Data Breaches Digest - Week 30 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 20th July and 26th July 2026.

20th July

271 million Uber Eats and Starbucks records surface on hacker forum: Should you be worried?

Australia: Crypto scam losses of $1.47 million in five days sparks Queensland police alert to new phishing threat

Chinese police repatriate key suspect in phishing and Trojan virus case from Vietnam

Community College of Beaver County (CCBC) Data Breach Exposes Social Security Numbers and More

Craneware confirms data breach after cyberattack

Craneware Confirms Data Breach, Employee Records Among Exposed Data

Craneware reveals cyber attack with employee and customer data stolen

Critical ServiceNow code execution flaw now exploited in attacks

Cruciferra Crypter Uses Process Ghosting to Evade Detection

CVE-2026-42533 Exposes Critical Pre-Auth nginx RCE Flaw

Cyberattack hits Coca-Cola's $4 billion dairy brand, suspends US production

Cyberattack pauses Fairlife’s production, working to learn about impact on Webster plant

Data breach hits well-known AI company: ‘Sorry for any disruption’

Don’t run into these ‘Gentlemen’. More on this Ransomware gang

Edinburgh-based healthcare firm 'hit with cyber attack' as hackers steal data

Ernst & Young Data Breach Affects Personal, Financial Information

Ernst & Young data breach exposes personal and financial information of tax clients

Ernst & Young reveals data breach following hack on support system

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

Fairlife Ransomware Attack Hits Production Systems, U.S. Operations Suspended

Fairlife shortage looms after ransomware hits Coca-Cola plants

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case

Governments Weigh Ransomware Payment Bans as Hackers Grow Bolder

Hacker stole from Steam users for years, got caught because he ordered food online

Hacker wipes European country’s entire land registry database, paralyzing real-estate market

Hacker wipes Romania's entire land registry database

Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

Hackers Are Hiding Invisible Text in Phishing Emails to Fool AI Security Tools

Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies

Hackers were inside South Korea's diplomat training system for 9 months

Health tech firm Craneware admits “significant volume” of customer and employee data exposed in cyber attack

Health tech firm Craneware says customer and staff data stolen in cyber attack

Healthcare phishing breach exposes SSNs, medical records for 15 months

Healthcare ransomware attacks up 14% in first half of 2026

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel

Hugging Face breached by autonomous AI agent

Hugging Face confirms breach affected internal datasets and credentials, urges users to take action

Hugging Face Hacked in Autonomous AI Attack

Hugging Face warns an autonomous AI agent hacked its network

Identity-based attacks overtake software flaws as leading ransomware entry point

India: Data breach exposes documents tied to Kudankulam nuclear plant expansion

India says allegedly leaked nuclear plant files pose no safety risk

Information Commissioner Notified After Data Breach Concerns At Former West Sussex County Council Buildings

Italy fines WINDTRE €1.7 million over security flaws behind two data breaches

Jadepuffer: Agentic attack evolves to destroy AI models

JadePuffer Returns With Ransomware Designed to Wipe AI Models

Kenya restores presidential website after cyber attack

Kenya’s Presidential Website Hit by Cyber Incident, Government Says No Data Was Stolen

Kentucky included in settlement with 23andMe following 2023 data breach

LG Monitors Spotted Installing Adware-Like App on Windows PCs

Mythos Didn't Break Your Security Program. Your Exposure Window Could

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

New X phishing scam uses fake login alerts to steal your account

One threat that infiltrated the ANC, Anglo American, Mediclinic, South African Airways, and Pick n Pay

Paidwork breach exposes sensitive data of 23 million user

Paidwork Data Breach Exposes 23 Million User Records, Have I Been Pwned (HIBP) Says

Plugging an LG monitor into a Windows computer installs a potentially unwanted program

Police Chiefs Cite Transport for London (TfL) Hack in Push for Cybercrime Risk Orders

Ransomware attack disrupts fairlife’s US production

Ransomware attacks hit SMBs harder than ever as cybercrime gang rivalry heats up

Ransomware detections on Indian SMBs is on the rise

Researchers Build WordPress Exploit Using OpenAI's GPT

Romania races to restore land registry after cyberattack disrupts property market

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

Software provider to more than 2,000 US hospitals says hackers stole employee and customer data

South African industrial giant that makes chemicals targeted by one of the world’s most notorious ransomware groups

South Carolina will receive $280,000 in 23andMe settlement after data breach

Thailand: Base-education hacker arrested in Phuket

The Gentlemen deploys new malware to take control of systems before encryption

The New Cyber Frontier: Ransomware Surges as AI Deepfakes Expose Corporate Vulnerabilities

The Odyssey piracy scams surface hours after its theatrical debut

The Rise of Calendar Phishing

The Windows 10 hangover is becoming a security problem

Threat Actors Allegedly Listed Starbucks Data on Hacker Forums

U.S. court seizes $8.37 million in crypto from ransomware negotiator accused of aiding hackers

U.S. Prosecutors Charge Russian Trio in Cybercrimes Causing More Than $62 Million in Losses

United Arab Emirates: Dubai Police Warns Against Online Scams Promising Work and Visit Visas

Unpatched SharkNinja flaw turns vacuum cleaner into a spy, reveals house maps, WiFi passwords

Why Security companies can’t create an invincible Vaccine against Ransomware

WordPress Critical RCE Security Flaw a Threat to Millions of Websites

WordPress urges immediate update: hackers are gaining full control with a critical exploit

World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent

wp2shell: The Unauthenticated WordPress Exploit That Needs No Login, No Plugins, Just a Vulnerable Core

X users are being hit by fake login alerts: the phishing emails look real

Zero-Day Hack Exposes South Korean Diplomatic Academy to Massive Data Breach

Ransomware Operator Claims - Week 28 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 6th July and 12th July 2026, kindly assisted by our partners.

DBD discovered and researched 164 Ransomware Victims over 41 Countries and Islands claimed by 35 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 29 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 13th July and 19th July 2026.

