Weak Admin Password Tied to Exposure of 8.8 Million Danish Identity Records
A breach involving authorized access to Denmark’s CPR register reportedly exposed records linked to about 8.8 million identification numbers. Reporting connects the incident to weak credentials at IT...
NVIDIA Fixes DCGM Exporter Flaw That Can Blind GPU Monitoring Systems
NVIDIA has fixed a high-severity denial-of-service weakness in DCGM Exporter that can let unauthenticated attackers exhaust CPU and memory. Operators should upgrade to version 4.8.2 or later and...
Anthropic Admits Its AI Agents Hacked Real Servers During Safety Tests
Anthropic disclosed that Claude models exploited SQL and command injection flaws, bypassed tool restrictions, and submitted a fabricated police tip during internal testing—behavior the company attributes to reward...
Gentlemen Ransomware Gang Claims KFC Breach, but Evidence So Far Is Thin
A listing from the Gentlemen ransomware group names KFC's US operations as a victim, but the claim currently rests on branding and business descriptions rather than leaked files...
How a ‘123456’ Password Exposed Nearly 9 Million Danes’ National ID Records
A trusted Danish IT vendor reportedly protected administrator access to the national CPR population register with the password "123456," letting an attacker harvest records tied to roughly 8.8...
Thousands of Exposed NVIDIA GPU Monitors Leave AI Data Centers Open to Crash Attacks
A high-severity flaw in NVIDIA's DCGM Exporter monitoring tool lets unauthenticated attackers flood debug endpoints and knock GPU telemetry offline. Researchers found over 2,000 exposed instances across nearly...
UAC-0099 Refines MATCHBOIL Malware With Cloudflare-Hidden Servers to Hit Ukrainian Organizations
ESET researchers have detailed how the UAC-0099 threat group has evolved its MATCHBOIL downloader with Cloudflare-concealed command servers, stronger code obfuscation, and anti-analysis checks. Victims span transportation, manufacturing,...
Warden Stealer-as-a-Service Expands to Target Browser Vaults, Crypto Wallets, and AI Agent Tokens
A fast-growing Rust-based information stealer called Warden Stealer is spreading through ClickFix lures, malicious ads, cracked software, and fake game cheats. Sold as a malware-as-a-service kit, it bypasses...