Cybersecurity

Baker Tilly notifies clients of data breach at third-party provider

The Baker Tilly Advisory Group is notifying clients that a data breach has compromised certain personal information about them and their dependents.

Loot boxes, influencers, and addictive features face an EU crackdown

Gaming, social media, and e-commerce platforms are facing a fresh wave of sweeping European Union rules that aim to make "your online experience fairer."

Maersk confirms data breach as WhiteArmor ransomware demands $5 million

Maersk announced that a threat actor gained unauthorized access to a local legacy system inherited through an earlier acquisition and extracted data from it.

Cybersecurity

The Quiet Cost of Ignored Vulnerabilities

Three recent stories show how unpatched flaws, regulatory gaps, and consumer lock-in create a vulnerability economy that US businesses and users can no longer ignore.

Linux kernel reviewer steps down from memory management duties due to influx of AI slop patches

Lorenzo Stoakes has announced he is stepping down from several of his memory management duties in the Linux kernel, citing an overwhelming volume of AI-generated patch submissions.

Microsoft Fixes Nearly 1,100 Security Vulnerabilities

Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software.

Third-Party Breaches Are Now the Main Event

Baker Tilly, Apify and the ScreenConnect campaign show that the breach boundary now sits wherever a partner's credentials reach.

Binance denies data breach after alleged ShinyHunters claims

Binance, the world's largest crypto exchange, has denied claims of a new security breach made by a threat actor using the 'ShinyHunters' handle on a newly emerged underground cybercrime forum.

Hundreds of Artex AI hacking tools found publicly exposed to the web

Security researchers found hundreds of servers hosting the penetration testing tool Artex exposed to the internet, allowing anyone access to the hacking tool.

Cybersecurity

Exploit Code Outpaces the Patch in Three New Attacks

Three recent attacks show the same pattern: working exploit code, not the vulnerability itself, now sets the pace of compromise.

Commvault unveils Recovery Studio, AgentRecover update and joint work with three partners

Data protection provider Commvault Systems Inc. today used its SHIFT 2026 customer event to unveil Recovery Studio, a new service that will automate the rebuilding of entire business applications after an outage or cyberattack.

Vulnerability that lets hackers SSH into Linux devices is under active exploitation

A vulnerability in Linux systems running OpenSSH alongside the musl code library is being actively exploited, allowing attackers to gain unauthenticated access to high-privilege accounts within seconds.