CareCloud has disclosed a cybersecurity incident that gave an unauthorized actor access to one of its electronic health record environments, raising the possibility that patient…
A now-patched ChatGPT vulnerability allowed attackers to quietly extract sensitive user data by abusing a hidden outbound channel inside the platform’s code execution runtime. Check…
A new phishing-as-a-service platform called EvilTokens is helping cybercriminals hijack Microsoft 365 accounts by abusing Microsoft’s legitimate device code authentication flow. Sekoia says the kit…
A newly disclosed vulnerability in the WordPress plugin Smart Slider 3 could let low-privilege authenticated users read sensitive files from the server, including wp-config.php in…
Anthropic accidentally exposed a large portion of the source code behind its Claude Code CLI after a public npm package shipped with a source map…
A newly analyzed Windows remote access trojan called ResokerRAT uses Telegram’s Bot API as its control channel instead of a traditional command-and-control server. That gives…
Google has moved its ransomware detection and file restoration features for Google Drive out of beta and into general availability. The tools are designed to…
Modern ransomware attacks often begin long before files get encrypted. Researchers say many operators now abuse legitimate Windows utilities and low-level tools to disable antivirus…
Google has finally made it possible for eligible users to change the main @gmail.com address tied to their existing Google Account. That means people who…
Mercor has confirmed a security incident, but some of the biggest claims circulating online still need careful framing. The AI recruiting startup told TechCrunch it…
November 21, 2025
1 comment 