19th July

Apple Faces Class-Action Lawsuit Over Alleged Hide My Email Security Flaw

Colombia's energy giant Ecopetrol says hackers stole data from 3,300 accounts, demanding ransom

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

FortiBleed: 74,000 Admin Credentials Cracked From Devices That Were Already Patched

Hackers abuse ViPNet software to target Russian government agencies

Hackers breach Clover Health employee accounts

Hackers Just Pulled Off Every Food Manufacturer’s Worst Nightmare. Now Coca-Cola’s $4-Billion Dairy Brand Is Shut Down

How ransomware tactics against law firms are changing

Identity Compromise Overtakes Vulnerabilities As Primary Ransomware Attack Vector

JadePuffer: World’s ‘first AI ransomware’ capable of autonomous attacks

Kenya investigates breach of president's website

Mount Royal University continues ransomware attack investigation

Ohio woman charged in phishing scam that cost Southern Door schools nearly $68K

Ohio’s Biggest Senior Care Network Confirmed a Data Breach - and the List of Stolen Information Is Long

Self taught Thai hacker learned the trade to access police data systems and wipe his own arrest warrants

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

UK: Top cyber security expert issues terrifying Russian hacker warning - 'when not if'

WannaCry Ransomware: Infection, Impact, and Prevention

18th July

81% of Ransomware Attacks in India Now Originate from Compromised Identities

AI speeds ransomware, forcing firms to focus on recovery

Coca-Cola suspends production at its Fairlife dairy after a ransomware attack

Coca-Cola Suspends U.S. Fairlife Production Following Ransomware Attack

Colombia's Ecopetrol says cyberattack stole data tied to 3,300 accounts

Cyber Assault on Ecopetrol: Data Breach Shakes Energy Giant

Ecopetrol Faces Cyberattack Impacting 3,300 Accounts

Email Security in the Age of AI-Generated Phishing Attacks

Ernst & Young Data Breach Exposes Social Security Numbers

Ernst & Young (EY) Data Breach - Hackers Access Third-Party IT Support Platform and Steal Client Tax Documents

Finland issues arrest warrant for hacker who extorted thousands of therapy patients

Healthcare data is now more valuable to cybercriminals than credit card details

Instructure Paid the Ransom. ShinyHunters Leaked the Data Anyway. 275 Million Students Exposed

Medical giant Abbott investigates two cyber incidents as ShinyHunters claims breach

Microsoft warns of surge in ACR Stealer attacks on customers

New Spirals Ransomware Uses IIS Web Shell and PsExec to Encrypt IT Firm in Under 24 Hours

Nigerian Bar Association (NBA) presidential election disrupted by cyber attack

Not the first data breach at Kudankulam: Recalling 2019 cyberattack that targeted thorium info

South African company that books flights for agency in R29.6-billion government department hit by ransomware attack

The Gentlemen Ransomware Tops Qilin: June 2026

Two new high severity WordPress vulnerabilities, patch immediately!

Update now: 7-Zip fixes RCE flaw exploitable with malicious archives

WordPress Core "wp2shell" RCE flaws get public exploits, patch now

ZenPatient Discloses Data Breach Spanning from December to February

17th July

23andMe Agrees to $18 Million Settlement With 43 States Over 2023 Data Breach

23andMe Faces New Security Mandates in $18 Million Data Breach Settlement

23andMe will pay $18 Million to settle claims over massive data breach

79% of ransomware attacks start with stolen identities

A ransomware attack hits Coca-Cola where it hurts

Abbott probes two cyber incidents amid extortion claims

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

Alabama: River Bank & Trust investigating cyberattack

All About Women’s Care Data Breach Affects Up to 12,000 Patients

An Alleged Russian FSB Hacker Traveled To Thailand. Now He's Facing 10 Years In A US Prison

Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man

Asia, Europe: Phishing campaign targeting manufacturing facilities uncovered

Attackers hide random text in phishing scams by setting font size to zero to confuse AI powered email defenses

Bangladesh: 'Hacker' arrested over National Board of Revenue (NBR), Chattogram Port system breach to facilitate smuggling worth crores

Barracuda warns of AI-era resurgence in ‘text salting’ phishing attacks

Bath Fitter Data Breach Exposes Social Security Numbers

Best Practice not linked to Partnered Health cyber attack

Beware of New Tactics of Digital Extortion in Crypto

'Biggest election data breach ever': Trump accuses China of hacking US voter records

Brazilian Government Sites Hijacked in Sweeping Cyber Attack Targeting Banks

British-Bangladeshi hacker jailed over cyberattack that crippled London transport

British-Bangladeshi hacker, accomplice jailed over cyberattack that brought London to a standstill

Chicago-based Fairlife pauses US production after ransomware cyberattack breaches milk brand systems

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to Known Exploited Vulnerabilities (KEV)

CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities

CISA urges immediate action on actively exploited Fortinet flaws

ClickFix Attacks Drive UAC-0145 Cyber Campaigns, CERT-UA Warns

ClickLock Mac Malware Traps Users in a Three-Day Password Loop

Coca-Cola confirms ransomware attack as Fairlife US production halts

Coca-Cola dairy subsidiary pauses operations following ransomware attack

Coca-Cola discloses ransomware attack disrupting fairlife production in the US

Coca-Cola halts Fairlife production across US after ransomware attack

Coca-Cola pauses production of Fairlife milk and other drinks after cyber attack

Coca-Cola Says Fairlife Halts US Production After Cyber Attack

Coca-Cola says Fairlife unit halts US production after cyber attack

Coca-Cola shuts down Fairlife dairy production lines following ransomware attack

Coca-Cola Suspends Fairlife U.S. Production After Ransomware Attack

Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack

Coca-Cola-owned dairy firm forced to shut down production due to cyber attack

Coca-Cola's $4 billion dairy brand forced offline after data breach

Coca-Cola's dairy company Fairlife hit with a ransomware attack

Coca-Cola's Fairlife dairy is halting U.S. production after a ransomware attack

Coca-Cola’s Fairlife dairy subsidiary hit by ransomware attack, suspending US production

Coca-Cola's Fairlife halts US production following ransomware incident

Coca-Cola's fairlife suspends US dairy production after cyber attack

Critical Notepad++ Bugs Could Lead to Code Execution, Patch Available

Critical Zoom Flaw Could Let Attackers Take Over Windows Accounts

Cyber Crooks Milk Atlanta's Coca-Cola as Fairlife Halts U.S. Output

Cyber Turbulence: Denver’s Frontier Slammed With Twin Data-Breach Suits

Cybercriminals Use Stolen Keys: 81% of India’s Ransomware Attacks Start with Stolen Identities

Dairy company Fairlife suspends production in US after cyber incident

Department of Justice (DOJ) Indicts Three Russians Who Shielded Major Ransomware Groups From Takedowns

Donald Trump accuses China of "the largest cyber attack on electoral data in history" during his speech addressed to the nation

Ecopetrol blocks ransomware attack after unauthorized access to data from 3,300 user accounts

Ernst & Young: data breach via third-party support system

Ernst & Young data breach exposes client tax information

Ernst & Young discloses data breach after support system hack

Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets

Ernst & Young LLP (EY) Data Breach - Hackers Gain Access to IT Support System and Download Documents

Ernst & Young vendor exposes sensitive client tax records, company says

Evian, Silk, International Delight maker Danone hit by Qilin ransomware gang

Fairlife Cyberattack Shuts Down U.S. Production: What Dairy Producers Need to Know About Ransomware

Fairlife pauses US production after cyberattack breached milk brand's systems

Fairlife pauses US production of milk after cyber attack

Fairlife Ransomware Attack Stops All US Milk Production

Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images

Fake TrueType Font (TTF) files deliver stealthy malware in global phishing campaign

FBI arrests man accused of using Steam games to drain victims’ crypto wallets

Fraud Alert: AI Is Turning Anyone into a Hacker - Five Eyes Alliance Warns

Frontier Airlines Sued Twice After Data Breach Hit 11,482 People - Ransomware Gang Claims Credit

