Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

Claude didn't just plan an attack on Mexico's government. It executed one for a month — across four domains your security stack can't see.

Attackers jailbroke Anthropic’s Claude and ran it against multiple Mexican government agencies for approximately a month. They stole 150 GB of data from Mexico’s federal tax authority, the nationa [...]

T-Mobile is under fire again over its 2021 data breach

T-Mobile is once again being sued by Washington state over the 2021 data breach which exposed sensitive information for over 79 million people, The Verge reports. The lawsuit filed on Monday alleges t [...]

The best password manager for 2025

Recently, we saw all the ways reused passwords can harm your security posture. The 23andMe attack comes to mind, but generally credential stuffing has been on the rise. Hackers can buy or find your re [...]

What’s going on with Donut Lab?

In January, a Finnish-Estonian startup proclaimed it had developed a truly solid state battery, a holy grail for the technology industry. Donut Labs’ cell wasn’t just solid state, however. It clai [...]

SonicWall customers told to reset credentials following firewall data breach

SonicWall suffered a brute-force attack which could affect thousands of its customers. [...]

Marquis confirms data breach, point finger of blame at SonicWall firewall

Marquis wants SonicWall to pay for the damages, but firewall maker asks for proof that two incidents are linked. [...]

SonicWall VPN flaw could allow hackers to hijack your sessions, so patch now

Security researchers are urging SonicWall users to apply the available fix as soon as possible. [...]

SonicWall tells customers to patch SonicOS flaw allowing hackers to crash firewalls

A high-severity flaw was found in SonicWall OS SSLVPN which can be used to trigger DoS. [...]