Nextcloud leaks 367K records — European cloud giant exposes staff and clients in major breach

A misconfigured cloud database spills secrets, but Nextcloud was quick to remedy.

, , , ,
Experts warn of the ‘first documented case of agentic ransomware’ — dangerous JADEPUFFER attack run entirely by an LLM

An LLM-based ransomware attack has been detected by researchers, and is notable for losing the data it encrypted…

, , , ,
Baby Boomers beat Gen Z in password hygiene, but both generations still don’t stick to the best practices — and many people are still using decades-old passwords that they made as kids
 Baby Boomers beat Gen Z in password hygiene, but both generations still don’t stick to the best practices — and many people are still using decades-old passwords that they made as kids

Baby Boomers are the most likely to frequently change passwords, but often rely on unsecure methods of storage.

, , , , ,
81 million login attempts hit Microsoft 365 accounts as hackers try password-spraying to force entry using stolen credentials and OAuth to bypass authentication

The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

, , , , ,
‘100% of Hide My Email addresses were exploitable’: Apple’s security feature can be duped into supplying the real contact info — and the bug has remained unpatched for over a year

The bug was reported to Apple over a year ago, but still nothing has been done.

, , , , ,
That free VPN Chrome and Firefox extension may be reading your clipboard every half a second, researchers warn
 That free VPN Chrome and Firefox extension may be reading your clipboard every half a second, researchers warn

Researchers at Socket found two “VPN Go” browser extensions for Chrome and Firefox that posed as free VPNs while quietly stealing clipboard data through later updates.

, , , ,
This new tool can let you ask Claude if that ‘too good to be true’ online offer is actually a scam
 This new tool can let you ask Claude if that ‘too good to be true’ online offer is actually a scam

Norton’s scam detection will let you ask Claude whether an email or online deal looks suspicious without leaving the AI chatbot.

, , , , ,
US Secret Service personnel are putting the lives of America’s VIPs at risk by refusing to use government-issued phones — but they might not be up to the job in the first place

The Secret Service isn’t abiding by its own guidance, and it could be putting lives at risk.

, , , ,
Microsoft takes down over 100 malicious Edge extensions hiding malware in images and fonts
 Microsoft takes down over 100 malicious Edge extensions hiding malware in images and fonts

Microsoft says the 119 malicious extensions were downloaded a total of 2.6 million times since 2021.

, , , ,
Nearly 400 illegal World Cup 2026 streaming sites taken offline by US DOJ
 Nearly 400 illegal World Cup 2026 streaming sites taken offline by US DOJ

Operation Offsides was a coordinated takedown of sites illegal streaming World Cup games.

, , , , , ,