Russia Charges Telegram Founder Pavel Durov: What’s Alleged
Russia charges Telegram founder Pavel Durov, according to the FSB. The agency cites alleged links to terrorist activity and alleged failures to remove prohibited channels.
Latest alerts
RSS feed
Google’s AI-Driven Chrome Fixes Surpass Past Years
Google says it used AI to accelerate Chrome security work, fixing 1,072 bugs across two June releases. That total beats the prior two years combined.
CareCloud breach: How many people were notified
A growing number of people are being notified about the CareCloud data breach. New filings suggest hackers accessed an electronic health record data store for at least six days in March.
Critical TeamCity code execution flaw: patch steps
JetBrains patched a critical TeamCity On-Premises vulnerability (CVE-2026-63077) that can be exploited without authentication to reach remote code execution. Learn the affected versions, update paths, and practical hardening steps.
Azure Cosmos DB bug: Cosmos Master Key risk
Wiz onderzocht een kritieke kwetsbaarheid in Azure Cosmos DB die via de Cosmos Master Key platformbrede toegang kon geven. Microsoft bracht snel een hotfix en later een structurele oplossing uit.
FortiSIEM Basic XSS: What to Know
FortiSIEM is affected by a Basic XSS vulnerability related to improper neutralization of script-related HTML tags. In certain cases, a privileged administrator could execute unauthorized commands.
FortiOS buffer over-read vulnerability: what to do
FortiGuard Labs disclosed a FortiOS buffer over-read issue affecting FortiOS, FortiProxy, and FortiSASE. Authenticated attackers may obtain a portion of device memory via a crafted redirect request.
Exchange OWA zero-day: OWAReaper long-term access
A Russian-linked group used an Exchange OWA zero-day to deliver OWAReaper via half-click XSS emails. The malware can maintain mailbox access even after clean-up and credential changes.
Post-breach Tactics: What Attackers Do After Entry
Once an attacker gets in, the goal often shifts from “steal and run” to establishing persistence. This incident shows how attackers rework the environment before anyone can stop them.
Analog Devices Data Breach: What’s Known
Analog Devices reports an unauthorized party accessed some systems and exfiltrated files. The company says it hasn’t found evidence of stolen data being leaked or impacting operations.