Explore

Cisco and F5 Address High-Severity Vulnerabilities with New Patches

Cisco and F5 Address High-Severity Vulnerabilities with New Patches

Cisco and F5 Address High-Severity Vulnerabilities with New Patches

Critical Vulnerability in n8n Platform Allows Server Compromise

Critical Vulnerability in n8n Platform Allows Server Compromise

Critical Vulnerability in n8n Platform Allows Server Compromise

Critical SmarterMail Vulnerability Exploited in Ransomware Attacks

Critical SmarterMail Vulnerability Exploited in Ransomware Attacks

Critical SmarterMail Vulnerability Exploited in Ransomware Attacks

Asian Cyber-Espionage Group Targets 37 Nations, Including U.S. Allies

Asian Cyber-Espionage Group Targets 37 Nations, Including U.S. Allies

A cyber-espionage group, believed to be state-aligned, has infiltrated networks of 70 organizations across 37 countries, according to a report by Palo Alto Networks. The attackers targeted national law enforcement, border control agencies, ministries of finance, and even a country's parliament. The espionage operation coincided with significant geopolitical events, such as diplomatic missions and military actions. The hackers used tailored fake emails and exploited known security flaws to access sensitive information, including emails and financial dealings. The U.S. Cybersecurity and Infrastructure Security Agency is aware of the campaign and is working to mitigate the vulnerabilities.

Flickr Security Incident Exposes User Data Through Third-Party Email System

Flickr Security Incident Exposes User Data Through Third-Party Email System

Flickr, a popular photo-sharing platform, has informed its users of a data security incident involving a third-party email service provider. The incident, discovered on February 5, 2026, potentially exposed user information such as names, email addresses, usernames, account types, IP addresses, general location, and Flickr activity data. However, passwords and payment card numbers were not affected. Flickr has taken immediate action by shutting down access to the compromised system. While there is no confirmation that hackers accessed or stole the data, the company has advised users to be cautious of phishing emails that may appear to be from Flickr.

Flickr Data Security Incident Linked to Third-Party Email System Vulnerability

Flickr Data Security Incident Linked to Third-Party Email System Vulnerability

Flickr Data Security Incident Linked to Third-Party Email System Vulnerability

CISA Mandates Federal Agencies to Replace Unsupported Edge Devices to Mitigate Cybersecurity Risks

CISA Mandates Federal Agencies to Replace Unsupported Edge Devices to Mitigate Cybersecurity Risks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive requiring federal agencies to remove unsupported edge devices from their networks within 18 months. This move is in response to increasing nation-state cyber threats targeting network infrastructure. The directive, known as BOD 26-02, mandates Federal Civilian Executive Branch agencies to inventory, update, and replace devices such as firewalls, routers, and VPN gateways that no longer receive security patches. CISA Acting Director Madhu Gottumukkala emphasized the significant risk posed by these unsupported devices, which can be exploited by attackers to intercept network traffic and exfiltrate sensitive data.

Cybersecurity Alert: New Phishing Campaign Uses PDFs to Deploy Malware

Cybersecurity Alert: New Phishing Campaign Uses PDFs to Deploy Malware

Cybersecurity Alert: New Phishing Campaign Uses PDFs to Deploy Malware

Substack Confirms Data Breach, Compromising Limited User Data

Substack Confirms Data Breach, Compromising Limited User Data

Substack Confirms Data Breach, Compromising Limited User Data

Hotels Face Rising Cybersecurity Threats with Increased IoT Adoption

Hotels Face Rising Cybersecurity Threats with Increased IoT Adoption

Hotels Face Rising Cybersecurity Threats with Increased IoT Adoption

Pennsylvania Appoints Andy Ritter as Permanent State CISO Amid Cybersecurity Enhancements

Pennsylvania Appoints Andy Ritter as Permanent State CISO Amid Cybersecurity Enhancements

Pennsylvania has officially appointed Andy Ritter as the state's Chief Information Security Officer (CISO), transitioning him from his interim role which he has held since October. Ritter's appointment is part of a broader initiative by the state to bolster its IT leadership, which includes several other key promotions. Prior to his interim CISO role, Ritter served as Pennsylvania's deputy CISO since January 2024, accumulating nearly nine years of experience with the state. This leadership change aligns with Governor Josh Shapiro's recent announcement of a $10 million investment in cybersecurity, aimed at addressing the evolving threat landscape, including threats driven by artificial intelligence. Alongside Ritter, Jim Sipe has been named the permanent executive deputy CIO, Sarah Kinter as the chief of staff to the CIO, and Sara Hall as the executive director of the Commonwealth Office of Digital Experience (CODE PA). These appointments follow the departures of former CIO Amaya Capellán and CTO R. Brian A...

Pennsylvania Appoints Andy Ritter as Permanent State CISO Amid Cybersecurity Push

Pennsylvania Appoints Andy Ritter as Permanent State CISO Amid Cybersecurity Push

Andy Ritter has been appointed as the permanent State Chief Information Security Officer (CISO) for Pennsylvania, following his interim role since October. Ritter has been with the state for nearly nine years, having served as deputy CISO since January 2024. This appointment is part of a broader initiative to enhance cybersecurity, with the state recently receiving $10 million in new cyber funding. This funding aims to address evolving threats, including those driven by artificial intelligence. The state also made other IT leadership appointments, including Jim Sipe as executive deputy CIO, Sarah Kinter as chief of staff to the CIO, and Sara Hall as executive director of the Commonwealth Office of Digital Experience.