Data belonging to 14 million Verizon customers was exposed by a partner, which misconfigured a repository storing the personal information it had access to.

Botnets distributing FlokiBot point-of-sale malware are back in business spewing a new malware dubbed LockPoS.

Uber patched an authentication bypass vulnerability in its homegrown SSO solution that allowed attackers to take over subdomains and steal session cookies.

SAP fixed 23 vulnerabilities across roughly a dozen products on Tuesday, including a series of high-risk flaws in SAP POS and SAP Host Agent.

Version 10g of Oracle Access Manager suffers from vulnerabilities that could allow an attacker to hijack sessions.

The Katyusha Scanner can find SQL injection bugs at scale, and is managed via the Telegram messenger on any smartphone.

Microsoft releases a total of 57 security patches, part of its July Patch Tuesday, with 20 rated critical.

Microsoft today addressed two NTLM-related vulnerabilities privately disclosed by Preempt Security. The flaws allow for credential relay attacks.

Adobe only fixed six vulnerabilities in two products, making it the company’s smallest security bulletin of the year.

Avanti Markets notified customers of a possible breach of personal and payment card data as well as biometric user information that likely occurred July 4.