Skip to content
A security lapse at prison pay phone service Pay Tel publicly exposed over 300K callers’ driver’s licenses

A security lapse at prison pay phone service Pay Tel publicly exposed over 300K callers’ driver’s licenses

Prison calling service Pay Tel has secured a publicly exposed cloud server storing hundreds of thousands of driver’s licenses and other sensitive information about people who used its services, according to a cybersecurity firm that… 

Read More »A security lapse at prison pay phone service Pay Tel publicly exposed over 300K callers’ driver’s licenses
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Ravie LakshmananMay 28, 2026Vulnerability / Open Source A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted Git service, that allows an authenticated user to execute arbitrary code under certain conditions. The… 

Read More »Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
U.S. says troops were targeted with location data, as senator warns ad industry is a ‘national security threat’

U.S. says troops were targeted with location data, as senator warns ad industry is a ‘national security threat’

The U.S. Department of Defense has confirmed that adversaries have targeted and surveilled serving military personnel on the battlefield using commercial location data, the latest demonstration of how information collected from phones and computers can… 

Read More »U.S. says troops were targeted with location data, as senator warns ad industry is a ‘national security threat’
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Ravie LakshmananMay 28, 2026Vulnerability / Endpoint Security Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server (EMS) deployments to deliver credential-stealing malware. “The campaign abused trusted endpoint management… 

Read More »Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer