206 articles
Data BreachForensic analysis of the data breach impacting State: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Data BreachForensic analysis of the data breach impacting DigiCert: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
Data BreachForensic analysis of the data breach impacting Chainalysis: initial access vector, exfiltrated telemetry, and regulatory disclosure mandates.
VulnerabilityEU-DORA-REG-2022-2554 in European Supervisory Authorities (EBA, EIOPA, ESMA) Digital Operational Resilience Act (Regulation EU 2022/2554) (Information Disc
VulnerabilitySEC-8K-ITEM105 in U.S. Securities and Exchange Commission (SEC) Material Cybersecurity Incidents (Item (Information Disclosure) allows remote attackers to
Data BreachThe Reserve Bank of India directs banks and payment entities to treat exposed credentials as active compromises, enforcing emergency isolations and audits.
Gov / DefenseCERT-In issued advisory CIAD-2026-0046 alerting NBFCs and digital lenders that attackers are exploiting flawed APIs to execute unauthorized loan disbursements.
Crypto / Web3North Korean threat actors drained $6.4 billion from Binance hot wallets across multiple chains, prompting an emergency freeze of $3 billion in USDT and USDC.
VulnerabilityA comprehensive technical guide to hardening banking and NBFC APIs against BOLA, broken authentication, token replay, and co-lending data leakage.
VulnerabilityA comprehensive implementation guide for NBFCs navigating RBI Master Directions on IT governance, 6-hour incident disclosure, vendor audits, and VAPT.
VulnerabilityA New Mexico state court orders Meta to pay $25 billion for 43 million deceptive trade violations stemming from the Cambridge Analytica data-harvesting scandal.
Agentic AICSA Singapore issues technical guidelines for securing frontier and autonomous agentic AI models, mandating rigorous defenses against indirect prompt injection and tool-calling escapes.
Deep DiveSingapore's Cyber Security Agency releases the National Quantum-Safe Migration Roadmap at SICW, setting strict 2031-2035 deadlines for Critical Infrastructure operators.
VulnerabilitySingapore's PDPC levies major penalties on Marina Bay Sands and SaaS vendors, rejecting financial hardship defenses under the enhanced 10% turnover statutory fine framework.
Threat IntelMissing authorization checks in MariaDB CONNECT file UDFs allowed authenticated users with basic SELECT permissions to read and write arbitrary server files.
Threat IntelA catalog cleanup omission in MariaDB's PL/SQL package engine left orphaned grants in mysql.procs_priv, allowing low-privilege users to hijack administrative packages.
Threat IntelA critical exploit chain in MariaDB combined a cursor-array use-after-free with a geospatial memory disclosure to achieve command execution from low-privilege accounts.
Cyber AttackA critical default join key flaw in R3's JFrog Artifactory granted full administrative control over 269 repositories, including Corda Enterprise and CBDC builds.
MicrosoftA compromised vendor credential in ConnectWise Cloud Backup allowed threat actors to abuse OAuth application tokens across hundreds of Microsoft 365 customer tenants.
MicrosoftMicrosoft resolves a maximum-severity privilege escalation flaw (CVE-2026-96207, CVSS 10.0) in Partner Center that exposed delegated customer tenants to unauthorized administrative control.
Threat IntelCERT-In advisory CIAD-2026-0049 reveals autonomous AI agents infiltrated live systems, reading confidential data as threat actors weaponize agentic tooling.
Threat IntelF5 NGINX resolves a critical use-after-free vulnerability in HTTP/3 QUIC stream processing (CVE-2026-97205) allowing worker process termination and code execution.
Data BreachThe Reserve Bank of India enforces updated CSFB directives mandating 6-hour breach disclosure to CERT-In, third-party cloud audits, and zero-trust banking security.
Threat IntelF5 NGINX patches critical heap buffer overflow CVE-2026-93479 in ngx_http_core_module where regex map variables lead to worker crash and code execution.