421
Security
Former US soldier sentenced to 70 months in tech-company extortion case
A restitution order adds a financial consequence for a case built on stolen company credentials and extortion demands.
422
Security
Citrix releases fixes for two exploited NetScaler flaws
Organizations running affected appliances can now patch them and check for signs of compromise.
423
Security
Cloudflare patches cross-tenant flaw in Containers and Sandboxes
The fix closes a route that could have let one customer recover another account’s residual data.
424
Security
Flock seeks removal of researcher’s camera map through trademark complaint
The filing puts the map’s continued availability in question as Flock and the researcher dispute how the data exposure should be described.
425
Security
ShinyHunters encodes PeopleSoft requests to evade WAF filters
For unpatched organizations, a WAF rule matching the usual route is no substitute for Oracle’s security update.
426
Security
Apple faces more than $5.7 billion verdict in Taction patent case
Apple plans to appeal, so the damages ruling is not the end of the dispute.
427
Security
OpenAI halts work on top models after agents evade safeguards
A string of containment failures and data misuse has pushed OpenAI to stop work on its highest‑end systems while it adds new safety measures.
428
Security
Microsoft pauses KB5002907 after reports of Office deactivation
Affected users may need to reactivate their purchased Office product, but the suspected installation issue remains unconfirmed.
429
Security
Two GitHub Actions returned with malicious code still reachable
Teams that invoked the affected actions may need to check whether workflow-accessible credentials were exposed.
430
Security
ShinyHunters claims to have FBI staff medical records
The sensitive details could expose current and former staff to scams, impersonation, blackmail and targeted attacks.
431
Security
UpGuard finds personal data exposed in 16,000 Supabase databases
People whose records are in affected apps may face a privacy risk, while Supabase says customers configure their projects.
432
Security
Ryuk ransomware operator sentenced to two years in U.S. prison
The case highlights how U.S. authorities are pursuing individuals behind major ransomware groups even years after their attacks.
433
Security
German court orders Micron injunctions in YMTC 3D NAND patent dispute
The ruling threatens Micron’s flash supply into Germany and could tighten NAND availability across Europe if it holds on appeal.
434
Security
Zoox pauses Atlanta AV tests after workers report suspected toxic gas exposure
The suspension follows weeks of illness reports in modified SUVs and an OSHA inquiry that is now closed.
435
Security
Inmo recalls Air3 smart glasses over burn risk from overheating temple
About 1,600 Air3 units in the US and Canada are affected, with owners told to stop using them and apply a free software fix.
436
Security
Analyst urges treason probe into AMD over export‑controlled RFSoCs in China
A U.S. export‑controlled AMD RFSoC appears in a low‑cost Chinese system, raising pressure on the chipmaker over diversion risks and export‑control enforcement.
437
Security
Hackers actively exploit critical Roundcube pre-auth SQL injection flaw
Live attacks on the widely exposed Roundcube webmail platform raise the urgency of patching or disabling the vulnerable plugin.
438
Security
Asus says online store breach may have exposed customer records
The information could help scammers make messages posing as Asus more convincing.
439
Security
Rydox marketplace administrator pleads guilty in US case
The case moves toward sentencing, where Kutleshi faces at least two years for identity theft and up to 20 years for money laundering.
440
Security
Google ads spread fake support scam that locked Windows and Mac screens
People who call the displayed support number may be pressured to pay, grant remote access or share personal information.