-
Attackers are abusing the legitimate Faronics Deploy platform to enrol victim computers in malicious deployments and install ScreenConnect remote access software. The phishing activity ran from July 21 to August 20 and reached more than 457 endpoints. Attackers used messages disguised as invoices, tax documents and other business files. Phishing lures use a legitimate installer…
-
The Aesto Health data breach has affected more than 9.5 million people after an unauthorised actor accessed patient data stored in the company’s network. Aesto Health provides software services that help healthcare organisations migrate, archive and access patient data when they change electronic health record systems or acquire medical practices. Attackers accessed sensitive patient information…
-
Attackers are exploiting a critical Langflow vulnerability to steal credentials, tokens and cloud secrets from exposed servers, including OpenAI API keys and AWS access keys. The flaw, tracked as CVE-2026-0768, affects Langflow versions 1.4.2 and earlier. It allows unauthenticated attackers to run arbitrary code with root privileges. Attacks target exposed Langflow servers VulnCheck detected exploitation…
-
A Virtualizor BGP hijacking attack allowed hackers to redirect software update traffic and send a malicious update package to a small number of VPS management servers. The incident affected update infrastructure run by Softaculous, the company behind Virtualizor. The vendor says the attack occurred between August 28 and August 30. Attackers rerouted Virtualizor update traffic…
-
The Novocure data breach exposed records connected to more than 1,400 cancer patients in the United States after attackers accessed parts of the company’s systems in mid-August. Novocure said most affected patient records contained identification numbers but no names or other direct personal details. The company also found that attackers accessed employee contact information. Attackers…
-
Sony Music Publishing and Warner Chappell have filed an Anthropic music lawsuit, accusing the AI company of using copyrighted songs and lyrics to train its Claude models without permission. The publishers allege that Anthropic acquired protected works through torrenting, scraping, downloads and illegal online libraries. They claim the alleged activity involved music on a massive…
-
The CXMT Pentagon lawsuit challenges the company’s inclusion on the US Covered List of alleged Chinese military companies.Chinese memory-chip maker ChangXin Memory Technologies, or CXMT, has sued the Pentagon over its designation as a “Chinese military company.” CXMT says the label is false and lacks a legal or factual basis. The company argues that it…
-
The Gentlemen ransomware group claims it breached workplace review and job platform Glassdoor and has threatened to publish allegedly stolen information after a 172-hour countdown. The group added Glassdoor to its leak site, but it has not released samples of the supposed data. As a result, the claimed Glassdoor data breach remains unconfirmed, and the…
-
The ShinyHunters cybercrime group claims it breached Neogen Corporation, a major supplier of food safety, animal health and laboratory products. The group has given the company until 1 September 2026 to make contact, threatening to publish allegedly stolen data if it does not receive a response. Neogen has not publicly confirmed the alleged breach. ShinyHunters…
-
Nearly 22,000 internet-exposed Microsoft Exchange servers remain unpatched against a high-severity vulnerability that could allow attackers to take over user mailboxes. The flaw, CVE-2026-62911, affects Exchange Server 2016, Exchange Server 2019 and Exchange Server Subscription Edition. Microsoft fixed the issue in its August 2026 Patch Tuesday updates. Flaw can let attackers access all mailboxes DEVCORE…