Topic: cybersecurity companies
-
US Charges BlackCat Ransomware Negotiator in Major Crackdown
The U.S. Department of Justice has charged a former ransomware negotiator, Angelo Martino, with secretly aiding the BlackCat gang while working for cybersecurity firm DigitalMint, undermining trust in the industry. Martino and two accomplices allegedly acted as BlackCat affiliates, launching atta...
Read More » -
Microsoft WSUS Patch Disables Windows Server Hotpatching
Microsoft's emergency security update KB5070881, intended to fix a critical remote code execution vulnerability (CVE-2025-59287), inadvertently disrupted hotpatching on some Windows Server 2025 systems, forcing them to require restarts for updates. The update was quickly blocked for hotpatch-enab...
Read More » -
Code Beautifiers Leak Bank, Government, and Tech Credentials
A security lapse in JSONFormatter and CodeBeautify exposed thousands of sensitive credentials from banks, governments, and tech firms through publicly accessible JSON snippets. Researchers found over 80,000 pastes containing items like Active Directory credentials, API tokens, and personal data, ...
Read More » -
Clop Hackers Stole Data Using Oracle Zero-Day Since August
The Clop ransomware group exploited a critical zero-day vulnerability (CVE-2025-61882) in Oracle's E-Business Suite, enabling remote code execution and leading to widespread data theft and extortion attempts. Security researchers and analysts confirmed the vulnerability allows unauthenticated att...
Read More » -
Insight Partners Hit by Ransomware Attack, Exposing Staff and Investor Data
Insight Partners suffered a significant data breach due to a sophisticated cyberattack, compromising personal information of over 12,600 individuals. The stolen data included banking details, tax information, and personal records of employees and limited partners, highlighting vulnerabilities in ...
Read More » -
Insight Partners Notifies Staff, LPs of Data Breach
Insight Partners has completed notifying individuals affected by a January data breach that compromised sensitive personal and financial information of limited partners, employees, and details about investment funds and portfolio companies. The breach was identified as a social engineering attack...
Read More »