Recent news

A judge let a negligence claim proceed against Rivers Casino Philadelphia over a 2024 ransomware attack, dismissing most other claims.

ShinyHunters leaked 1.6 million records after the RingCentral data breach, exposing names, phone numbers, and home addresses.

Shell is investigating a potential data breach after Clop claimed it stole 89GB of files via a PTC Windchill vulnerability.

A single script tag on a shared host exposed webmail accounts across 15 government tenants in one Middle Eastern country.

France's tax authority says an attacker stole income and property records on 678,000 individuals and businesses in a late-June breach.

SafePal has confirmed unauthorized access to order records for 39,798 customers, and a threat actor now claims to be selling the stolen data.

Over 800 DDoS attacks above 1 Tbps hit in Q2, a 519% jump, as DNS floods and amplification reshaped attack trends.

Valve is notifying Steam hardware customers in Europe after attackers stole personal data from shipping partner CEVA Logistics.

US and South Korean agencies warn that Gunra ransomware affiliates are exploiting Fortinet and VPN flaws to breach government networks.

Attackers exploited an unpatched TrueConf server vulnerability to swap client installers for backdoored builds. Patches are out.

Attackers exploited SharePoint flaws to compromise 200 accounts at Switzerland's federal IT office, including technical service accounts.

A US court sentenced the Ransom Cartel ransomware creator to 16 years after attacks on 18 companies caused $6.7M in losses.

Connor Moucka pleaded guilty to the Snowflake data theft attacks that hit 165 companies and exposed records on over 100 million people.

A UK police data breach exposed names and work emails of over 100,000 officers after an ExfilSquad extortion attack.

Brinks Home confirmed a breach after ShinyHunters claimed 4.9 million stolen Salesforce records and threatened to publish them.

Amgen says attackers stole patient health data and proprietary research from third-party cloud systems. No threat actor named yet.

New NCSC incident response guidance splits recovery from a disruptive cyber attack into three practical stages, starting with the first hours.

Attackers are poisoning DNS on hotel Wi-Fi gateways to redirect guests to fake Microsoft 365 logins. No phishing link required.

An attacker seized CubePilot's DNS records and obtained TLS certificates for every subdomain, capturing credentials behind a valid padlock.

OnTrac has notified customers of a data breach after attackers accessed files on its corporate network. Only names are confirmed exposed.

Stadler Rail refused a $12.3M ransom after Everest breached a data exchange platform it shares with a supplier. Production stayed unaffected.

Anubis ransomware claims the Fairlife cyberattack, alleging 1TB stolen and threatening a data leak if Coca-Cola doesn't negotiate.

Estée Lauder confirms a data breach via Oracle E-Business Suite exposing SSNs, passports, and health records tied to the Clop campaign.

Chick-fil-A is notifying customers of a data breach after attackers used stolen credentials to break into Chick-fil-A One accounts.

23andMe agreed to pay $18 million after a genetic data breach settlement with 43 state attorneys general over its 2023 security failures.

Coca-Cola confirms a ransomware attack halted Fairlife dairy production in the US, with data theft and attribution still unconfirmed.

Zoom warns of a critical account takeover vulnerability in its Windows client. See what is affected and how to patch it now.

Dutch police arrested the leader of an investment fraud ring accused of stealing over €100 million a month from victims worldwide.

A cyberattack has knocked out dispatch and booking systems at Nihon Kotsu, Japan's largest taxi operator.

Lidl notified online shop customers in Germany, Belgium, and the Netherlands after a data breach at a service provider exposed personal details.

The Centers Laboratory data breach exposed SSNs and health records for 542,377 people, nearly a year after hackers first broke in.

AssuranceAmerica confirms a data breach exposing driver's license numbers and policy data for nearly 7 million people.

Mount Royal University confirmed a data breach after hackers stole and wiped files, with the CMD Organization group demanding a ransom.

Accenture confirms a data breach after a hacker offered stolen source code and Azure credentials for sale. Here's what happened and why it matters.

