BigCommerce merchants impacted by third-party app data breach
The breach occurred between September 13 and September 17, 2026, when attackers gained access to shopper data via compromised credentials for the Ribon and R...
SC Media
20 articles
VA criticizes Baylor Genetics for delayed notification after data breach
The cybersecurity incident at Baylor Genetics, occurring around June 15, resulted in unauthorized access to sensitive information of 30,263 veterans.
Amazon blocks Meta's Muse AI agent from its marketplace
Amazon stated that third-party applications facilitating purchases should operate openly and respect service provider decisions.
TASK#STOMP campaign uses PowerShell backdoor for data theft
The TASK#STOMP campaign begins with an encoded Visual Basic Script (VBScript) executed by wscript.exe, with the initial access vector likely being phishing o...
BYD Shark 6 remotely hacked, exposing vehicle controls and cabin audio
Cybersecurity researcher Dan Hreszczuk of Fortify Labs found a critical vulnerability in a BYD Shark 6, allowing remote access to vehicle functions.
US jails adopt continuous biometric monitoring amid data privacy concerns
Companies like 4Sight Labs are equipping correctional facilities with technologies such as the OverWatch wearable, which tracks vital signs like heart rate a...
FBI CJIS security policy updates to version 6.1
Version 6.1 introduces stricter encryption requirements, increasing the minimum symmetric cipher key strength for CJI in transit and at rest outside physical...
Microsoft Entra ID to retire SMS sign-in in 2027
Microsoft will retire SMS and voice-based sign-in as a first-factor authentication method for Entra ID workforce tenants starting February 1, 2027.
New Exvicy malware-as-a-service framework copies rival's code
Exvicy operates as a ClickFix framework, distributing malware through compromised WordPress websites, according to Sekoia's Threat Detection & Research t...
WWIII, Debt, JFK, CISA, SUSE, OpenAI, Google, DORA, Aaran Leyland, and More - SWN #618
Just 13% of network segments are OT-only, says Forescout Research
Poor network segmentation leaves OT and IoT devices exposed to lateral movement.
We can take down the hackers – but it’s up to us to make OT environments safe
The recent DOJ/FBI takedown of QScan and QTRouter buys the industry time – use it well.
Microsoft and Google dismantle major cybercrime marketplace RedVDS
RedVDS operated as an online hub selling access to virtual machines (VMs) that were used by cybercriminals to launch a variety of attacks, including phishing...
How Cloud Privilege Escalation Paths Form
LDAP, Active Directory, and Entra ID: Directory Services for Security Teams
North Korean hackers target IT firm with macOS backdoors
The Jade Sleet actor, also known by aliases such as TraderTraitor, employed social engineering tactics, using job interview lures to target individuals in De...
Biometric Authentication: Methods, Risks, and Behavioral Signals
Secrets, Certificates, and Tokens: Choosing the Right Credential for Machine Identity
Authentication Fundamentals: Factors, Methods, and Trust Models
Simulation highlights OWASP LLM Top 10 risk of unbounded consumption
Forcepoint research showed how poisoned input can run up AI agent costs.