government
healthcare
social media
service provider
fine
education
law enforcement
finance
security
web
dark web
retail
app
phama
insurance
telecoms
charity
travel
manufacturing
legal
operating system
law
tech
ransomware
publishing
story
hacked
malware
unauthorised access
vulnerability
accidental disclosure
phishing
unsecured database
poor security
insider threat
unsecured server
hacking
hacked email
lost device
financial
identity theft
website hacked
stolen documents
ddos
breached
Trojans
RDP
inside job
spear phishing
spyware
cyber attack
breach notification
privacy
security flaw
legislation
poor operations
user credentials
physical security
customer data
third party
Cryptocurrency
enforcement
email hacked
insecure storage
court action
encryption
VPN
fraud
passwords
zero day
3rd parties
state hacking
employee data
remote working
stolen data
Data analysis of the Global Schools Group breach Part 2
UK More than one year later HCRG is first notifying patients of ransomware attack
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
145 Mastra npm Packages Compromised via Hijacked Contributor Account
The Top 10 Attack Surface Exposures in 2026
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization
Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline
Microsoft Confirms RoguePlanet Defender ZeroDay Says Patch is in Development
Crypto Clipper Campaign Abuses Fake Reviews AI Narrators and VirusTotal Comments
IE HSE fined 300000 after Tullamore hospital data breach
GitHub dismissed security reports on flaws now exploited by supplychain worm researchers say
Cybercriminals Are Targeting EdTech Data Breaches and Ransomware Attacks on the Rise
Hospital worker suspected of accessing Princess of Waless medical records to face prosecution
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
Cisco Releases Security Updates for Actively Exploited SDWAN Manager Flaw
Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware
ChinaLinked SprySOCKS Backdoor Expands to Windows with DriverBased Stealth
Attackers Exploit Three Fortinet FortiSandbox Flaws One Patched Last Week
Survey 94 of Incidents Involve Anonymized Infrastructure Teams Are Still Reactive
New Rokarolla Android Malware Steals PINs SMS Codes and Crypto Wallet Funds
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting
Scoop FulcrumSec Leaks Novo Nordisk Data After 25M Demand Goes Unpaid 2
One threat actor demanded 50 million from Novo Nordisk Another one demanded 25 million Neither got paid
Palo Alto Warns of Active Exploitation of PANOS GlobalProtect VPN Flaw
Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites
152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic
The Onboarding Password Mistake That Creates Unnecessary Risk
Weekly Recap Chrome 0Day UniFi Exploits macOS Stealers VPN Flaw and More
OneClick Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails Files and MFA Codes
LiteLLM Vulnerability Chain Lets LowPrivilege Users Take Over AI Gateway Servers
North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
AU American Express ordered to fix security gaps after customer was spied on
JLR ordered 30000 staff to reset passwords in person after cyberattack
ShinyHunters Claims Theft of 297GB of Council of Europe Data Claims Unconfirmed As Yet
Novo Nordisk reports data breach tells clinical trial patients to remain vigilant
UK Hotel guests issued urgent check alert as personal details stolen from major chain