Frontier Airlines sued twice for weak cybersecurity after data breaches

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

Government Agencies Falling Victim to Ransomware Daily

Hacker puts data of more than 51 million Badoo users up for sale

Hackers Breached an IIS Server and Deployed Ransomware Across the Network the Next Day

HMC Fresh Foods Data Breach: Sensitive Information Exposed

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

Inc Ransomware Exploits SonicWall SMA Zero-Days

India: Kudankulam Nuclear Plant Data Breach Files Leaked

Inter-Con Security Data Breach Potentially Compromised Sensitive Personal Information

Italy fines WINDTRE €1.7 million over data breaches

Kaspersky has detected a multi-stage phishing attack targeting manufacturing facilities in Europe, Asia and the Middle East

LastPass and Bitwarden users flooded with fake compliance emails

Lawsuit Claims June 2026 Data Breach Leaked Private Information Of 2.4 Billion TikTok Users

Lawyers say Russian tourist detained in Armenia over mistaken identity in ransomware case

Madera Hospital Data Breach Compromises PHI and PII

Massive Data Leak in Kudankulam Nuclear Power Plant: 1.2 TB Data About Plant's Blueprint, Supplier Details Leaked on Dark Web...Is Reliance to Blame?

New ClickLock macOS Stealer Kills Every App to Force Password Entry

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

New Windows LegacyHive zero-day gives hackers admin privileges

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Notorious 1990s hacker held over €100 million-a-month fraud ring

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

Phishing: Fake TTF files distribute malware

Prompt injection is becoming the XSS of the web agent era

Qantas Cleared of Formal Privacy Probe After Massive Customer Data Breach

Qantas Escapes 5.67 Million Customer Data Breach Probe - What Others Are Missing About the Airline Cyber Security Decision

Ransomware and Third-Party Risks Drive Record Financial Losses

Ransomware Attack Disrupts Fairlife's US Dairy Production Operations

Ransomware attack forces Coca-Cola to suspend US production at dairy unit

Ransomware attack halts Coca-Cola’s Fairlife US milk production

Ransomware Attack Halts Production at Coca-Cola’s Fairlife Dairies

Ransomware Attack on Coca-Cola-Owned Fairlife Halts Production Across the United States

Ransomware Attacks up 20% Year-Over-Year

Ransomware curdles production at Coca-Cola's Fairlife dairy business

Ransomware Uses AI to Amp Up Negotiations

Rochester-area Fairlife facility pauses production after company impacted by cyberattack

Romania: Data stolen in a cyber attack from the National Cadastre Agency, put up for sale on the internet

Romania: The hacker 'ByteToBreach' breached the National Agency for Cadastre and Real Estate Publicity (ANCPI) servers, causing a massive data leak. He stated that the attack had financial motives and apologized for the problems caused

Russian spies hunt targets via exposed European cameras: 87,000 found vulnerable

Scammers weaponize FaceTime to drain bank accounts

Secureholiday Data Breach Leaves Thousands of Campers Defrauded, Victims Report Major Losses

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Sexual Assault Centre Kingston faces cyber attack

Sophos State of Ransomware Report: A Step Ahead of Attackers

Spirals Attackers Disable Windows Defender and Kill Backup Services Before Encrypting Systems

Spirals ransomware locks down victim systems in under 24 hours

Stolen identities cause 79% of ransomware attacks

The AI Ransomware That Couldn’t Get Paid

The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat

The Gentlemen tops ransomware rankings in Q2 review

The script, not the voice, is what makes AI voice phishing work

TriWest Healthcare confirms data breach affecting 12,000 TRICARE beneficiaries

Trump Accuses China Of Election Data Breach In Televised Address

Trump Accuses China of the "Largest Data Breach of Election Information in History"

“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware

Two Scattered Spider hackers sent to prison over London attack

UK publishes government data breach response framework

UK-Bangladeshi hacker, accomplice jailed over London cyberattack that cost nearly $40 million

US Charges Two Over $43 Million Chinese Money Laundering Operation

US charges two over laundering $43 million from investment fraud

US companies face rise in cyber attacks

Uzbekistan Targeted in xplogs22 Phishing Campaign

White House releases documents alleging Chinese election data breach

Widow loses nearly $1 Million after falling for AI deepfake video of Canadian prime minister

Zoom Patches Critical Windows Flaw Enabling Account Takeover

16th July

23andMe to pay $18 million in new genetics data breach settlement

AI Can Find Bugs, But Human Knowledge Still Proves Them

AssuranceAmerica Data Breach Exposes Driver’s License Numbers and Insurance Data for Nearly 7 Million People

Attackers execute a complete ransomware operation in under 24 hours

Attackers keep using GitHub to distribute malware

Attacks Surge as Two Ransomware-as-a-Surface (RaaS) Groups Battle for Dominance

Australia: Bassendean food supplier caught up in cyber attack

Australia: Cardiff GP Clinic affected by cyber attack

Australia: Information of patients hacked in breach that hit medical company's clinics

Australia: Patient health records exposed in Noosaville data breach

Australian GP network hit in data breach

Australian patients’ medical records could be sold on dark web after clinics’ data breach

Campers exposed in Secureholiday data breach defrauded, thousands of dollars lost

Canadian fugitive wanted in Desjardins data breach investigation arrested in Mexico

Cayman Islands a top target for phishing scams

Chaos Ransomware: BlackSuit-Linked RaaS Resurgence and Detection Opportunities

CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance

CISA orders feds to patch actively exploited Oracle flaw by Saturday

Claude Chrome extension flaw lets malicious extensions trigger AI actions

Claude for Chrome Flaw Puts Gmail at Risk From Rogue Extensions

ClaudeFix Campaign Abuses Shared Claude Chats to Deliver MacSync Stealer

Coca-Cola says Fairlife halts US production after cyber attack

Coca-Cola says Fairlife ransomware attack halts US dairy production

Coca-Cola suspended production at its Fairlife dairy after a ransomware attack

Companies keep getting breached by vulnerabilities they already knew about

Critical NGINX vulnerability discovered: hackers can attempt to crash servers or even gain code execution

Critical Zoom for Windows vulnerability allows hackers to hijack accounts without a password

Cyberattack on Japan's largest cold-chain operator disrupts KFC, supermarket supplies

Dairy company owned by Coca-Cola hit by ransomware attack

Data breach exposes files linked to India's Kudankulam nuclear plant

Data breach reportedly targets India’s Kudankulam nuclear power plant

Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor

Department of Justice (DOJ) Charges Russians Who Ran Hosting Infrastructure for LockBit, Cl0p, Play

Dutch Police Arrest Key Suspect in €100 Million Global Crypto Investment Scam

Electronic Frontier Foundation (EFF) warns that feds can snoop on your smartwatch data, and vendors won’t share where and when

Files relating to India’s largest nuclear power plant exposed in data breach

Files relating to India’s largest nuclear power plant Kudankulam exposed in data breach

