The Latest

• 

  Lemonade says applicant driver’s license numbers exposed

  The company is notifying about 190,000 people after certain information used for car insurance quotes was left unencrypted.

  Breaches

• 

  Sponsored by Palo Alto Networks

  How next-generation firewalls are evolving in a world of AI-enabled cyberattacks

  Discover how Next-Generation Firewalls are adapting to combat AI-enabled cyberattacks and evolving to protect organizations in today's dynamic threat landscape.

  Vulnerability

• 

  CISA warns companies to secure credentials amid Oracle Cloud breach claims

  The agency is asking organizations to come forward if they detect suspicious activity or other evidence of a compromise.

  Breaches

• 

  Older SonicWall SMA100 vulnerability exploited in the wild

  CISA added the high-severity flaw, initially disclosed in 2021, to its known exploited vulnerabilities catalog this week.

  Vulnerability

• 

  Bill extends cyber threat info-sharing between public, private sector

  The Cybersecurity Information Sharing Act of 2015, set to expire in September, “moved the needle.”

  Threats

• 

  CISA launches new wave of job cuts

  Critics warn that drastic downsizing of the DHS unit will threaten the nation’s ability to counter cyber adversaries.

  Strategy

• 

  Mitre CVE program regains funding as renewal deal reached

  The information security industry feared a lapse would lead to industrywide exposures of software vulnerabilities.

  Vulnerability

• 

  Hertz says personal data breached in connection with Cleo file-transfer flaws

  The company is the latest organization to investigate or disclose an incident linked to a monthslong attack spree.

  Breaches

• 

  DaVita hit by ransomware attack

  The kidney dialysis firm doesn’t have an estimate for how long disruption from the attack will last, though it stressed patients are still receiving care.

  Cyberattacks

• 

  Attackers exploit zero-day flaw in Gladinet CentreStack file-sharing platform

  Critical vulnerability affects both CentreStack and Gladinet’s on-premises file-sharing server, Triofox.

  Cyberattacks

• 

  Over 14K Fortinet devices compromised via new attack method

  Fortinet warned last week that a threat actor was using a novel post-exploitation trick to maintain access to devices after they were patched.

  Cyberattacks

• 

  Aviation sector faces heightened cyber risks due to vulnerable software, aging tech

  A report calls on federal authorities to conduct comprehensive risk assessments and take steps to modernize the air traffic control system.

  Strategy

• 

  Remote access tools most frequently targeted as ransomware entry points

  Supply chain risk via third-party vendors increased sharply last year, according to a report by At-Bay.

  Vulnerability

• 

  Fortinet warns of threat activity against older vulnerabilities

  Researchers discovered a technique that allows threat actors to maintain read-only access to vulnerable FortiGate devices after they are patched.

  Cyberattacks

• 

  Windows CLFS zero-day exploited in ransomware attacks

  A threat actor tracked as Storm-2460 has used PipeMagic malware to facilitate the attacks.

  Vulnerability

• 

  CISA adds Ivanti Connect Secure vulnerability to KEV catalog

  CVE-2025-22457 is a critical stack buffer-overflow vulnerability. Ivanti had initially assessed as a low-level product bug that could not be exploited remotely.

  Vulnerability

• 

  Sam’s Club investigating attack claim linked to Clop ransomware

  The prolific gang is linked to the exploitation of critical flaws in Cleo file transfer software.

  Breaches

• 

  CISA urges fired probationary workers to respond after federal judge grants order

  The agency plans to keep workers on paid administrative leave despite ongoing concerns about its ability to address cyber threats.

  Leadership & Careers

• 

  Hacker linked to Oracle Cloud intrusion threatens to sell stolen data

  Security researchers from Trustwave SpiderLabs provided additional evidence backing up claims of a breach.

  Breaches

• 

  Solar power gear vulnerable to remote sabotage

  Security flaws underscore the risk of cyber threat actors commandeering parts of the electric grid.

  Vulnerability

• 

  AI project failure rates are on the rise: report

  The share of businesses scrapping most of their AI initiatives increased to 42% this year, up from 17% last year, according to S&P Global Market Intelligence. 

  Strategy

• 

  Tech giants seek data standards amid AI push

  Microsoft, IBM and Cisco are among the vendors backing the OASIS Data Provenance Standards Technical Committee announced last week.

  Strategy

• 

  FCC launches national security unit to counter state-linked threats to US telecoms

  The new council is part of an effort to thwart Salt Typhoon and other cyber espionage groups.

  Strategy

• 

  82% of K-12 schools recently experienced a cyber incident

  Cybercriminals are increasingly targeting school networks through phishing and social engineering, a cybersecurity nonprofit reported.

  Strategy

• 

  Majority of ransomware claims involved compromise of perimeter security devices

  A report by cyber insurance firm Coalition shows six of every 10 ransomware claims involved compromised VPN or firewall.

  Strategy

• 

  Former NSA cyber director warns drastic job cuts threaten national security

  Rob Joyce told lawmakers mass layoffs of federal workers will hurt the ability of the U.S. to combat malicious cyber activity from China and other adversaries.

  Strategy

More stories