University of Sydney alerts 27,000 after code-repository breach exposed data
TL;DR The University of Sydney says attackers accessed and downloaded historical personal files stored in an online software code repository,…
WatchGuard warns of actively exploited critical Firebox RCE; patch now
TL;DR WatchGuard has confirmed active exploitation of a critical remote code execution flaw in Firebox firewalls (CVE-2025-32978) and urged customers…
Tren de Aragua accused of deploying Ploutus malware in US ATMs
TL;DR Two Nebraska indictments charge 54 alleged members of Venezuelan gang Tren de Aragua with ATM jackpotting using a Ploutus…
NIST considered disabling NTP feeds after Boulder blackout caused clock drift
TL;DR A prolonged utility power outage at NIST’s Boulder campus disrupted the institute’s atomic time scale and prompted an attempt…
Google shutters Dark Web Report, nudges users toward other security tools
TL;DR Google is discontinuing its Dark Web Report, a breach-alert email service it launched in 2023, saying it lacked clear,…
Apple and Google begrudgingly allow alternative app stores in Japan
TL;DR In response to Japan’s Mobile Software Competition Act, Apple and Google have adjusted their mobile platform policies to permit…
About 1,000 systems hit in ransomware attack on Romanian water agency
TL;DR Romania's National Administration 'Romanian Waters' reported roughly 1,000 compromised systems after a ransomware incident that began Dec. 20. Core…
Ex-fugitive ‘wannabe MI6’ conman Mark Acklom must repay £125,000 to victim
TL;DR Mark Acklom, a 52-year-old fraudster who posed as an MI6 agent and Swiss banker, has been ordered to hand…
Poisoned npm WhatsApp API package steals messages, credentials and accounts
TL;DR A malicious npm package called lotusbail, downloaded over 56,000 times and available for roughly six months, impersonated a WhatsApp…