Enterprise Security Tech

Bullhorn temporarily disabled access to its staffing platform after detecting unauthorized activity, disrupting recruiting and payroll-related workflows.

NorForge found threat actors using exposed Cairn control panels to coordinate autonomous attacks against e-commerce and payment websites.

OpenCode says attackers accessed a legacy system and potentially exposed customer API keys for OpenAI, Anthropic and Google services.

Securonix researchers detailed a WordPress attack chain that abuses an authenticated administrator browser to install a hidden malicious plugin.

Research into Broadcom Wi-Fi Protected Setup software found a long-lived flaw that may allow nearby attackers to execute commands on vulnerable routers.

A Department of Homeland Security order excludes DeepSeek products from federal civilian procurement and requires agencies to remove covered technology.