Millions of Military Personnel Victims of Data Breach at Pentagon’s Human Resources Management System A massive data breach has affected over 3 million military service members, with hackers stealing sensitive information from the Pentagon’s human resources management system in October 2025. The breach was discovered after a vulnerability in the file-sharing systems was exploited by … Read more
Microsoft has quietly enabled a critical security feature by default on certain enterprise systems running Windows 11, ensuring that users’ settings are backed up in case of a device reset, replacement, or upgrade. This move marks a significant shift from the previous opt-in model, where administrators had to explicitly enable the Windows settings backup tool. … Read more
Google has quietly rolled out a new tool, codenamed Gemini 4 Argon, to select cybersecurity experts and researchers who have been vetted as trusted defenders. The move is part of Google’s ongoing efforts to help identify and mitigate emerging threats in the cybersecurity landscape. However, what’s more significant is that this development hints at an … Read more
Cybersecurity experts are sounding the alarm as a critical vulnerability has been added to the US government’s Known Exploited Vulnerabilities (KEV) catalog. The US Cybersecurity and Infrastructure Security Agency (CISA) has identified an authentication bypass flaw in Cisco’s Catalyst SD-WAN Manager, allowing attackers to exploit the vulnerability with relative ease. This issue affects organizations that … Read more
A sophisticated identity exposure campaign has been disrupted by OpenAI, exposing a complex web of compromised credentials and attack paths that had gone undetected for months. The campaign, linked to Moonshot AI Associates, involved the extraction of reasoning patterns from online activity, which were then used to map cross-domain privilege escalation routes. The scheme’s sophistication … Read more
The US Treasury Department has taken a significant step in combating ATM jackpotting attacks by blacklisting the alleged developer of the malware used in these crimes and his network. Anibal Alexander Canelon Aguirre, known as ‘Prometheus’, was added to the FBI’s Ten Most Wanted Fugitives list earlier this year for his role in creating the … Read more
Cryptocurrency Wallet Provider MetaMask Discloses Infrastructure Security Incident MetaMask, a leading provider of non-custodial cryptocurrency wallets, has disclosed an ongoing security incident affecting its infrastructure. The company is taking proactive measures to address the issue and reassure users that there is no immediate threat to their wallets. The security incident is centered around MetaMask’s validators, … Read more
The Pentagon’s human resources management system has been breached, resulting in the theft of sensitive personnel records for over 3 million people. The stolen data includes personally identifiable information (PII) such as Social Security numbers, names, dates of birth, contact information, and military personnel details. The breach occurred between October 2025 and July 2026, when … Read more
A newly disclosed proof-of-concept (PoC) exploit for Apple’s CoreGraphics library has left security experts on high alert, particularly those who use WhatsApp’s PDF sharing feature. The vulnerability, while still in its early stages of research, has already raised concerns about the potential for attackers to leverage it as a delivery path for malware. The CoreGraphics … Read more
Google has just rolled out Gemini 4 Argon, a cutting-edge cybersecurity tool that allows select trusted defenders to map and disrupt active attack paths. The move is part of Google’s ongoing efforts to bolster online security, but it’s not without controversy – a guardrail-free version of the software is in the works, sparking concerns among … Read more