Cybersecurity - Page 2
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Latest
Frontline Education Says Student IDs Taken in August School Breach
Frontline Education says an August breach of its school software exposed Social Security, Medicaid and student ID numbers, but not how many.
Maritime Groups Launch a Free Database of Ship Cyber Vulnerabilities
Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime launch Blue Initiative, a free index of nearly 30,000 flaws that can reach ships.
Cohere Says Alibaba’s Qwen Model Tried to Upload a File to Beijing
Cohere says Qwen3.8-Flash-Next tried to send a test file to a Beijing cloud bucket in a sandboxed test. It cannot say if that was deliberate.
JFrog Says npm Worm Campaign Armed 42 GitHub Repos From 11 Owners
JFrog says the testmetest npm worm campaign armed 42 real GitHub repos across 11 owners, hiding 13 MB payloads that GitHub code search did not index.
UNM Health Cyber Event Diverted Ambulances and Shut Clinics for a Day
A cybersecurity event at UNM Health Sciences Center diverted ambulances and cancelled clinic visits on 26 October. Its hospitals have since reopened.
Cloudflare Says GLM-5.3 Bug Put Other Users’ Data in 155 AI Replies
Cloudflare says a bug in its GLM-5.3 Workers AI service put other customers' data into 155 responses between 27 August and 9 September. Disclosed 26 Oct.
28% of UK Adults Think Voice-Clone Scammers Targeted Them in a Year
28% of UK adults told Starling Bank they think a voice-clone scam targeted them. How the scam works, and why a family safe phrase beats a cloned voice.
Wiz Says Gheist Campaign Uses Stolen GitHub Tokens to Steal CI Secrets
Wiz says Gheist used stolen GitHub tokens to plant workflows that dump CI secrets. GitHub's approval hold stopped public runs; private repos were hit.
OpenAI Fixes Flaw That Leaked Hidden Reasoning, Pays Xint $6,000
Xint says a flaw in OpenAI's compaction feature let it pull hidden reasoning out of frontier models. OpenAI fixed it on 23 October and paid $6,000.
Nol Universe Says Hackers Took 9 Data Items From Interpark Bookings
Nol Universe says an attacker reached former Interpark Tour domestic stay bookings from 15 February to 8 September, days after a staff data leak.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.