Final suspect in Desjardins data breach case arrested in Mexico

Finance phishing works because it sounds boringly normal

Fraudulent Ads Generate 304 Million Impressions Across Europe in Under One Month

Global Special Operations Forces Foundation Data Breach Affects Exposes Medical Information

Google Sues Chinese AI “Phishing Phactory”

Hacker Abused Google Gemini CLI to Run Botnet, Automate C2 Migration and Support Cyber Operations

Hackers who livestreamed £29 million Transport for London cyber attack jailed

How ‘text salting’ confuses AI-powered email defenses

India: Data breach at Kudankulam plant rings alarm bells on cybersecurity of critical infrastructure

India: Kudankulam Nuclear Power Plant Files Exposed In Data Breach

India nuclear power plant data breach exposes blueprints and supplier files

Industrial-Scale Cyber Fraud Expands in the Philippines; Phishing Websites Surge 423%

Industrial-scale phishing and cyber fraud reshape the security landscape in the Philippines

‘Keys to the kingdom’: hackers who gained access to heart of London transport network jailed

Kirbor Homes Data Breach Exposes Social Security Numbers & More

Kratos Phishing-as-a-Service (PhaaS) Attacking Microsoft 365 Users Across the US, Europe to Steal Credentials

Kratos Uses Cloudflare Turnstile, Obfuscated Login Pages, and PHP Endpoints to Exfiltrate Credentials

MacOS users, beware: newly discovered stealthy stealer requires no exploits

Madison Square Garden (MSG) Dodges Data-Breach Suits But Lawyer Warns Privacy Fight Isn’t Over

Mexican authorities arrest Quebec fugitive linked to Desjardins data breach, police say

Modular macOS Stealer Uses Kill Loops to Force Password Entry

Morris Communications Data Breach: 84GB Stolen Exposing Personal Information

Most Cybersecurity Incidents Stem From Known Vulnerabilities

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

New ClickLock macOS malware traps users into revealing login password

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

New IoT Botnet Uses 1,496 Default Passwords and Seven Persistence Mechanisms

New OkoBot framework deploys 20 payloads to steal data, crypto

New Spirals ransomware encrypts victim network in under 24 hours

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Nichirei Cyberattack Hits KFC Japan, Disrupts Frozen Food Supply

None and done? KittyKatKrew’s short-lived ransomware play

Notorious Israeli hacker suspected in massive investment fraud

Nuclear Power Corporation of India Limited (NPCIL) Clarifies Kudankulam Plant Data Breach Reports, Says 'Core Nuclear Systems Untouched'

Nuclear Power Corporation of India Limited (NPCIL) cyber attack explained: What was leaked in the Kudankulam data breach?

Nuclear Power Corporation of India Limited (NPCIL) denies sensitive data breach at Kudankulam nuclear plant, says leaked files involve only conventional systems

OkoBot malware targets hardware wallet users with recovery phrase phishing

OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data

Once hunted by the FBI, Israeli hacker ‘The Analyzer’ faces major European fraud probe

Partnered Health: Delay in cyber attack notification ‘not acceptable’

Partnered Health confirms dozens of clinics potentially compromised by cyber attack

Partnered Health Cyberattack Exposes Patient Data Across Australia

Phishing Campaign Hides Lua Loader as TrueType Font File

Phishing campaign uses e-cards to trick users into installing remote management software

Phishing Scheme Targets Massachusetts Homeowners With Fake Zoning Fee Demands

Police take down investment fraud network that stole €100 million a month

Qantas data breach started with a fake IT support call

Qantas Did Everything “Right” - And Got Breached Anyway. Regulators Say That’s the Point

Ransom demands are down, email is the top way attackers get in

Ransomware Attack Halts Milk Production at Coca-Cola's Fairlife Brand

Ransomware attacks more likely to start with stolen identity than software flaw

Ransomware attacks on healthcare jump 14%

Ransomware Attacks Surge Amid Growing Qilin-The Gentlemen Competition

Ransomware Breach Exposes India's Nuclear Plant Data: A Security Catastrophe in Waiting

Ransomware Gangs rebrand to avoid detection from Law Enforcement

Ransomware Group Leaks 19,000 Kudankulam Files From Reliance Server, Nuclear Power Corporation of India Limited (NPCIL) Denies 'Sensitive' Breach

Ransomware group leaks data stolen from India’s largest nuclear plant

Ransomware Uses AI To Amp Up Negotiations

Reading between the lines of a cyber insurance policy

Reliance and Kudankulam Nuclear Power Plant data breach: What we found on the dark web

Romania’s land registry hit by cyber attack, data allegedly for sale

Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes

Russian hacker turns Gemini CLI into a hacking agent, creates small-scale botnet

Russian hackers trojanize WebEx, Zoom apps to push Starland malware

Russian Phishing Campaign Targets Messaging App Users to Steal Recovery Keys and Take Over Accounts

RustDuck Malware Makes Case for Security-By-Design

Sandworm hackers have a CAPTCHA trick for Ukrainians

SANS Warns of AI Governance Gap as Use by Security Teams Surges

Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack

Scattered Spider members behind Transport for London (TfL) hack get five years in prison

Scattered Spider members jailed over Transport for London hack that cost £29 million

"Selfish Bravado" Behind Transport for London (TfL) Cyber-Attack, Judge Says as Pair Jailed

Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim

Spirals: New Stealthy Ransomware Deployed Against Asian IT Company

Stealthy Daxin Malware Hijacks Legitimate TCP Connections to Evade C2 Detection

Tech support scam caused massive data breach at Australian airline Qantas

Teen hackers who live streamed cyber-attack on Transport for London (TfL) jailed

Teenagers jailed for £39 million cyber attack on Transport for London

Tech support scam caused massive data breach at Australian airline Qantas

The Biggest Data Breaches of 2026 So Far, Ranked by Impact

Transport for London (TfL) Scattered Spider hackers jailed after cyber attack

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million Transport for London (TfL) Hack

Two Scattered Spider Hackers Sentenced to Jail in UK

Two Scattered Spider Members Sentenced to 5.6 Years Over Transport for London’s (TfL) Cyberattack

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management

US Sanctions First VPN in Crackdown on Ransomware Criminals

Vision Care Providers Settle Data Breach Class Actions

What the World Food Programme (WFP) cyber-attack has in common with visa scandals

White House’s Gold Eagle a Good Start, But the Need is Fixing Vulnerabilities

Who are the young cybercriminals behind the £39 million Transport for London (TfL) hack?

