exposing Sensitive Data

LiteLLM Vulnerability Exploited Shortly After Disclosure, Exposing Sensitive Data

A critical vulnerability in the LiteLLM AI gateway was exploited shortly after its disclosure, allowing attackers to access sensitive database tables. The flaw, identified as CVE-2026-42208, involves an SQL injection during the proxy API key verification process. This vulnerability enables unauthenticated attackers to send crafted Authorization headers to access the database, potentially leaking credentials. The first attacks were observed 36 hours after the advisory was indexed in the GitHub Advisory database. Attackers targeted tables containing API keys and provider credentials, although no further exploitation of the extracted data has been reported.
Trendline Trendline
Exposed VNC Servers Pose Significant Risks to Industrial Control Systems

Exposed VNC Servers Pose Significant Risks to Industrial Control Systems

Exposed VNC Servers Pose Significant Risks to Industrial Control Systems
Trendline Trendline
OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years
Trendline Trendline
Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected

Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected

Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected
Rapid Read Rapid Read
OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

A critical vulnerability in OpenSSH, identified as CVE-2026-35414, has been discovered, affecting versions released over the past 15 years. This flaw allows attackers to gain full root shell access to servers by exploiting a mishandling of the authorized_keys principals option. The issue arises when a comma in an SSH certificate principal name is misinterpreted, enabling users with a valid certificate from a trusted CA to authenticate as root. The vulnerability, which has a CVSS score of 8.1, was identified by the cybersecurity firm Cyera. The flaw does not register authentication failures in logs, making detection through log-based methods unreliable. The vulnerability was patched in OpenSSH version 10.3, released in early April 2026.
Trendline Trendline
Itron Confirms Cyberattack, Potential Data Breach on Energy Management Systems

Itron Confirms Cyberattack, Potential Data Breach on Energy Management Systems

Itron Confirms Cyberattack, Potential Data Breach on Energy Management Systems
Trendline Trendline
Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information