Surfshark, a popular provider of virtual private network (VPN) and cybersecurity services, has disclosed a security incident that compromised internal data. The breach was discovered on August 31, but it wasn’t until September 2 that the company confirmed the scope of the attack and began containment and remediation efforts. The incident involved an internal test … Read more
Kiteworks Fills Critical Gap in Data Governance with Bonfy.AI Acquisition In a move that’s set to revolutionize data security, Kiteworks has acquired AI data security company Bonfy.AI. This acquisition is aimed at extending real-time policy enforcement over sensitive data exchanged by both human users and AI agents, filling a critical gap in how enterprises protect … Read more
Kiteworks’ Acquisition of Bonfy.AI Bridges Gap in Data Governance with AI-Powered Protection In a significant move to bolster its data security capabilities, Kiteworks has acquired Bonfy.AI, an artificial intelligence (AI)-native content-security platform designed to protect sensitive data exchanged by both human users and AI agents. This acquisition aims to fill the structural gap in how … Read more
Check Point Patches Critical VPN Vulnerabilities, Warns of Remote Code Execution Risk A critical-severity vulnerability has been patched by cybersecurity firm Check Point in its gateway and firewall products that utilize virtual private network (VPN) functionality. The flaw, tracked as CVE-2026-85102, affects Security Gateway and Check Point Spark Firewall using Site to Site VPN or … Read more
A Major Conti Ransomware Developer Sentenced to 4 Years in US Prison, Bringing Justice to a Notorious Cybercrime Gang In a significant blow to the cybercrime underworld, a Ukrainian national who played a key role in the notorious Conti ransomware operation has been sentenced to four years in prison by a United States court. Oleksii … Read more
A Phishing Campaign Hits 347,000 Trezor Users After Brevo Hack Trezor, a leading provider of cold cryptocurrency storage solutions, has announced that approximately 347,000 of its customers received phishing emails after a third-party marketing platform it uses was hacked. The incident highlights the dangers of data breaches and the importance of secure practices for users. … Read more
A Critical GitLab Vulnerability is Being Exploited Just One Day After Disclosure Security firm WatchTowr has warned that threat actors are already targeting a newly patched vulnerability in GitLab, one day after the company announced fixes for the security weakness. The vulnerability, tracked as CVE-2026-85706, allows unauthenticated users to read arbitrary files from the GitLab … Read more
Trezor’s 347,000 Customers Targeted in Phishing Scam After Brevo Hack A recent breach of a third-party marketing platform used by cryptocurrency storage provider Trezor has put nearly 350,000 of its customers at risk. The attacker exploited how Brevo handles Single Sign-On (SSO) to access 138 accounts and sent phishing messages to the email addresses stored … Read more
Cybersecurity News Roundup: Attackers Evade Detection with Invisible Unicode Characters and Exploit Critical WordPress Flaw A recent wave of attacks has seen cybercriminals leveraging cutting-edge techniques to evade detection and compromise sensitive systems. One such tactic involves using invisible Unicode characters, which have been inserted into phishing lures to bypass filtering mechanisms. This campaign, tracked … Read more
GitLab Users Urged to Act Quickly After Critical Vulnerability Exploitation Spotted Just One Day After Patch Release A newly patched vulnerability in GitLab has been exploited by threat actors just 24 hours after it was publicly disclosed, according to a warning from attack surface management firm WatchTowr. The security weakness, known as CVE-2026-85706, is a … Read more