Blog

France links a supermarket refrigeration hack to Iran’s IRGC after hundreds of stores lost temperature control, while investigators seek warrants.

Anthropic says its Claude 5.2 models outscored GPT-6 Cyber on a cyber benchmark, but the comparison uses restricted Mythos results and warrants scrutiny.

SonicWall patched seven SonicOS flaws affecting Gen 7 and Gen 8 firewalls, including an exploited SSL-VPN flaw that can bypass SAML MFA.

CISA added four actively exploited flaws to its KEV catalog, including critical bugs in OpenSSH, GPUStack, FreeSWITCH and IBM Aspera Faspex.

Researchers accessed two automakers’ connected-car systems through ForgeRock flaws, taking over customer accounts and remotely unlocking and starting vehicles.

A multistate settlement with PJ&A follows a 2023 medical data breach affecting 13.3 million people and exposes major failures in access and monitoring.

Sega says a breach at newsletter provider Arara exposed 2,196,044 email addresses, prompting phishing warnings while customer accounts remain unaffected.

Iris Ohyama has suspended its Iris Plaza store after unauthorized cloud access may have exposed data linked to 7.7 million people, including passwords.

Linux creator Linus Torvalds says eBPF fixes may now outpace AI-generated bug reports, suggesting the kernel’s vulnerability flood could be easing.

LNbits told operators to take servers offline after attackers reportedly drained funds through newly created accounts while patches remain pending.