A new LinkedIn phishing scam is targeting executives online – make sure you don’t fall for this

A little bit of Python, a little bit of DLL sideloading, and a little bit of fake jobs.

50,000 WordPress site affected in major plugin security flaw – here’s how to stay safe

A popular WordPress plugin has a worrying flaw which could allow website takeover.

Surveillance and ICE Are Driving Patients Away From Medical Care, Report Warns

A new EPIC report says data brokers, ad-tech surveillance, and ICE enforcement are among the factors leading to a “health privacy crisis” that is eroding trust and deterring people from seeking care.

Anthropic’s official Git MCP server had some worrying security flaws – this is what happened next

Bugs could be chained for devastating effect, but Anthropic stepped up.

DOGE might have misused Social Security data, Trump administration admits

Employees might have shared SSNs to help an advocacy group try to “overturn election results in certain States”.
…

North Korean hackers target Microsoft Virtual Studio Code

Contagious Interview keeps evolving, as Lazarus hacker now abuse Microsoft Visual Studio Code, too.

LastPass warns users of new phishing campaign sending out fake support messages

LastPass targeted with phishing campaign pressuring victims into sharing their master passwords.

Top online mentor site UStrive admits breach exposed data on children

Error in UStrive website allowed anyone to view sensitive user data, including names and email addresses.

The EU wants to overhaul cybersecurity to shut out ‘high-risk’ foreign entities

European policymakers submit proposal to streamline the Cybersecurity Act in response to a rise in critical service attacks.
…