Cybersecurity
UK Police National Legal Database Breach Exposes 114,000 Personnel
A cyberattack by the ExfilSquad collective has leaked the professional contact details of thousands of law enforcement and justice officials on the dark web.
Lawmakers Propose Lifetime Identity Protection for OPM Breach Victims
The RECOVER PII Act seeks to extend security coverage indefinitely for millions of federal employees and contractors affected by the 2015 data breach.
CISA Adds Exploited N-able N-central Auth Bypass to KEV Catalog
A high-severity flaw allowing full account takeover was exploited to compromise managed endpoints via Cloudflare tunnels.
FTC and State Regulators Sue Hims & Hers Over Patient Data Leaks and Billing
The telehealth giant faces federal and state charges for sharing sensitive health data with ad platforms and using deceptive subscription tactics.
Malware can hijack Google-synced passkeys via 'Pass-ta-key' flaws
Researchers identify three attack vectors allowing Windows malware to bypass biometrics and steal private passkey data.
Amgen Reports Theft of Patient and Corporate Data via Third-Party Cloud Breach
Biopharmaceutical leader Amgen disclosed a material cybersecurity incident involving compromised external cloud storage and the theft of sensitive PHI.
Attackers Exploit N-able N-central Patch Bypass for Admin Access
A flaw in an incomplete security fix allowed unauthenticated administrative access to RMM servers, enabling pivots to managed endpoints.
IBM: AI Governance Gap Drives Global Data Breach Costs to Record $4.99 Million
A critical lack of technical access controls for AI systems contributed to a 12% surge in the average cost of data breaches.
INC Ransomware Weaponizes SonicWall SMA 1000 Zero-Day Chain for Root Access
Attackers are chaining SSRF and code injection flaws to bypass authentication and compromise corporate networks globally.
N-able N-central Auth Bypass Grants Attackers 'God-Mode' Access to Managed Endpoints
A flawed patch for a previous vulnerability allowed attackers to seize administrative control of RMM servers and pivot into customer environments.
Cyberattack Exposes Data of 31,000 Entities in Liechtenstein Ownership Register
A major breach of the nation's anti-money laundering infrastructure has compromised sensitive data on thousands of legal entities.
India's Average Data Breach Cost Hits Record ₹25.5 Crore in 2026
Rising cyberattack complexity and gaps in AI governance drive cybersecurity costs to an all-time high for Indian organizations.
Amgen Reports Data Breach After Hackers Target Third-Party Cloud Systems
The biotechnology giant confirmed that threat actors stole proprietary corporate data and patient health information.
Amgen Reports Data Breach After Third-Party Cloud Systems Compromised
Pharmaceutical giant Amgen disclosed the theft of proprietary corporate data and sensitive patient health information following a vendor-side security failure.
N-able N-central Bypass Gave Attackers 'God-Mode' Access to MSP Clients
A flawed initial patch for a critical RMM vulnerability allowed attackers to seize administrative control of management servers and pivot into customer endpoints.
Hugging Face Diffusers Flaws Bypass Security Safeguards to Allow Arbitrary Code Execution
Three high-severity vulnerabilities in the diffusers library enable attackers to run malicious code on machines loading crafted AI models.
ExfilSquad Leaks Data of 135,000 UK Police and 600,000 Education Records
A massive cyberattack on the Police National Legal Database and Department for Education exposes sensitive personnel and government data.
Origin Energy Data Breach Exposes 900,000 Australian Customers
A July 2026 security failure at one of Australia's largest energy retailers compromised personal and financial data.
Iranian-Linked Cyberattacks Disrupt Water Utilities Across Seven U.S. States
Federal agencies tie a broad campaign targeting industrial controllers to Iranian hackers, sparking a public dispute over attribution.
Huntress Analysis: Post-Exploitation Tactics After SQL Injection
Investigation reveals how attackers reshape Windows environments to ensure persistence and deploy fraud modules after an initial breach.
Love, Bonito Under Regulatory Probe After Customer Data Breach
Singapore's PDPC and CSA are investigating the fashion retailer after a website vulnerability exposed personal and partial payment data.
Hackers Steal 607,000 Professional Records from UK Department for Education
A breach of the DfE's help desk and Turing Scheme portal has exposed the contact details of thousands of educators and government officials.
Analog Devices Confirms Data Breach and File Exfiltration
The semiconductor giant disclosed unauthorized access to internal systems in a recent SEC filing.
Absolute Dental and MSP Judge Consulting Settle Data Breach Lawsuit for $3.3 Million
A 2025 security failure affecting 1.2 million people highlights the growing legal liability for managed service providers.
Chrome to block policy-installed extensions from hijacking New Tab page
Google is developing a security update to stop malware from using enterprise policies to force search engine redirects.
Pismo Beach Man Arrested for Vandalizing Flock Surveillance Cameras
Marcus Bee faces $30,000 bail after destroying three automated license plate readers in California.
Anthropic Deploys Claude Mythos to Hunt Software Flaws via Project Glasswing
A new frontier AI model has identified over 10,000 critical vulnerabilities, prompting a restricted partnership to prevent industrial-scale exploits.
OnePoint Patient Care Settles 1.7 Million Patient Data Breach for $2.1 Million
The hospice-focused pharmacy will resolve a class action lawsuit following an August 2024 network intrusion.
Analog Devices Confirms Data Breach and File Exfiltration
The Massachusetts semiconductor leader detected unauthorized system access on June 23, 2026, though core operations remained stable.
South Korea Fines Coupang Record $409 Million Over Massive Data Breach
The e-commerce giant faces a historic penalty after a breach exposed the personal data of 33.67 million users.