A job interview phishing scam impersonates recruiters at 30+ brands to steal Google credentials via fake login pop-ups.

A fake Interpol ransomware campaign is tricking small businesses with bogus criminal investigation emails that deliver encrypting malware.

New research links the FortiBleed credential theft campaign directly to INC and Lynx ransomware negotiation platforms.

Medtronic is notifying customers of a data breach tied to ShinyHunters, part of a growing pattern of extortion attacks this year.

Aflac disclosed a new data breach after attackers accessed its Japan subsidiary, exposing policy, personal, and bank account information.

Nissan confirms a data breach tied to an Oracle PeopleSoft zero-day, exposing employee SSNs, banking details, and tax records.

Attackers are building fake ChatGPT workspaces that impersonate real companies and inviting employees to join in a bid to harvest sensitive data from AI prompts.

Europol and Microsoft disrupted Amadey and StealC in the latest Operation Endgame phase, seizing 326 servers and recovering 27 million stolen credentials.

Google is separating Search and Play history from personalization settings, and enabling media saving by default for AI training.

Xsolis suffered a data breach after a phishing attack exposed names, SSNs, and medical records for nearly 1.4 million people.

Agentic AI threats are reshaping the attack surface. Here's why autonomous AI systems create risks that existing defences weren't built to handle.

A Texas government data breach at a third-party vendor exposed driver's licenses and passport numbers for over 3 million people.

Law enforcement dismantled SocGholish malware infrastructure across 14,971 WordPress sites and 106 servers in a major Operation Endgame strike.

Apple patched a Beats Studio Buds vulnerability that let nearby attackers listen in on conversations through the earbuds' microphone.

Kodak confirmed a data breach after ShinyHunters claimed theft of 2.2 million records, setting a leak deadline of June 18, 2026.

ShinyHunters claims a Council of Europe data breach exposed payroll, CVs, and personal records for over 10,000 current and former staff.

A Novo Nordisk data breach exposed clinical trial data and contact details for healthcare professionals after an IT systems intrusion.

Hackers breached Tchap, France's encrypted government messaging app, exposing 650,000 messages and data from over 73,000 accounts.

ShinyHunters hit the University of Nottingham's student records system, exposing data on 454,600 people including passports and payment details.

Security researchers tricked an OpenClaw AI email agent into leaking AWS credentials and CRM records using basic phishing tactics.

Oxford University confirms a data breach exposing names, emails, and passwords via its CareerConnect platform. Second breach in five weeks.

ShinyHunters leaked 234 GB of DentaQuest data after ransom talks failed, exposing names, government IDs, and health insurance records for 2.6 million people.

A cyberattack on the WFP exposed names, ID numbers, phone numbers, and location data belonging to 600,000 Gaza households.

Attackers silently monitored a stock exchange executive's Outlook mailbox for five months, exfiltrating emails through Dropbox and OneDrive.

Attackers abused Meta's AI support bot to hijack Instagram accounts without passwords or phishing — here's how the exploit worked.

Spanish police arrested a man in Granada for doxing employees of INCIBE, the Civil Guard, and other sensitive state institutions.

Dutch police and the NCSC shut down a botnet controlling 17 million devices. Here's how it worked and what it means for security.

Iranian APT MuddyWater ran a DLL side-loading espionage campaign across 9 countries in Q1 2026, targeting manufacturing, finance, and aviation.

Carnival Corporation confirmed a data breach hitting nearly 6 million people after ShinyHunters used social engineering to access employee systems.

Charter Communications confirmed a data breach after ShinyHunters threatened to leak 42 million stolen customer records.

Italian police shut down the CINEMAGOAL piracy app, which stole live DRM keys from real streaming accounts and fined 1,000 subscribers up to €5,000.

Dutch investigators seized 800 Stark Industries servers and arrested two men linked to Russian cyberattacks and DDoS campaigns.

A 32-year-old was arrested in Vienna after sending millions of phishing texts via an SMS blaster attack during Eurovision 2026.

