A massive WhatsApp security flaw allowed researchers to systematically identify 3.5 billion active accounts and access their profile photos and status updates. The vulnerability exploited WhatsApp’s contact discovery system through its web interface without any hacking required. Meta only implemente
Palo Alto Networks reported better-than-expected first-quarter earnings with 16% revenue growth to $2.1 billion. The cybersecurity giant also announced it’s acquiring cloud observability platform Chronosphere for $3.35 billion while guiding for in-line second quarter revenue.
A new China-linked threat campaign has compromised thousands of ASUS WRT routers worldwide to build an espionage network. SecurityScorecard’s STRIKE team identified the operation exploiting six legacy vulnerabilities in end-of-life devices.
The National Vulnerability Database is struggling with a massive backlog of unanalyzed vulnerabilities. Security analyst Jerry Gamblin proposes a decentralized global system to replace the current centralized model. His research shows only 26% of CVEs get properly enriched with critical data.
Microsoft is adding AI agents to Windows 11 that can complete tasks automatically, but the company warns they could install malware. The agents will have their own accounts and access to sensitive folders like Documents and Downloads. Users will need to manually activate the feature due to security
A massive Cloudflare outage has brought down significant portions of the internet, affecting services from Spotify to ChatGPT. The incident began around 06:45 EST on November 18, 2025, with recovery efforts showing partial success by 07:20 EST. This marks the second major infrastructure failure in r
Black Friday 2025 is shaping up to be retail’s ultimate resilience test. With £4 billion in expected UK spending and cyber attacks timed to exploit peak pressure, retailers need coordinated systems to survive. Experts reveal how visibility, workforce flexibility, and secure infrastructure separate w
The first Windows 10 extended security update released on November 11, 2025 is failing to install on business PCs. Microsoft confirms it’s investigating the bug affecting company-licensed devices specifically. Regular consumer users aren’t experiencing the same installation problems.
The Justice Department is targeting Starlink satellite internet terminals used by scam compounds in Myanmar. Warrants authorize seizure of devices and accounts allegedly involved in money laundering and wire fraud targeting Americans. The action is part of a new Scam Center Strike Force initiative.
A Chinese state-sponsored group used Anthropic’s Claude Code AI to conduct cyber espionage against major corporations and government agencies. The attack, discovered in September 2025, represents one of the first fully AI-orchestrated cyber campaigns. Anthropic says this shows the barriers to sophis
