Cybersecurity news: breaches, vulnerabilities, ransomware, patches and how to keep websites and servers safe.
The FBI has attributed Binance’s record $6.3 B theft to the North Korean group TraderTraitor, urging exchanges and blockchain firms to block stolen funds and halt laundering efforts.
Drupal warns that a highly critical access bypass in its Commerce Core module is being exploited in the wild, affecting over 42,000 e-commerce sites.
Binance says a compromised DevOps laptop was only one entry point in a $6.3 billion theft blamed on North Korean hackers; about $3 billion has been frozen while the exchange vows to cover all losses.
U.S. intelligence agencies say a Singapore-based executive close to NVIDIA CEO Jensen Huang may be a Chinese spy, sparking a debate over trade secrets and executive security.
A hacktivist group leaked records of 41,000 DHS staff, including ICE and CBP agents, exposing contact details and sensitive internal system access groups.
Cisco released emergency updates for CVE-2026-76418, a high-severity SSL VPN bug that lets unauthenticated attackers force ASA and FTD firewalls to reload, causing denial-of-service.
Quest Diagnostics disclosed a cyberattack on its Quanum Lab Services Manager that exposed patient records, halted the platform and triggered a multi-agency response.
Meta Platforms is ordered to pay $25 billion after a Santa Fe jury finds the company deceived users about privacy, marking the largest fine ever against a tech giant.
During Nvidia’s GTC Berlin keynote, Greenpeace activists disrupted the session, demanding answers about the company’s chips found in Russian drones and environmental claims. The incident highlights…
What an SSL/TLS certificate does, the difference between DV, OV and EV certificates, and how to install a free certificate and switch your whole site to HTTPS.
A cyber incident at BAE Systems has taken down the Bankruptcy Noticing Center, stopping electronic notices for federal courts and delaying filings nationwide.
A China-linked APT group used a critical CVE-2026-102764 flaw in BeyondTrust Remote Support to gain initial access, deploy custom tools, and erase logs. The vulnerability, with a CVSS score of 9.3…
