The Information Highway

The Information Highway

Sergiu Gatlan has covered cybersecurity, technology, and other news beats for more than a decade. Email or Twitter DMs for tips.

Acuity confirms hackers stole non-sensitive govt data from GitHub repos

data-theft

Acuity, a federal contractor that works with U.S. government agencies, has confirmed that hackers breached its GitHub repositories and stole documents containing old and non-sensitive data.

Continue reading
  181 Hits

Retail chain Hot Topic hit by new credential stuffing attacks

HOT-TOPIC

American retailer Hot Topic disclosed that two waves of credential stuffing attacks in November exposed affected customers' personal information and partial payment data.

Continue reading
  223 Hits

CISA tags Microsoft SharePoint RCE bug as actively exploited

SharePoint

CISA warns that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code execution attacks.

Continue reading
  1136 Hits

Exploit released for Fortinet RCE bug used in attacks, patch now

Fortinet

Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively exploited in attacks.

Continue reading
  298 Hits

Microsoft releases emergency fix for Windows Server crashes

Windows_Serverblue

Microsoft has released emergency out-of-band (OOB) updates to fix a known issue causing Windows domain controllers to crash after installing the March 2024 Windows Server security updates.

Continue reading
  250 Hits