Do Son A critical Angular SSR vulnerability (CVE-2025-59052) could expose user data. Learn about the flaw, affected versions, and how to protect your application.
data leak
Siemens has disclosed a critical flaw in its SIVaaS platform. A network share is exposed without authentication, allowing unauthenticated attackers to access or alter sensitive data.
Siemens has disclosed a critical flaw in its SIVaaS platform. A network share is exposed without authentication, allowing unauthenticated attackers to access or alter sensitive data.
A state-sponsored North Korean hacking group was breached by "ethical" hackers. An 8.9GB archive of tools and stolen data has been leaked online.
A new ChatGPT feature exposed over 100,000 private conversations to search engines. The links remain accessible on the Internet Archive and elsewhere.
OpenAI has disabled a ChatGPT feature that leaked private conversations to Google Search after users unknowingly enabled indexing, exposing sensitive data and resumes.
Microsoft discovered "Sploitlight" (CVE-2025-31199), a macOS flaw exploiting Spotlight plugins to bypass TCC, leading to private data exfiltration, including Apple Intelligence cached info.
Apache CXF versions are vulnerable to DoS attacks and sensitive data leaks (CVE-2025-48795) due to improper handling of large messages. Update immediately!
SpyCloud Labs exposes VenusTech & Salt Typhoon data leaks on DarkForums, revealing contract details for Chinese hack-for-hire operations against foreign targets, including military links.
A misconfigured Google Cloud Storage bucket belonging to CIEE exposed 248,725 sensitive Brazilian records, including medical reports and job videos, now published by data broker "888."
Pro-Russian hacktivists intensify 2025 digital assaults on Ukraine, NATO, and Western critical infrastructure, using DDoS, defacements, and targeting ICS.
A flaw (CVE-2025-4679) in Synology ABM leaked a static client_secret, allowing unauthenticated attackers read-only access to all Microsoft 365 tenants with ABM installed.
Pro-Iranian group Cyber Fattah leaked thousands of sensitive Saudi Games participant records, including PII and bank data, in a political information operation targeting Saudi Arabia.
A hacker is allegedly selling 16 billion login credentials, likely aggregated from past breaches via info-stealing malware, impacting major tech platforms. Use MFA to stay safe!
A patched Google flaw allowed researchers to extract linked phone numbers without user notification. The vulnerability is now fixed, and no exploits were detected.
Symantec reveals popular Chrome extensions like Browsec VPN & DualSafe Password Manager are leaking sensitive user data over unencrypted HTTP, risking privacy.
A malicious plugin is putting chatbot privacy at risk, silently stealing user messages. Is your Koishi bot compromised?
Dior notified customers in China of a data breach. Learn what customer information was accessed and what steps Dior is taking to address the incident
Anonymous claims 10TB cyberattack on Russia, exposing Kremlin-linked files, foreign assets, and data labeled “Donald Trump.”
Unprotected APIs exposed sensitive data of over 33,000 employees. CloudSEK's BeVigil discovered the security flaw
Casio discloses details of a ransomware attack and data breach. Find out how the company is addressing the security issues and protecting customer information.
Fuji Electric's subsidiary, Fuji Electric Indonesia, suffers ransomware attack leading to system shutdown and potential data leaks.