You Can’t Secure a Ship Like a Laptop

YouLend US Data Breach Exposes Sensitive Personal Information Including SSNs

Young hackers jailed for devastating £39 million Transport for London (TfL) cyber attack

Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

15th July

23andMe reaches $18 million settlement with states for massive breach

74% of Organizations Remediate Vulnerabilities Within a Week

858,000 Files and Confidential Blueprints: Inside Data Breach at India's Largest Nuclear Plant in Tamil Nadu's Kudankulam

AI used to help plan the break-in, now it’s doing the break-in

AI-driven bug hunting fuels record Microsoft Patch Tuesday

AI-Powered Phishing Kits Fuel 1,380% Surge in Attacks Targeting Microsoft 365

Amazon Web Services (AWS) retools Security Hub for AI and multicloud threats

Americans are ignoring scam calls, but phishing emails still fool many

An AI overthinking attack can tie a robot up for over a minute

Apple Warns Millions of iPhone Users: FaceTime Scams Are Spreading

AsyncAPI npm packages infected with credential-stealing malware

Australia: Medical records and personal details stolen in GP network cyber attack

Australia: Tax and superannuation data allegedly stolen in data breach

Australia-India Partnership on Cyber, Critical Technologies and Supply Chains (PACTS) to Deepen Cybersecurity and Tech Collaboration

Britons told to stockpile food and water in case of Russian cyberattack

CISA Adds SonicWall SMA1000 Vulnerabilities to KEV Catalog Following Active Exploitation

CISA warns admins to patch actively exploited SharePoint flaws

ClickFix is changing the economics of social engineering

CMMC Assessment Pause Leaves Defense Contractors Facing a New Risk

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks

Critical Data For India’s Largest Nuclear Plant Exposed In Massive Breach

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

Cyber insurance now covers more than 95% of data breach losses

Data Breach At India's Biggest Nuclear Plant: 19,000 Files Exposed On Dark Web, Anil Ambani’s Reliance Group Confirms 'Leak'

Data Breach Exposes Files Linked to India’s Largest Kudankulam Nuclear Power Plant

Dutch police bust investment fraud ring stealing over €100 million

Dutch police dismantle global crypto investment scam, arrest alleged mastermind

Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass

Engineering The Internet For Resilience

EtherHiding Attack Hides ClickFix Payload Infrastructure Inside Polygon Blockchain

EU sanctions Trickbot boss ‘Stern’ over $300 Million in ransomware payments

Everything we know as Walsall hacker faces jail over Transport for London cyber attack

FaceTime Scams Impersonate Apple Support and Banks to Steal Account Credentials

Fake NVIDIA Software Distributes New LabubaRAT Malware to Hijack Windows PCs

FBI warns Kali365 phishing platform is targeting Microsoft 365 users; Floridians report $12 million in losses

Files Linked to India’s Largest Nuclear Plant Exposed in Data Breach

Files relating to India’s largest nuclear power plant Kudankulam exposed in data breach

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

First VPN administrators sanctioned by US Treasury over ransomware attacks

Fortinet Patches FortiOS Authentication Bypass and FortiSandbox Command Injection Flaws

FreeRDP 3.29.0 security update resolves 22 advisories

Google Gemini CLI abused as a hacking agent, malware botnet operator

Goose Creek data breach exposes 6.6 million customer records

Government Updates UK’s National Risk Register with Cyber Warnings

Hackers Abuse OAuth Device Codes and Entra ID Enrollment for Persistent SaaS Access

Hackers breach TRICARE West, exposing health data of thousands of US military beneficiaries

Hackers data breach patient records from one of Australia’s Largest Healthcare Providers

Hackers leak data from India’s largest nuclear plant

Healthcare ransomware attacks surge 14% amid growing cyberthreats

How Bangladesh can stop the next data breach

Identity Attacks Overtake Exploits as Top Ransomware Cause

Identity Is Now The Leading Ransomware Entry Point

India: Files relating to Kudankulam nuclear power plant exposed in data breach

India: Files relating to Kudankulam nuclear power plant exposed in ransomware data breach

India: Kudankulam nuclear power plant documents exposed in ransomware data breach

India: Kudankulam nuclear power plant’s files exposed in data breach

India: Ransomware Group Reportedly Leaks Kudankulam Nuclear Plant Blueprints

India: Reliance confirms partial data breach after hackers claim Kudankulam nuclear plant files leaked

India's biggest nuclear plant blueprints posted online after contractor refuses ransom

India’s largest nuclear power plant hit by data breach, files exposed

India’s Largest Nuclear Plant Hit by Major Data Leak on the Dark Web

India's largest nuclear plant suffers data breach, blueprints of facility leaked on dark web

India’s nuclear security under scrutiny after data breach

Iowa joins multi-state settlement over 23andMe data breach after company’s bankruptcy

Iran Exploited SS7 Mobile Network Flaws to Track US Troops, Coinciding With Strikes on US Forces

Is this the last of FirstVPN? Law Enforcement Targets Infrastructure’s Role in Cybercrime

Jalisco and OmegaLord Phishing Kits Target Microsoft 365 With MFA Bypass

Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LastPass and Bitwarden Users Targeted by Phishing Campaign

Law firm WilmerHale sued in class action after data breach

Lidl Warns Customers Over Third-party Data Breach

Loan scam phishing surges in South Korea as attackers favor messengers

Los Angeles Police Department (LAPD) sidelines relationship with license-plate reader company Flock Safety

Louisiana to get $258,668 in 23andMe data breach settlement

Loyalist College: Cyber attack confirmed

Major Cyber Attack Targets Network of GP Practices and Skin Cancer Clinics, Stolen Medical Records Confirmed

Major German bank says a third party may have been hit following claims of ransomware attack

Massive data breach at India's largest nuclear plant: Kudankulam blueprints, supplier details among 19,000 leaked files on dark web

Microsoft Fixes Record 570 Security Flaws in Biggest Patch Tuesday Ever

Microsoft July Patch Tuesday Fixes Record 570 Vulnerabilities and Three Exploited Zero-Days

Microsoft Patches 570 CVEs in Record Patch Tuesday

Microsoft patches record 570 Windows security bugs with two exploited zero days - update now

Microsoft patches record number of security vulnerabilities, citing its use of AI

Microsoft smashes Patch Tuesday record for second successive month

Microsoft Urges Windows 11 Users to Install Updates Within Three Days

Microsoft's largest Patch Tuesday ever: 570 flaws, Kerberos encryption overhaul

Microsoft’s Largest Patch Tuesday Fixes 622 Vulnerabilities, Two Under Active Attack

Minnesota Included in Major 23andMe Data-Breach Settlement

Multistate settlement reached with 23andMe for 2023 data breach

New 'Jalisco' and 'OmegaLord' Phishing Kits Advance Attack Methods, Can Bypass Microsoft 365 MFA

New Jersey to receive nearly $410K in 23andMe genetic data breach settlement

New Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat

New phishing campaign hits LastPass, Bitwarden users - password manager customers warned not to fall for this scam

Nightmare Eclipse drops 9th Windows security issue amid ongoing personal vendetta against Microsoft

North Carolina to receive $666K in 23andMe settlement over 2023 data breach

Notepad++ Security Update Patches Buffer Overflow and Updater Code Execution Flaws

OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps

Pakistan’s National CERT warns organizations over Fortinet firewall cyber intrusion campaign

Partnered Health cyber attack exposes patient medical records across clinic network

