Cybersecurity - Page 8
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Latest
Railway Says Attacker May Have Decrypted Some Customer Environment Variables
Railway says an attacker may have decrypted some customers' environment variables, which can hold API keys, and tells every user to rotate their secrets.
Microsoft Says AI Agents Tried 2,250 Tenants After ConnectWise Breach
Microsoft says China-aligned Storm-0940 used the ARTEX agent framework to try to sign in to 2,250+ tenants via ConnectWise Cloud Backup credentials.
NEC Says Hackers Used a Contractor’s Accounts to Encrypt Customers’ Servers
NEC says a hacked contractor's stolen credentials were used to encrypt customers' servers, and files leaked from cloud storage NEC set up to share data.
Node.js Fixes Four High-Severity Flaws, Including a Brotli Code-Execution Bug
Node.js 22.23.4, 24.22.1 and 26.12.1 fix four high-severity flaws, including a Brotli decoder bug the project says permits remote code execution.
Malicious LiteLLM Release on PyPI Stole Credentials, Researchers Say
LiteLLM 1.107.0 on PyPI carried a credential stealer and backdoor, SafeDep says. LiteLLM is treating it as SEV-0 and says to pin version 1.106.2.
Signal Calling Flaw Could Leave a Call Open After Hangup, CVE Record Says
A critical flaw in Signal's RingRTC calling library, CVE-2026-113380, could stop a call ending when you hang up. Version 2.72.0 fixes it; update Signal.
Trustbank Confirms 4.45 Million Furusato Choice Records Were Leaked
Trustbank’s parent company says 4,454,097 Furusato Choice member records were leaked, including names, addresses and hashed passwords. Donations remain suspended.
CISA Says Plex Media Server Flaws Are Under Attack, Orders Agencies to Patch
CISA has added four Plex Media Server bugs, a SiteGuard flaw and a Siemens Software Center flaw to its exploited list. Plex says servers were hijacked.
Arcadia Breach May Have Exposed Data on 125,000 Japanese Police Staff
A cyberattack on Japanese cloud firm Arcadia may have exposed names and emails of 125,000 police staff at 20 forces, plus 18,000+ crime-alert addresses.
SBI Says 3,897 Customer Records With Personal Data Surfaced on the Dark Web
State Bank of India says 3,897 customer records with personal data were found among records on the dark web and is investigating the suspected exposure.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.