A sprawling cybercrime operation has been uncovered, with Microsoft linking over 30 rotating domains to a notorious malware infrastructure known as MacSync Stealer. This sophisticated threat affects users across multiple platforms, exploiting vulnerabilities in identity exposure and privilege escalation to unleash devastating attacks on unsuspecting victims. At the heart of this operation lies a cleverly … Read more
GitLab has issued patches for two critical vulnerabilities that can be exploited without authentication, allowing attackers to manipulate user data and public projects. The company’s Community Edition (CE) and Enterprise Edition (EE) users from version 18.2 onwards are impacted. The first vulnerability, tracked as CVE-2026-19478 with a CVSS score of 9.4, allows an unauthenticated attacker … Read more
A massive data breach affecting over 1.2 million individuals has come to light, with consumer lender Heights Finance Holdings Co. disclosing that hackers gained access to a cloud-based platform used for customer data storage in early May. The company has since secured the platform and assured customers that its loan management systems and other computer … Read more
Over 300,000 WordPress sites are potentially exposed to hacking due to a critical vulnerability in the Forminator Forms plugin, which allows attackers to upload executable files and execute code remotely. This means that thousands of websites could be compromised, leading to site takeover and data theft. The issue, tracked as CVE-2026-15748 with a CVSS score … Read more
A massive data breach at cloud-based healthcare solutions provider CareCloud has exposed the sensitive information of over 3.7 million individuals, a staggering increase from initial reports that put the number affected at around 350,000. The breach, which was first detected in mid-March and publicly disclosed by CareCloud in early July, is believed to have occurred … Read more
A Devastating Wave of Ransomware Attacks Hits Over 500 Critical Infrastructure Organizations The Cybersecurity and Infrastructure Security Agency (CISA) has revealed that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United States since June 2021. This staggering number was disclosed in a joint advisory issued by CISA, the Federal … Read more
A critical code injection vulnerability has been patched in GitLab, a popular platform for code management and sharing. The flaw, tracked as CVE-2026-19478, allows attackers to modify or delete user data and public projects without needing authentication. The security defect was discovered through GitLab’s HackerOne bug bounty program and affects all versions of the GitLab … Read more
Over 300,000 WordPress Sites Left Exposed to Hacking Due to Critical Plugin Flaw A critical vulnerability in the Forminator Forms plugin for WordPress has potentially exposed thousands of websites to remote code execution (RCE), according to security firm Defiant. The bug, tracked as CVE-2026-15748 with a CVSS score of 9.8, allows unauthenticated attackers to upload … Read more
Fortinet’s Acquisition of Virtue AI Puts Spotlight on AI Security In a significant move that underscores the growing importance of artificial intelligence (AI) in cybersecurity, Fortinet has acquired Virtue AI, a company specializing in AI security. This acquisition is a major coup for Fortinet, which will now be able to offer its customers more comprehensive … Read more
Xpander Raises $7.5 Million to Revolutionize AI Management and Governance In a significant development, AI enablement platform Xpander has secured $7.5 million in seed funding led by Pico Venture Partners. The startup, founded by former AWS engineers David Twizer, Moriel Pahima, and Ran Sheinberg, aims to empower organizations to adopt, build, run, secure, and manage … Read more