A 16-year-old bug in EDK II, the code behind most UEFI firmware, lets attackers run code before Secure Boot during network boot. Who is affected and what to do.
Names, phone numbers and birth dates of about 11.18 million Burger King app members in Japan leaked. Expect convincing scam messages.
Quest says patient records were affected after a break-in at its Quanum lab ordering system. Here is what is known and what to do.
Emails, login dates and IP addresses from 11.7 million CAPCOM ID records were accessed. Watch out for fake Capcom messages.
Attackers are hijacking older Plex servers to mine crypto and relay traffic. Update now and check for the signs Plex lists.
Eight eMudhra certificates had keys outsiders could recover. Chrome, Firefox and Apple now block them; no attacks have been reported.
Microsoft fixed CVE-2026-96951, which let malicious files skip Windows’ warning. Windows 11 24H2 Home and Pro got their final update.
Scala reports possible exposure of 713,126 inquiries. Daiwa, Citizen and Sompo explain their own risks; records are not a count of people.
Advantest’s October notice concerns an earlier attack. Personalized letters explain the data involved and the protection offered.
Publica confirms a supplier data leak. The scope remains under investigation; here is what the published notices establish.
BellCrier breach check
Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.