GitHub confirmed a data breach after a poisoned VS Code extension gave attackers access to 3,800 internal repositories. Customer data is not believed to be affected.

Grafana Labs confirmed a data breach after a stolen access token gave hackers full access to its codebase. The company refused to pay.

INTERPOL's Operation Ramz led to 201 arrests, 53 server seizures, and nearly 4,000 confirmed victims across the Middle East and North Africa.

TeamPCP is selling 450 stolen Mistral AI repositories for $25,000 after a supply chain attack harvested developer credentials across npm and PyPI.

Two OpenAI employee devices were breached in the Mini Shai-Hulud supply chain attack. No user data was compromised, but certificates are being rotated.

The Nitrogen ransomware group hit Foxconn factories across North America, claiming 8TB of stolen data tied to Apple, Intel, Google, and Nvidia.

Škoda Auto confirmed a data breach after attackers exploited a vulnerability in its online shop software, exposing customer names, addresses, and password hashes.

Instructure and ShinyHunters reportedly reached an agreement aimed at preventing stolen Canvas platform data from leaking publicly.

German authorities dismantled a rebooted Crimenetwork darknet marketplace and arrested its administrator in Mallorca after the platform generated €3.6M.

A Zara data breach linked to a compromised analytics vendor has exposed the personal information of 197,000 people across multiple countries.

World Password Day 2026 falls on May 7. Here's why credential habits remain a critical security risk and what you can do today.

Official DAEMON Tools installers were trojanized from April 8, delivering backdoors to thousands of systems across 100+ countries. The attack is ongoing.

Trellix confirmed unauthorized access to its source code repository. Here's what happened, what remains unknown, and why it matters.

Canvas LMS maker Instructure confirms a data breach exposing names, emails, and student IDs. ShinyHunters claims 275 million records stolen.

Austrian and Albanian authorities dismantled a crypto investment fraud operation with 450 employees, causing €50M in losses across seven countries.

Medtronic confirmed a data breach after ShinyHunters claimed 9 million records stolen. Patient safety and operations were not affected.

Vimeo confirmed a data breach after analytics vendor Anodot was compromised. ShinyHunters stole tokens and accessed email addresses and metadata.

Canadian police arrested three men for operating SMS blaster devices across Toronto, causing 13 million network disruptions and mass smishing.

ADT confirmed a data breach after ShinyHunters threatened to leak over 10 million stolen records. Names, addresses, and partial SSNs were exposed.

Dutch cosmetics brand Rituals confirmed a data breach exposing customer names, addresses, and dates of birth from its My Rituals loyalty database.

North Korea's Lazarus Group is linked to a $290 million exploit of KelpDAO's cross-chain bridge, triggering a DeFi liquidity crisis.

France's ANTS has confirmed a data breach after a hacker claimed to have stolen up to 19 million citizen records and put them up for sale.

Hackers defaced the Seiko USA website, claimed to steal its Shopify customer database, and issued a 72-hour ransom deadline.

Vercel confirmed a data breach after attackers used a compromised AI tool to access internal systems and environment variables.

Kraken is facing extortion after insiders leaked client data from its support systems. Here is what happened and what it means for crypto security.

A cyberattack on Basic-Fit compromised names, bank details, and personal data belonging to roughly 1 million gym members in six EU countries.

ShinyHunters leaks 78.6 million Rockstar Games records stolen via a third-party breach at analytics vendor Anodot through Snowflake access tokens.

Booking.com has confirmed a data breach exposing names, contact details, and reservation data for an unknown number of customers.

Storm-2755 is hijacking Microsoft 365 sessions to redirect Canadian employee salaries. Here's how the attack works and what organizations must do.

Hackers stole $3.6 million in Bitcoin from Bitcoin Depot's corporate wallets after gaining access to internal settlement account credentials.

Iranian-linked hackers are disrupting U.S. water, energy, and government systems by targeting internet-exposed PLCs. Here's what happened.

LinkedIn's BrowserGate scandal exposes covert browser scanning of 6,000+ extensions. Here's what it means for your privacy and security.