Partnered Health Data Breach Exposes Patient Records at Family Clinics

Partnered Health hack: Major health network hit in cyber attack, impacted centres named

Partnered Health hit by major cyber attack, impacted centres named

Patient records stolen in cyber-attack on Australian healthcare provider

Pennsylvania Receiving Nearly $492,000 in 23andMe National Data Breach Deal

Phishing Campaign Abuses eCards to Deploy RMM Tools

Phishing toolkits target Microsoft 365 MFA in surge

Physicians Primary Care of Southwest Florida Agrees to Data Breach Settlement

Progress Restores ShareFile Storage Zones Access After Vulnerability Exploit Concerns

PromptFiction Flaw Auto-Submitted Hidden Prompts in Claude Desktop

Protecting Manufacturers from 'Kiss of Death' Ransomware Threats

Proton VPN in its Transparency Report Says It Has Rejected All 458 Swiss Court-Approved Data Requests Since 2017

Ransomware attacks rose 20% in the first half of 2026

Ransomware Breach: Reliance's Nuclear Files Exposed

Ransomware gang posts 19,000 files allegedly linked to India's largest nuclear plant in Tamil Nadu

Ransomware group claims breach of chip design firm Synopsys, alleges access to Bosch data

Ransomware Group Claims Leak Of Files Linked To India's Largest Nuclear Plant, Kudankulam

Ransomware Hackers Dump Kudankulam Nuclear Plant Blueprints Online After Reliance Group Server Breach

Ransomware Storm: Reliance Group Data Breach at India's Largest Nuclear Plant

Researcher Drops New Windows Zero-Day Proof-of-Concept (PoC) Hours After Microsoft Patch Tuesday

Russian Hackers Are Turning Doorbell and Security Cameras Into Spy Tools to Track NATO Military Logistics, Dutch Intelligence Warns

Secure Access Service Edge (SASE) Has An AI Blind Spot. Inspecting Packets Is No Longer Enough

'Serious risk' to India's largest nuclear plant after sensitive files leaked on dark web

Singapore data breach highlights supply chain vulnerability as IBM-managed test system leaks sensitive records

Singapore SMB ransomware rate rises despite regional low

South Korea: Loan Phishing Texts Surge 162% in Q2

Spanish police dismantle €140 million cybercrime network

Suspected Chinese Hackers Use Claude Code and DeepSeek to Breach Government Systems in Three Countries

Synopsys denies data breach allegations

Sysdig Details First Fully Agentic AI Ransomware Operation JadePuffer

Teen hackers to be sentenced for massive Transport for London (TfL) cyber attack

The Agentic Insider: Why AI Tech Stacks Are the Ultimate Insider Threat

The Managed Detection and Response (MDR) renewal question: What changes when AI can handle the alerts

The State of Ransomware 2026: Payments are dropping but encryption is climbing

Threat actor impersonated hundreds of brands on GitHub to push infostealer malware

Three Russians charged with attacks on US infrastructure - $62 million in losses

Three Russians Indicted in $62 Million Cybercrime Scheme Targeting U.S. Infrastructure

Trump administration unveils AI-supported clearinghouse for cyber vulnerabilities

Trump's new AI-powered Gold Eagle will find cyber flaws at unprecedented pace - but can defenders keep up?

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

U.S. Cracks Down on Russian Ransomware Trio

U.S. Hits Ransomware Supply Chain With New Sanctions

U.S. sanctions VPN provider and cryptor seller for aiding ransomware gangs

UK: How Walsall 'bedroom hacker with no friends' caused £29 million chaos in online cyber attack

UK Households Told to Stockpile Food, Water and Medicines as Russia Cyber Attack Threat Grows

US charges alleged operators of Russian bulletproof hosting service

US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62 Million from cybercrime victims

US Indicts Russian Bulletproof Hosting Provider Media Land and Three Operators

US sanctions First VPN and its administrator for supporting ransomware attacks

US Treasury sanctions a VPN provider and its administrator for the first time

US Treasury Targets VPN Provider That Shielded Ransomware Groups for 12 Years

Vermont, New Hampshire, New York part of multistate settlement over 23andMe data breach

Washington DC: Housing Authority says systems still recovering weeks after cyber attack

Why AI Phishing Gets Four Times More Clicks

Zoom warns of critical account takeover vulnerability

14th July

5 charged in UK investigation into Russian Coms scam platform

11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

23andMe customers in dozens of states will get paid after $150M data breach settlement

23andMe settlement: Georgia joins 42-state alliance over data breach

23andMe Settles with 42 States for 2023 Data Breach

140+ Malicious npm Packages Turned Web Proxies for Students Into a DDoS Botnet

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

8,400 Phishing Domains Targeted Turkish Banks

A Ransomware Sanction Accidentally Took Down Telegram's Domain

A U.S. Sanctions Entry for a Ransomware VPN Appears to Have Accidentally Broken Telegram Links Worldwide

Alleged Russian cybercriminals indicted in Ohio helped conceal ransomware gangs

American Express “Sign-In Alert” phishing email leads to fake multi‑step credential harvesting pages

Apple Accuses Ex-Engineer of Exploiting ‘Rare’ Zero-Day to Steal Trade Secrets for OpenAI

Arizona receives slice of 42-state, $18 Million settlement over 23andMe genetic data breach

Australia: Lifeline confirms data breach

Australian Enterprises At Risk as Anthropic Finds Hackers In Claude Code

Canada: Cyber attack at Loyalist College

China opposes spreading false cybersecurity information for political purposes, Foreign Ministry on US, Paraguay’s claims of so-called ‘hacker threat’ from China

China rejects US-Paraguay ‘hacker threat’ allegation

CISA Shares Lessons Learned from Own Data Breach

CISA Warns 18-Year-Old Cisco IOS Vulnerability Exploited for Arbitrary Command Execution

Clinical Care Resilience Goes Beyond Having the Right Security Tools

Comcast to pay $117.5 million in class-action settlement over 2023 data breach affecting Xfinity customers

“Context bombs” can frustrate AI-driven attacks, researchers found

Cybercriminals Exploit AI Hallucinations To Launch Advanced Phishing Campaigns

Cybercriminals Target Turkish Banks With 8,400 Phishing Domains and 6,600 Scam Ads

Cybersecurity Researchers Identify First Fully Autonomous AI-Driven Ransomware Attack

Data Breach Hits AssuranceAmerica Exposing Personal Information of Nearly 7 Million People

Delaware Reach Settlement in 23andMe Data Breach Case

Delaware settles 23andMe data breach lawsuit, 16K+ residents affected

Department of Justice charges three Russians in $63 Million cybercrime scheme tied to ransomware infrastructure

EU Blacklists Russian Hackers and Firms Over Cyberattacks on Europe and Ukraine

EU sanctions Russian hackers and firms over cyberattacks

EU sanctions Russian surveillance firms behind state-controlled tracking app

EU, UK Attribute Russia Cyberattack to FSB, Announce Sanctions

EU, UK Sanction VKontakte Over FSB-Linked MaxApp Surveillance Tool, Lumma Stealer Operators, GRU Members

