Crypto wallet maker Trezor confirms 13,000 customers' details exposed in logistics breach
Even if your hardware is secure, quantum-ready, encrypted, and future-proof, no one is immune to a supplier letting the side down
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
1.6 Million Likely Impacted by RingCentral Data Breach
The hackers published the allegedly stolen information, including names, addresses, email addresses, and phone numbers. The post 1.6 Million Likely Impacted by RingCentral Data Bre…
Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups
A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination Center (NCC) to establish a program that would allow private sector companies …
BOFH: How our Covid ransomware protocol's Y2K blockchain lowered uptime
Diary of an excuse hound: Pie charts make us hungry for pizza
Over 1,000 Charities Hit by Beacon CRM Data Breach
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts. The post Over 1,000 Charities Hit b…
Scottish prosecutors cast eye over leaky supplier after staff data exposed
Unnamed third party spotted suspicious activity, with names, roles, and email addresses potentially affected
Data analyst sent to prison for stealing data, extorting employer
A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. [...]
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
Hackers stole the customers’ shipping information, including names, addresses, email addresses, and phone numbers. The post 14,000 Trezor Customers Impacted by Data Breach at ShipM…
China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud
The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cry…
Claude Code returns blank thinking blocks, but reasoning still costs you
Developers report model thinking blocks being returned empty or truncated
Hackers Exploiting Unpatched GeoServer Zero-Day
The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. The post Hackers Exploiting Unpatched GeoServer Zero-Day appeared …
AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data…
Five years after quitting a job, developer’s former boss asked for rapid tech support
Connecting a single power cord turned into a lucrative all-nighter
It’s final! Judge says HPE’s Juniper acquisition is complete
Talk about navigating a crooked path. The judge overseeing the most recent objection to HPE’s $14 billion buy of Juniper Networks approved HPE’s original settlement with the U.S. D…
New Zealand says China tried using space investments to spy on local affairs
Intelligence Service says finding domestic threats is harder due to proliferation of toxic content online
Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks
You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone." [...]
OpenAI ditches Recall-style screenshot surveillance for friendly keylogging
'Computer History' records clicks and typing to build ChatGPT memories
Ukraine shuts down 94 fraudulent call centers, seize millions in cash
Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank accounts. [...]
Give Google the boot by building your own search engine
Got $10 and a gig of storage space? Marlin lets you weight your crawl toward the parts of the web you actually care about
Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt
An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. [...]
Global Threat Campaign Hits Critical VMware vCenter Flaw
Exploitation against CVE-2026–59310 began earlier this month, and patching the vulnerability may not be enough to fully mitigate the threat.
Google, Microsoft and Nvidia back 800V DC standard for AI data centers
Google, Microsoft and Nvidia are working through the Open Compute Project (OCP) to establish 800-volt direct current (800VDC) as an open standard for powering the next generation o…
Microsoft's dueling Copilot apps have combined into a single entity
Consumer and work experiences converge, while a few features face the chop
GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL inje…
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of them, covering cloud services, AI tools, m…
Hackers breach govt webmail while running parallel crypto fraud
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. [...]
Microsoft patches LegacyHive Windows zero-day vulnerability
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]
AI 'watermark removers' flood the web. Almost none can prove they work.
Multiple 'watermark removers' have surfaced days after Anthropic began watermarking text generated by Claude, including an open source project with over 4,500 GitHub stars and paid…
Critical VMware vCenter RCE flaw exploited for reverse SSH access
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and…
This JCB doesn't dig – it does 406 mph
Pair of reworked production-based engines carry the Hydromax into the record books