FTC and States Sue Hims & Hers Over Health Data Leaks and Deceptive Billing
The telehealth provider faces allegations of sharing sensitive patient data with advertisers and using 'dark patterns' to trap subscribers.
North Korean Actors Use macOS Malvertising to Drain Crypto Wallets
Threat actors linked to the 'Contagious Interview' campaign are using fake security updates to trick Mac users into installing crypto-stealing malware.
Bankrupt Trucking Giant Yellow Faces Backlash Over 15-Month Data Breach Silence
The former freight carrier waited over a year to notify victims after sensitive personal data was accessed by unauthorized actors.
Security Gaps in AI 'Harnesses' Expose Enterprises to Systemic Risk
Researchers find that critical vulnerabilities in the software frameworks surrounding AI agents create dangerous trust misalignments.
Hardware Leaks: How Side-Channel Attacks Steal Secrets via Physical Clues
Cybersecurity researchers warn that hardware physical implementations, not just software flaws, are creating critical security vulnerabilities.
Global Data Breach Costs Hit Record Highs as Infrastructure Risks Mount
IBM's 2024 report reveals a surge in the financial impact of cyberattacks, with Canadian organizations facing costs well above the global average.
UK state investment agency exposed official data in security lapse
A staff member's failure to follow security protocols left high-level management data and personal details of 51 officials public for 40 hours.
UK Department for Education Confirms Breach of 607,000 Records
Hacking group ExfilSquad targeted government portals to exfiltrate personal data of school leaders and officials.
AI-Enabled Breaches Now Account for 25% of Global Cyberattacks
Enterprises are pivoting toward identity security and behavioral detection as AI shrinks breach breakout times to under 30 minutes.
Fresno County Social Services Breach Exposes IHSS Client and Provider Data
Unauthorized access to the In-Home Supportive Services program compromised sensitive information for over 1,100 individuals.
DC Public Schools Investigates Cybersecurity Breach After Student Data Exposure
The district is reviewing security systems after a breach potentially leaked student names, addresses, and birthdays.
Coupang Hit With Record $409 Million Fine and $1.17 Billion Compensation After Breach
The South Korean e-commerce giant faces massive liabilities after an insider breach exposed tens of millions of users.
No Evidence of Data Breach at Werth Wealth Management
Investigation into claims of a security incident and lawsuit involving the financial firm reveals no official reports or corroborating evidence.
Adform Supply Chain Attack Swaps Crypto Wallet Addresses on Customer Sites
Attackers compromised a shared JavaScript file to divert Bitcoin, Ethereum, and Tron payments to malicious wallets.
Comcast Settles Xfinity Data Breach Lawsuit for $117.5 Million
Millions of customers can now file claims following a 2023 cyberattack that exposed personal data.
Paidwork Data Breach Exposes Banking Details of 23.3 Million Users
A massive leak of financial and personal data from the gig economy platform puts millions of freelance workers at risk of fraud.
Microsoft Links Hotel Wi-Fi Hijacking Campaign to Russian-Linked Storm-2945
The 'CaptiveCrunch' operation leverages compromised hospitality networks to deploy surveillance malware via fake software updates.
Adobe Patches Critical CVSS 10.0 Remote Code Execution Flaw in Campaign Classic
A maximum-severity authorization vulnerability allows attackers to execute arbitrary code without user interaction.
Coupang Ordered to Pay Damages in First Ruling Over 34 Million-User Data Breach
A consumer mediation panel set a 100,000 won benchmark for damages after a former employee leaked sensitive user data.
Singapore Retailer Love, Bonito Warns of Scam Risks After Data Breach
The fashion brand notified customers of exposed personal and partial payment data following a website security vulnerability.
South Korean Regulators Suspend Lotte Card After Massive Data Breach
Lotte Card faces a six-week ban on new card issuance and a 5 billion won fine after leaking data of nearly 3 million customers.
Cyber Experts Warn Against Password Reuse as Data Breaches Expose Millions
Security officials urge the adoption of MFA and breach-monitoring tools to combat the rise of automated credential-stuffing attacks.
UK MoD data breach exposed 18,500 Afghans; super-injunction hid failure
A parliamentary inquiry reveals a 'foreseeable systemic failure' that endangered allies and cost taxpayers £850 million in remedial efforts.
AI Agent Security Dominates Cybersecurity Seed Funding in Q2 2026
Seed valuations hit record highs as investors pivot toward securing autonomous agentic systems.
Healthcare Data Breaches Average $9.77 Million in 2024
The medical sector remains the most expensive industry for cyberattacks, with breach costs nearly double the global average.
Analog Devices Confirms Data Breach Amid ExfilSquad Extortion Threats
The semiconductor giant is managing a confirmed system breach and separate claims of data theft by a hacking group.
Cybersecurity Shifts from IT Checklist to Core Deal Driver in M&A
Undetected breaches are transforming corporate acquisitions into massive liabilities, forcing a shift toward rigorous technical due diligence.
Sixth Circuit to Rehear En Banc Challenge to FCC Data Breach Rules
A full panel of 13 judges will review whether the FCC illegally bypassed a congressional nullification of telecom data rules.
Adform Supply Chain Attack Hijacks Crypto Wallets via Ad Script
A compromised JavaScript delivery script from advertising firm Adform was used to swap cryptocurrency addresses on user clipboards and screens.
Questo Data Breach Exposed SSNs and Financial Data; Notification Delayed 9 Months
The city exploration platform faced a critical security failure, leaving sensitive user data exposed for nearly three quarters of a year.