Bill Toulas reports: U.S. Senator Ron Wyden has sent a letter to the Federal Trade Commission (FTC) requesting the agency to investigate Microsoft for failing to provide adequate security in its products, which led to ransomware attacks against healthcare organizations. The Senator started the formal asking by saying that Microsoft should be held “responsible for its…
From the public prosecutor’s office in Frankfurt, Germany: The Public Prosecutor General’s Office in Frankfurt am Main – Central Office for the Suppression of Internet Crime (ZIT) – and the German Federal Criminal Police Office (Bundeskriminalamt) request your assistance! Oleg Evgenievich NEFEDOV (Нефедов Олег Евгеньевич) is wanted on suspicion of having formed a foreign criminal……
A high-severity unpatched security vulnerability in Gogs has come under active exploitation, with more than 700 compromised instances accessible over the internet, according to new findings from Wiz. The flaw, tracked as CVE-2025-8110 (CVSS score: 8.7), is a case of file overwrite in the file update API of the Go-based self-hosted Git service. A fix…
While Zack Whittaker and I work to finish up a report on threats security researchers and journalists receive, there has been more and more news about threats to journalists and journalism. The arrests of Don Lemon and Geraldine Fort for reporting on a protest in a church could easily be construed as an obvious attempt……
NCC Group saw over 570 ransomware attacks in December 2024, the highest number since it started monitoring them in 2021. The post Record Number of Ransomware Attacks in December 2024 appeared first on SecurityWeek.
There is an update to a phishing incident in 2021 that impacted more than 89,000 people with Healthplex dental insurance. DataBreaches notes that the NYDFS settlement announced below is not the first settlement stemming from this incident. In December 2023, the NY Attorney General’s Office announced a $400,000 settlement with Healthplex. Both the 2023 and……
Continuous Integration and Continuous Delivery/Deployment (CI/CD) refers to practices that automate how code is developed and released to different environments. CI/CD pipelines are fundamental in modern software development, ensuring code is consistently tested, built, and deployed quickly and efficiently. While CI/CD automation accelerates software delivery, it can also introduce security
