Eileen Sullivan reports: Employees with the Department of Government Efficiency who were detailed to the Social Security Administration last March shared sensitive data through a nonsecure third party server, in violation of agency security policies, the Justice Department disclosed in a court filing. The Social Security Administration does not know what data was shared on…
The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets as recently as late 2025, according to new findings from TRM Labs. The blockchain intelligence firm said evidence points to the involvement of Russian cybercriminal…
World-class threat intelligence available directly where analysts work.
A novel attack technique named EchoLeak has been characterized as a “zero-click” artificial intelligence (AI) vulnerability that allows bad actors to exfiltrate sensitive data from Microsoft 365 Copilot’s context sans any user interaction. The critical-rated vulnerability has been assigned the CVE identifier CVE-2025-32711 (CVSS score: 9.3). It requires no customer action and has been already
Kaaviya reports: A significant security breach within the Qilin ransomware operation has provided unprecedented insight into the group’s affiliate network structure and operational methods. On July 31, 2025, internal conflicts between the ransomware group and one of its affiliates led to the public exposure of sensitive operational details, marking a rare glimpse into the inner…
A Mirai botnet variant dubbed Aquabot has been observed actively attempting to exploit a medium-severity security flaw impacting Mitel phones in order to ensnare them into a network capable of mounting distributed denial-of-service (DDoS) attacks. The vulnerability in question is CVE-2024-41710 (CVSS score: 6.8), a case of command injection in the boot process that could…
Martin Matishak reports: President Donald Trump signed a $901 billion Pentagon policy bill on Thursday night that features a slew of key cybersecurity provisions. The 2026 National Defense Authorization Act passed with bipartisan support in both the House and the Senate. The compromise measure authorizes Defense Department policies and unprecedented spending levels for national security programs. […]……
