Michelle Lojo

Huntress reports ScreenConnect attacks affecting 288 endpoints. Learn what MSPs should check for unauthorized access before restoring remote support.

SEGA’s newsletter vendor breach exposed 2.2 million email-address records. Learn what was affected and what security teams should check with suppliers.

Vanderbilt restores key services after a cyberattack as hackers claim theft of over 1 million SSNs. What is confirmed and what campus users should do next.

A researcher found more than 100 serious flaws in UK government code. Learn what security teams should check for exposed secrets and access-control gaps.

Learn how to check your Android security patch level, understand update dates, troubleshoot delayed patches, and decide when to replace an unsupported phone.

Node.js plans high-severity fixes for versions 22, 24, and 26. Learn how to identify deployed runtimes, prepare updates, and verify patches in production.

Crédit Mutuel Arkéa says attackers used a supplier platform to move bank funds. Learn what security teams should test across the bank’s payment chain.

Flashpoint details holiday retail fraud involving refunds, gift cards, and compromised stores. Learn what security teams should check to reduce exposure.

mSecure urges customers to protect passwords, 2FA secrets and passkeys after a security incident. Learn what is known and which accounts to secure first.

CISA confirms exploitation of a WordPress Core upgrade flaw. Learn which versions contain fixes and what administrators should check for signs of compromise.

Hackers are exploiting a Node-RED flaw to deploy malicious flows and persistent backdoors. Learn which Siemens devices are affected and what to check.

Cisco Talos details KeyDrift malware targeting SD-WAN encryption key material. Learn what security teams should check beyond patching vulnerable controllers.