-
The Pentagon is notifying people after attackers stole sensitive personnel information from its human resources management system. The Pentagon data breach affects more than 3 million individuals, including nearly 2.8 million living people and approximately 294,000 deceased individuals. According to notification letters from the Defense Manpower Data Center, unauthorized users accessed sensitive information between October…
-
MetaMask disclosed an ongoing infrastructure security issue on October 1 and began taking affected staking validators out of operation as a precaution. The MetaMask security incident remains under investigation, with the company reporting no immediate threat to MetaMask wallets. Internal teams are working with external partners and security advisers to address the issue. However, MetaMask…
-
Russian state-linked hacking group Star Blizzard has adopted a delivery method that automates more of its malware installation process. Microsoft researchers say RedFlick malware attacks use deceptive file attachments to install the group’s CosmicPulse backdoor. The approach still depends on phishing and a victim opening a malicious file. However, it requires fewer manual steps than…
-
More than 543,000 credentials exposed in public GitHub repositories still worked when researchers checked them in July. Truffle Security’s findings show how GitHub credential leaks can leave access to services open long after developers publish sensitive information. The exposed secrets had remained publicly accessible for a median of 784 days. Moreover, roughly 10% of the…
-
CISA has warned that a critical MikroTik RouterOS flaw could let remote attackers execute code with root privileges without logging in. The vulnerability, CVE-2026-84411, could also cause a denial of service through a single specially crafted request. However, the agency says it has no knowledge of active exploitation. Its advisory also contains conflicting version information,…
-
Cisco has released patches for a Cisco SD-WAN zero-day that attackers are actively exploiting to gain administrator access. The critical vulnerability, CVE-2026-76504, affects Catalyst SD-WAN Manager and allows remote attackers to bypass authentication without existing credentials. Cisco confirmed that its security response team learned of exploitation in September 2026. Meanwhile, CISA has added the flaw…
-
Microsoft will begin blocking unauthorized external scripts on Entra ID browser sign-in pages in mid-October 2026. The Entra ID security update aims to reduce script injection risks during authentication, including cross-site scripting attacks. The rollout should finish by late October. Meanwhile, organizations should check whether their sign-in processes rely on tools that inject scripts into…
-
TeamViewer has urged customers to update its remote access software after fixing five high-severity vulnerabilities. The TeamViewer security update addresses weaknesses that could allow unauthorized actions, code execution or elevated privileges. The flaws affect TeamViewer Full Client, Host and related services. However, the company says it has found no evidence of active exploitation or publicly…
-
Bitget says attackers reached its cryptocurrency wallet systems through third-party security appliances before stealing $387.5 million. New findings from SlowMist and Mandiant place the Bitget hack within a longer intrusion, with the earliest suspicious activity appearing in logs from August 31. The exchange has not publicly identified the affected products. However, it says the investigations…
-
Signal users can now create encrypted backups on iPhones and desktop computers, extending a feature previously available on Android. With version 8.30, Signal local backups also adopt a shared format across platforms, bringing more consistency to saving and restoring conversations. The release completes the first phase of Signal’s backup project across Android, iOS, Windows, macOS,…