Every cybersecurity team needs a hacker mindset

Fiesta Insurance Data Breach Compromises Social Security Numbers

Finland issues wanted notice for hacker behind massive psychotherapy data breach

Five Charged in “Russian Coms” Fraud Platform Case

Forescout Uncovers AI Assisted Phishing Campaign Using Fake eCards

Forg365: New phishing platform targets Microsoft 365 accounts

Forg365 industrializes Microsoft 365 phishing with AI-generated lures

FortiSandbox Flaw Lets Unauthenticated Attackers Access VNC Server on Scanning VMs

Georgia Medical Firm Paying $4,000,000 In Data Breach Settlement Affecting Thousands

German Foreign Ministry Calls Russian Ambassador Regarding Cyber Attack Operation

Germany Among the Top Three Countries for Ransomware

Giant Telegram user database just hit hacker forums: here's why that's bad news

Global cyber attacks rise 17% as ransomware activity accelerates

Google Follows Microsoft to Remove ModHeader Extension from Store Following Reports of Covert Exfiltration Capability

Hacked DNA: 23andMe Strikes $18 Million Settlement Over Massive Genetic Data Breach

Hackers Abuse Fake OAuth Client IDs to Validate Microsoft Entra Accounts and Passwords

Hackers steal Lidl customer data from external service provider

He negotiated with ransomware gangs - Then joined them. Now he's headed to prison

How Post-Quantum Cryptography is Gaining Adoption

Immutable backup: Why it matters for ransomware recovery

Iran abused mobile networks’ vulnerabilities to locate US military in the Middle East, report says

JADEPUFFER: The emergence of Agentic AI in ransomware operations

Japan's largest taxi company knocked offline by cyberattack as dispatch systems go dark

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

LastPass, Bitwarden users targeted with fake security alerts

Lidl Confirms Customer Data Breach at IT Service Provider

Lidl Confirms Data Breach After Third-Party IT Provider Hack

Lidl data breach: Supermarket chain warns customers after third-party 'IT incident' exposes customer information - here's what we know so far

Lidl Data Breach Exposes Customer Details in Germany, Belgium, and the Netherlands

Lidl Notifies Customers of Third-Party Data Breach

Lifeline Australia confirms staff data compromised following hacking claims

Lucent Health Solutions to Pay Up to 1.95 Million to Settle Data Breach Litigation

Major data breach at Tata Electronics exposes Apple’s confidential files, raising global supply chain security concerns

Match Group Breach: ShinyHunters Claim 10 Million Records

May 2026 Healthcare Data Breach Report

Michigan settles bankruptcy claims against 23andMe over data breach

Microsoft ditches SMS and voice authentication for Entra ID, passkeys rolling out as default

Microsoft Entra ID authentication overhaul to start in September 2026

Microsoft Entra ID gets passkeys default authentication starting September

Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Microsoft Saw 18.7 Million QR Phishing Attacks in March Alone - Here’s Why Defenders Keep Missing Them

Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns

Minnesota, North Dakota among 42 states in settlement with 23andMe over 2023 genetic data breach

Moody Bible Institute Data Breach: What 2.3 Million Donors Must Do Right Now

Mountain View warns of phishing scam targeting planning project applicants

NATO logistics, Ukrainian troops are top subjects of Russian camera hacks, advisory says

Nearly 300 GitHub repos pose as legit software to push malware

Nearly 12,000 TRICARE Beneficiaries Warned of Data Breach

New Hampshire Attorney General (AG) announces multistate settlement of bankruptcy claims against 23andMe over genetic data breach

New Jersey to Receive $410K in 23andMe data breach

New MacOS Malware Exploits Legitimate Developer ID to Pose as Apple Crash Reporter

New macOS malware steals passwords by posing as Apple’s crash-reporting tool

New phishing kits target Microsoft 365 accounts, evade MFA

New Qilin Ransomware Attack Uses DCSync Technique to Abuse AD Replication Protocol

New tutorials on underground hacking forums have roughly doubled

New York: 23andMe hit with $18 million penalty after massive DNA data breach

Nigeria Data Protection Commission (NDPC) Claims It Acts on Every Data Breach Complaint, Yet There’s No Outcome in 3 Major Cases

Nihon Kotsu Cyberattack Disrupts Japan’s Largest Taxi Operator

No-one knows how many old shims can still bypass UEFI Secure Boot

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

Oklahoma: Mystery deepens over data breach of inmate info

Oregon to get half a million in settlement for 23andMe data breach

Pennsylvania and New Jersey each receive over $400,000 in 23andMe settlement

Phishing for dummies: Forg365 lowers barrier to M365 account takeovers

Phishing Toolkits Harvest Entra Tokens in Real Time

Phishing, UPI Scams and Remote Access Fraud on the Rise, Experts Warn

Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown

RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

RabbitMQ Vulnerability Exposes OAuth Secrets to Attackers

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Russia slams EU's cyber-attack accusations

Russian hackers are targeting routers to infiltrate critical infrastructure, CISA warns

SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

SAP warns of critical flaws in NetWeaver and Commerce Cloud

Scammers Use 8,400 Phishing Domains to Target Turkish Banking Customers

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

South Africa records over 2,000 weekly cyber attacks

South Dakota to receive nearly $150K in 23andMe bankruptcy settlement following 2023 data breach

Spanish Police take down €140 million cyber fraud ring, arrest four

Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

Surplus Line Association of California Data Breach Exposes SSNs

Suvida Healthcare Data Breach Affects 2,109: Medical Info Exposed

Synopsys denies data breach claims by new ransomware group D1R

Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims

Tennessee to receive $348K in 23andMe data breach settlement

The best defense against AI attacks turns out to be a skeptical human

The inside job that cost ransomware victims millions

The negotiator was the leak: insider who betrayed ransomware victims gets 70 months

Turkish Banks Targeted by 8,400 Phishing Domains and 6,600 Social Media Scam Ads

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

U.S. Treasury Just Hit Ransomware’s Supply Chain Where It Hurts

U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware Losses

U.S., Allies: Russia Abusing Network Devices to Attack Critical Infrastructure

UK: Public to be told how to prepare for cyber-attack and weather emergencies

UK: Public to be told to stockpile food in case of cyber attack from Russia

UK charges five persons linked to fraud platform behind more than a million scam calls

Uninstall this Chrome extension now: it contains surveillance code

Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages

US: Government healthcare administrator offers free credit monitoring after data breach

US: Pentagon Suspends Cybersecurity Maturity Model Certification (CMMC) Phase II Requirements for Defense Contractors

US police now armed with Israeli spy vans simulating mobile phone towers

US Sanctions VPN Provider 1VPNS Over Alleged Role in Supporting Hospital Ransomware Attacks

