Critical security vulnerabilities discovered in Laravel Voyager package enable remote code execution through file upload bypasses, JavaScript injection, and unauthorized file manipulation. The widely-used admin panel remains unpatched, affecting millions of users and requiring immediate se...
PowerSchool, a major K-12 software provider serving 60+ million students, disclosed a December 2024 data breach affecting 6,505 school districts across the US and Canada. The breach exposed sensitive data including names, addresses, SSNs, and academic records. While PowerSchool reports lim...
Community Health Center of Connecticut experienced a major data breach affecting over 1 million patients, exposing personal data, health records, and insurance information. The breach, discovered in January 2025, was quickly contained without system encryption or operational disruption. Th...
Mizuno USA suffered a data breach between August-October 2024, exposing customer personal information including SSNs, financial details, and identification documents. The BianLian ransomware group claimed responsibility, allegedly accessing sensitive business data and confidential records....
Vietnamese threat actor XE Group shifts from credit card skimming to targeting enterprise software vulnerabilities in Progress Telerik UI and Advantive VeraCore. Using web shells and Meterpreter payloads, they exploit critical vulnerabilities for unauthorized system access. CISA adds five ...
