Cairn AI Attacks: Open Panels Exposed Webshells and Secrets
NorForge found exposed Cairn attack dashboards, checked real webshells and uncovered secrets.…
ConnectWise Backup Access Planted New Keys in Microsoft 365
The ConnectWise/SkyKick incident used application access, not employee logins. See why disabling…
Eiliko Robot Report: Private Chats and Editable Cloud Memory
Eiliko research traced exposed conversations and editable cloud memory. What the October…
AdFection: Targeted Ads Delivered Candiru Spyware Without a Click
Citizen Lab traces Al Jazeera spyware infections through targeted ads, selective code…
Xandr Fined Over Grindr Data in Ad Auctions
Norway fined Xandr NOK 92 million over historical Grindr data sharing. How…
Car Apps Share VINs and Location: What a New Privacy Study Actually Found
Northeastern tested 21 cars and 30 apps. Seven apps sent personal identifiers…
Dodo Pizza Cyberattack Puts Customer Addresses and Order Details at Risk
Dodo Pizza says a September 27–28 cyberattack may have exposed customer contact…
Belnet Email Breach Exposes Messages and Attachments From Outside Senders
Belnet says attackers copied incoming emails and attachments. Check the July–September exposure…
Kiteworks Restores Systems After Precautionary Shutdown
Kiteworks lifted its shutdown recommendation and reported a fix for a limited-capability…
HeyCyan Smart Glasses Test Exposes an Open Photo Album
Check the app, firmware and access controls before trusting smart glasses with…
The Gentlemen Turn Stolen Backups Into a Source of Credentials
Talos traced backup images being opened for credential extraction and cloud transfer.…
Flock Camera Investigation Finds People Detection and a Local Key
A Flock camera investigation recovered local footage and tested person detection. What…