Open S3 Bucket Exposes 2.5 Million Student Loan Records
A student loan servicing platform suffered a data breach when attackers discovered a publicly accessible Amazon S3 bucket that lacked
Cloud Imperium Data Breach Exposes Code, Credentials, and Million‑Player Data
Cloud Imperium, the UK‑based studio behind Star Citizen, quietly announced a security incident that gave attackers access to its
OAuth Redirect Abuse Bypasses Defenses, Powers New Phishing Campaigns
Microsoft researchers discovered that threat actors are weaponizing OAuth’s redirect_uri parameter to create phishing links that appear to
Chrome Extension Hijack Exploits New Gemini Panel, Threatening Sessions and Prompt Data
Palo Alto Networks discovered that malicious Chrome extensions can intercept and manipulate the newly added Gemini panel. By injecting script
Zero‑Trust Lateral Defense: VMware vDefend Shields Inside Networks
VMware’s vDefend platform expands zero‑trust principles beyond the perimeter, delivering continuous, real‑time monitoring of east‑west traffic
Pro‑Russia Hacktivists Target OT with Credential‑Stuffing and Phishing
The Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory warning of an organized wave of pro‑Russia hacktivist activity