Petco has taken its Vetco Clinics website offline after a security lapse exposed sensitive customer and pet medical records. The vulnerability allowed anyone to download files by guessing sequential customer ID numbers.
A new pair of malicious Visual Studio Code extensions has been caught stealing developer data. They disguise themselves as a color theme and an AI assistant to deliver a powerful infostealer.
Tech giants Apple and Google have sent out a new wave of threat notifications to users worldwide. The warnings are for suspected targeted spyware attacks, often linked to state-backed actors.
Linux’s security model is robust, but it’s not a magic shield. With more “typical” users adopting it and servers under constant automated attack, the old assumptions are crumbling. Security is about layers, not blind faith in an OS.
The US Cybersecurity and Infrastructure Security Agency has issued a stark warning against using personal VPN services. The agency says they often shift risk to a less trustworthy provider and can increase your attack surface.
The long-held belief that Macs are immune to serious malware is crumbling. Security firms are tracking a sharp rise in threats, making Apple’s decision to cut bug bounty payouts particularly poorly timed.
Two brothers, both federal contractors with prior hacking convictions, have been charged with a brazen data destruction spree. According to the DOJ, they deleted sensitive databases just minutes after being terminated and used an AI tool to try and hide the evidence.
A Pentagon Inspector General report details a system installed for Defense Secretary Pete Hegseth that let him access his personal cellphone from his secure office. The investigation ties this to his use of Signal to share sensitive info on Yemen airstrikes, concluding it risked U.S. forces.
A new security standard is pushing utilities to look beyond their wired networks. The real threat, and the new compliance focus, is now in the unmonitored radio waves around critical infrastructure.
A new CNET report breaks down the specific threats antivirus can and cannot handle. With 75% of Americans hit by online attacks, it’s a crucial baseline—but far from a complete solution.
