CISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately

A 10/10 GitLab flaw was added to CISA’s KEV, giving government agencies just three days to patch.

New York Seizes a Dozen Celebrity Deepfake Websites

In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites that collectively targeted around 1,200 victims.

Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign

Passkeys have all but eliminated password theft, so what now? Criminals have a solution.

OpenAI agents attacked RubyGems in May, two months before Hugging Face
OpenAI agents attacked RubyGems in May, two months before Hugging Face

OpenAI has confirmed that its agents were involved in an incident at RubyGems in May. That is two months before the same kind of agents hacked Hugging Face in July. RubyGems is the package service for the Ruby programming language. The confirmation fol…

Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe

An analysis of 160 deepfake websites reveals politicians in 22 countries appear on them. Nearly all of them are women.

Revolut handed customer passports to scammers using a real government email domain
Revolut handed customer passports to scammers using a real government email domain

Revolut gave sensitive customer information to criminals who requested it from what appeared to be a government email address, and did so because the address was real. The company has confirmed the breach and says its systems were never touched; the st…

Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you’d hoped for
Expert finds this £3 Temu Wi-Fi extender is full of security issues, and definitely not the bargain you’d hoped for

A £3 Temu Wi-Fi extender contained hidden administrator access, shared credentials, remote login capabilities, command injection, and weak update protection.