Ken Underhill

Oracle patches a high-severity EBS flaw that could let attackers bypass authentication and access sensitive enterprise data.

Threat actors exploit stolen credentials after SonicWall’s firewall backup breach, exposing risks to remote access and enterprise networks.

The FBI’s takedown of BreachForums disrupted a major Salesforce extortion campaign.

Critical WordPress flaw lets attackers gain admin control, stressing the need for fast patching.

The Beamglea campaign used 175 malicious npm packages to host phishing redirects, targeting global tech and energy firms.

A GitHub Copilot Chat bug let attackers steal private code via prompt injection. Learn how CamoLeak worked and how to defend against AI risks.

Hackers exploit AI chatbots as covert gateways to steal data. Learn how to secure systems with defense-in-depth and Zero Trust strategies.

New report reveals 77% of employees share sensitive company data through ChatGPT and AI tools, creating major security and compliance risks.

China-linked hacker group Phantom Taurus targets global governments with advanced stealth malware.

Two teens were arrested for a ransomware attack on Kido nurseries that exposed data from 8,000 children.

OpenAI halts hackers from Russia, North Korea, and China exploiting ChatGPT for malware and phishing attacks.

A Redis flaw, CVE-2025-49844, exposes 75% of cloud systems to remote code execution, data theft, and full system compromise.