News archive — Page 11
Source-backed reporting on VPNs, privacy, scams, data breaches and online security—plus the practical steps worth taking next.
News archive
Reports 101–110
Clear summaries, visible dates and direct source links—without turning every security story into a VPN sales pitch.
Brinks Home Breach Warning: Watch for Phishing Before Data Is Confirmed
Brinks Home says an attacker accessed company systems and threatened to release claimed data, while customers are being warned about unsolicited emails, texts and calls.
Read analysis
GlobalProtect VPN Flaw Linked to Qilin Ransomware: Patch, Then Check Sessions
Arctic Wolf says attackers exploited Palo Alto Networks GlobalProtect CVE-2026-0257 as an initial access route in multiple Qilin ransomware intrusions.
Read analysisCisco Firewall Management Flaw Added to CISA KEV: What Admins Should Do Now
CISA says Cisco Secure Firewall Management Center CVE-2026-20316 is being exploited, and Cisco says there is no workaround beyond fixed software and hot fixes.
Read analysisMedtronic Breach Notices: What Medical-Device Patients Should Check
The Record reports that nearly 4 million people are being notified after data tied to medical-device patients may have been exposed.
Read analysisOutlook Webmail Half-Click Attacks: Why Opening an Email Can Be Enough
Proofpoint says Laundry Bear used an Outlook Web Access bug to deploy OWAReaper, a browser-based implant designed to steal credentials and keep access inside webmail.
Read analysisMCBS Healthcare Billing Breach Hits 1.26M People: What Patients Should Check
A medical billing business associate says a 2025 network breach may have exposed personal and health information, with HHS listing more than 1.26 million affected people.
Read analysis24,000 Exposed Server BMCs Leak Password Hashes: Why Remote Admin Should Not Be Public
Lava researchers say thousands of internet-facing IPMI/BMC interfaces can leak password-derived authentication material before login, reviving a long-known remote-management risk.
Read analysisCISA Adds Fortinet and Arista Flaws to KEV: What Network-Edge Users Should Do
CISA says two actively exploited flaws affecting Fortinet FortiOS and Arista VeloCloud Orchestrator On-Prem have joined its Known Exploited Vulnerabilities catalog.
Read analysisZimbra Zero-Click Phishing Warning: Why Email Security Still Needs Patch Discipline
NSA, CISA and allied agencies warn that Russian state-supported actors used a view-based Zimbra exploit that can trigger when a vulnerable webmail user simply views a malicious email.
Read analysis
UK Rules Out a VPN Ban: What Age-Check Changes Mean for Privacy
The UK government says it will not ban or age-gate VPNs, even as platforms are told to stop under-18s using workarounds to bypass online safety checks.
Read analysis