government healthcare social media service provider fine education law enforcement finance security web dark web retail app phama insurance telecoms charity travel manufacturing legal operating system law tech ransomware publishing
story hacked malware unauthorised access vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacking hacked email lost device financial identity theft website hacked stolen documents ddos breached Trojans RDP inside job spear phishing spyware
cyber attack breach notification privacy security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud passwords zero day 3rd parties state hacking employee data remote working stolen data

Data analysis of the Global Schools Group breach Part 2
UK More than one year later HCRG is first notifying patients of ransomware attack
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
145 Mastra npm Packages Compromised via Hijacked Contributor Account
The Top 10 Attack Surface Exposures in 2026
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
Microsoft Confirms RoguePlanet Defender ZeroDay Says Patch is in Development
Crypto Clipper Campaign Abuses Fake Reviews AI Narrators and VirusTotal Comments
IE HSE fined 300000 after Tullamore hospital data breach
GitHub dismissed security reports on flaws now exploited by supplychain worm researchers say
Cybercriminals Are Targeting EdTech Data Breaches and Ransomware Attacks on the Rise
Hospital worker suspected of accessing Princess of Waless medical records to face prosecution
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
Cisco Releases Security Updates for Actively Exploited SDWAN Manager Flaw
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
ChinaLinked SprySOCKS Backdoor Expands to Windows with DriverBased Stealth
Attackers Exploit Three Fortinet FortiSandbox Flaws One Patched Last Week
Survey 94 of Incidents Involve Anonymized Infrastructure Teams Are Still Reactive
New Rokarolla Android Malware Steals PINs SMS Codes and Crypto Wallet Funds
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
Scoop FulcrumSec Leaks Novo Nordisk Data After 25M Demand Goes Unpaid 2
One threat actor demanded 50 million from Novo Nordisk Another one demanded 25 million Neither got paid
Palo Alto Warns of Active Exploitation of PANOS GlobalProtect VPN Flaw
Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic
The Onboarding Password Mistake That Creates Unnecessary Risk
Weekly Recap Chrome 0Day UniFi Exploits macOS Stealers VPN Flaw and More
OneClick Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails Files and MFA Codes
LiteLLM Vulnerability Chain Lets LowPrivilege Users Take Over AI Gateway Servers
North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
AU American Express ordered to fix security gaps after customer was spied on
JLR ordered 30000 staff to reset passwords in person after cyberattack
ShinyHunters Claims Theft of 297GB of Council of Europe Data Claims Unconfirmed As Yet
Novo Nordisk reports data breach tells clinical trial patients to remain vigilant
UK Hotel guests issued urgent check alert as personal details stolen from major chain