Enterprise data backup platform Commvault has revealed that an unknown nation-state threat actor breached its Microsoft Azure environment by exploiting CVE-2025-3928 but emphasized there is no evidence of unauthorized data access. "This activity has affected a small number of customers we have in common with Microsoft, and we are working with those customers to provide assistance," the company

[Read the rest of this article...]

1. Ten killed after four tourist boats capsize in China, state media report  Reuters
2. Ten dead after tourist boats capsize in China  BBC
3. Capsized tour boats kill multiple in China: state media CCTV  Yahoo
4. Tourist boats capsize in sudden storm in southwest China, leaving 10 dead  NPR
5. Three dead and 14 missing after two sightseeing boats carrying tourists capsize in China  Daily Mail

[Read the rest of this article...]

SonicWall has revealed that two now-patched security flaws impacting its SMA100 Secure Mobile Access (SMA) appliances have been exploited in the wild. The vulnerabilities in question are listed below - CVE-2023-44221 (CVSS score: 7.2) - Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to

[Read the rest of this article...]

1. U.K. probing possible link between two suspected state-sponsored Iranian plots  NBC News
2. U.K. police arrest 7 Iranians in what government calls biggest counterterrorism operations in years  CBS News
3. ‘Iranian terror attack’ foiled with hours to spare  The Telegraph
4. Reports: Arrested Iranian suspects were ‘hours away’ from ‘major attack’ on UK synagogue  The Times of Israel
5. Eight arrests in connection with two separate terrorism investigations  Sky News

[Read the rest of this article...]

As the field of artificial intelligence (AI) continues to evolve at a rapid pace, fresh research has found how techniques that render the Model Context Protocol (MCP) susceptible to prompt injection attacks could be used to develop security tooling or identify malicious tools, according to a new report from Tenable. MCP, launched by Anthropic in November 2024, is a framework designed to connect

[Read the rest of this article...]