Author: admin

10,000 WordPress sites vulnerable to takeover due to critical flaws in HT Contact Form Widget plugin

Insurance firm Allianz Life said that a threat actor accessed personally identifiable information of the majority of its 1.4 million US customers

Arizonan woman sentenced to 102 months for operating laptop farm for North Korean IT workers

Scattered Spider has targeted VMware vSphere environments, exploiting retail, airline and insurance sectors

Despite claims by a hacker, French defense company Naval Group has detected no intrusions into its IT environments at the time of writing

If you are preparing an RFP or Form 470 submission under the Cybersecurity Pilot Program, we encourage you to connect with us.

Dating app Tea has been compromised by a hacker, resulting in the exposure of 13,000 selfies

One year on, we are pleased to share progress on our secure-by-design commitments.

Bluesky thread. Here’s the paper, from 1957. Note reference 3.

Chinese hackers are exploiting a high-severity vulnerability in Microsoft SharePoint to steal data worldwide:

The vulnerability, tracked as CVE-2025-53770, carries a severity rating of 9.8 out of a possible 10. It gives unauthenticated remote access to SharePoint Servers exposed to the Internet. Starting Friday, researchers began warning of active exploitation of the vulnerability, which affects SharePoint Servers that infrastructure customers run in-house. Microsoft’s cloud-hosted SharePoint Online and Microsoft 365 are not affected.

Here’s Microsoft on patching instructions. Patching isn’t enough, as attackers have used the vulnerability to steal authentication credentials. It’s an absolute mess. CISA has more information. Also these four links. Two Slashdot threads.

This is an unfolding security mess, and quite the hacking coup.