- FTC cracks down on Genshin Impact gacha loot box practices
- Otelier data breach exposes info, hotel reservations of millions
- Malicious PyPi package steals Discord auth tokens from devs
- Microsoft fixes Office 365 apps crashing on Windows Server systems
- US sanctions Chinese firm, hacker behind telecom and Treasury hacks
- FCC orders telecoms to secure their networks after Salt Tyhpoon hacks
- Microsoft starts force upgrading Windows 11 22H2, 23H3 devices
- GDPR complaints filed against TikTok, Temu for sending user data to China
- W3 Total Cache plugin flaw exposes 1 million WordPress sites to attacks
- Microsoft expands testing of Windows 11 admin protection feature
- US cracks down on North Korean IT worker army with more sanctions
- Biden signs executive order to bolster national cybersecurity
- Wolf Haldenstein law firm says 3.5 million impacted by data breach
- FTC sues GoDaddy for years of poor hosting security practices
- FTC orders GoDaddy to fix poor web hosting security practices
- New UEFI Secure Boot flaw exposes systems to bootkits, patch now
- MFA Failures – The Worst is Yet to Come
- Hackers leak configs and VPN credentials for 15,000 FortiGate devices
- SAP fixes critical vulnerabilities in NetWeaver application servers
- CISA shares guidance for Microsoft expanded logging capabilities
- MikroTik botnet uses misconfigured SPF DNS records to spread malware
- Label giant Avery says website hacked to steal credit cards
- Hackers use Google Search ads to steal Google Ads accounts
- Microsoft ends support for Office apps on Windows 10 in October
- Over 660,000 Rsync servers exposed to code execution attacks
- Windows BitLocker bug triggers warnings on devices with TPMs
- January Windows updates may fail if Citrix SRA is installed
- Allstate car insurer sued for tracking drivers without permission
- WP3.XYZ malware attacks add rogue admins to 5,000+ WordPress sites
- US govt says North Korea stole over $659 million in crypto last year
- Windows 10 KB5049981 update released with new BYOVD blocklist
- Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws
- Windows 11 KB5050009 & KB5050021 cumulative updates released
- Google OAuth flaw lets attackers gain access to abandoned accounts
- FBI wipes Chinese PlugX malware from over 4,000 US computers
- FBI deletes Chinese PlugX malware from thousands of US computers
- Hackers use FastHTTP in new high-speed Microsoft 365 password attacks
- Fortinet warns of auth bypass zero-day exploited to hijack firewalls
- Microsoft 365 apps crash on Windows Server after Office update
- OneBlood confirms personal data stolen in July ransomware attack
- CISA orders agencies to patch BeyondTrust bug exploited in attacks
- Stolen Path of Exile 2 admin account used to hack player accounts
- Microsoft: macOS bug lets hackers install malicious kernel drivers
- Hackers exploit critical Aviatrix Controller RCE flaw in attacks
- UK domain registry Nominet confirms breach via Ivanti zero-day
- Ransomware abuses Amazon AWS feature to encrypt S3 buckets
- Microsoft MFA outage blocking access to Microsoft 365 apps
- Phishing texts trick Apple iMessage users into disabling protection
- Pastor who saw crypto project in his “dream” indicted for fraud
- Scammers file first — Get your IRS Identity Protection PIN now