US sanctions VPN, malware providers for enabling ransomware attacks

US Treasury sanctions First VPN Service, others for abetting ransomware gangs

US Treasury sanctions VPN and cryptor operators linked to ransomware

US Treasury Sanctions VPN Provider Linked to Ransomware

US unseals indictment against alleged operators of Russian bulletproof hosting service

What the Transport for London Data Breach Reveals About Cyber Risk

Woman charged in $68,000 phishing scam against Southern Door Schools

World Cup scams are a glimpse of the cybersecurity future

World War 3 (WW3) warning as Britons will be told to stockpile food ready for Russian cyber attack

Your phishing defense was built for 2016, but attackers are operating in 2026

13th July

65% of Organisations Think a Serious Cyber Attack Could Threaten their Survival

99.9% of fixable AI vulnerabilities remain unpatched

A ransomware negotiator who colluded with attackers to scam victims was sentenced to 70 months in prison

A zeroed signature let a hacker drain nine million dollars from Hedera's biggest lender

After years on the run, alleged Ryuk ransomware operator pleads guilty

Agentic Ransomware Is Real and Getting Cheaper: What Comes After JadePuffer

AI & Service Management Company, Serviceaide Inc, Agrees to Pay $1.8 Million For Data Breach of 400,000 Health Patients’ Information

AI Phishing Surge Forces New Zealand Casinos to Fight Back

ApolloMD agrees to multi-million-dollar settlement over 2025 data breach

Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Australian Cyber Agency Warns of Global CMS Exploitation Campaign

California: State can’t seek damages from 23andMe successor over data breach

California Gay & Lesbian Services Center Data Breach Affects 75,500 Individuals

Cambodian Voice Phishing Ringleader Sentenced to 14 Years for $44.3 Billion Fraud

Carle Health Data Breach Exposes Sensitive PHI and PII

Centers Laboratory Data Breach Affects 540,000 Individuals

Centers Laboratory New Jersey discloses data breach incident impacting 542,000 people

CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities

CISA warns of actively exploited RCE flaws in Joomla extensions

Columbia Orthopaedic Group Data Breach Exposes PHI

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Cyber Attack at Mount Royal University Disrupts Operations, Cybercrime Gang Demands $1.9 Million Ransom

Cyber incidents - a 'litmus test' of a company’s management capability

Cybersecurity gaps leave small businesses vulnerable

Dark Web Profile: Krybit Ransomware

Data Breach at Aflac Japan Impacts 4.38 Million Customers and Sales Agents

Data breach at Lidl: online store customer data stolen

Difficult to detect: Phishing campaign uses Microsoft infrastructure

Doing Its Job: Large Majority of Cyber Losses Covered by Insurance, Says Willis

Estée Lauder Data Breach Exposes Health Information and SSNs

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe

EU imposes new sanctions against Russian cyber espionage

EU sanctions Russian GRU military hackers over cyberattacks

European Parliament Revives Controversial Chat Scanning Law

Evilginx: Three phishing operations revealed by mistake

Ex-ransomware negotiator gets 70 months for betraying clients to hackers

Exposed Server Unmasks Evilginx Operators Stealing Microsoft 365 Sessions and OAuth Tokens

Fake Bank Apps Let Scammers Control Android Phones in Southeast Asia

Fake OAuth client IDs are helping attackers slip past sign-in logs

Fake ‘Vote for Me’ links on X target users in new phishing campaign

Feds Slam Ransomware Supply Chain: US And Allies Cut Off Cybercriminals’ Digital Lifelines

Fiji: Phishing attack surge

Finland: Police issue wanted notice for Vastaamo hacker Aleksanteri Kivimäki

Finland: Vastaamo hacker wanted after appeal rejected

Foreign National Admits Guilt in $15,000,000 Bitcoin Ransomware Attacks on U.S. Firms

Forg365 Phishing-as-a-Service (PhaaS) Targets Microsoft 365 with Device Code and Adversary-in-the-Middle (AitM) Session Theft

GhostCommit Attack Hides Prompt Injection in PNG to Steal Developer Secrets

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges

Hackers backdoor Jscrambler npm package with infostealer malware

Hackers blackmail Bosch as secret engineering files surface on the dark web

Hackers breach Lidl’s IT service provider, steal customer data

Healthcare ransomware attacks rose 14% in first half of 2026

Healthcare Services Group Agrees to $3 Million Settlement Over 2024 Data Breach

Hong Kong: Securities and Futures Commission (SFC) Mandates Phishing-Resistant Authentication Methods for Internet Brokers and Virtual Asset Trading Platforms (VATPs) to Protect Client Accounts

How small businesses get hacked through employees

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

India: Government Confirms No Critical Data Loss In Tata Electronics Cyber Attack, Vows Continued Vigilance Amid Rising Digital Threats

India: Government examining alleged Tata Electronics data breach

Is that QR code a trap? How to spot quishing scams before it's too late

It’s a First: An AI Agent Carries Out a Ransomware Attack on AI App Builder

Japan's largest taxi operator shuts systems after cyberattack

Jscrambler npm Supply Chain Attack Steals Developer and Cloud Credentials

Lake Region Healthcare Alerts Patients of Data Breach

Law Firms Launch Investigations Into Frontier Airlines Following Data Breach Tied to Ransomware Group

Lawyers Investigate Frontier Airlines Over Data Breach That May Have Exposed ‘Sensitive’ Personal Information

LIA Insurance Data Breach Exposes Financial Account Info

Lidl Confirms Data Breach at Third-Party IT Provider

Lidl customers across Europe hit in suspected data breach - here's what we know

Lidl customers' bank details at risk after third-party security failure

Lidl discloses online shop breach after service provider hack

Lidl Notified Online Shop Customers in Germany, Belgium, and the Netherlands of a Data Breach

Lidl reports data breach affecting online customers in Germany, Belgium, and the Netherlands

Lidl Warns of Phishing Risk After Customer Data Theft

Los Angeles Police Department (LAPD) lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy

Marlboro-Chesterfield Pathology Agrees to Settle Lawsuit Over 2025 Ransomware Attack

Meridian Health Plan of Illinois Data Breach Affects 21,027

Meta Removes Muse Image Instagram Feature After Consent Backlash

Microsoft Patches Zero-Day RoguePlanet Defender Flaw that Allows SYSTEM-Level Access

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

Nearly 12,000 military Tricare beneficiaries warned of data breach

New CrashStealer malware poses as Apple crash reporting tool

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

New ransomware leader emerges as global cyberattacks rise in June 2026

Nigeria: Zenith Bank, Others To Be Arraigned Over Alleged Data Breach

Nihon Kotsu Confirms Malware Infection, Taxi Dispatch Systems Disrupted

Novel OAuth Client ID Spoofing Technique Targets Cloud Environments

Office of Foreign Assets Control (OFAC) Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans

One Misconfigured Python HTTP Server Exposed Three Active Campaigns from Attackers

Open Directory Exposes Three Evilginx Phishing Operators

Pakistan: International Hacker accused of stealing 5 Million Bank Records arrested in Karachi

Pakistan: Karachi hacker arrested for alleged theft of millions of foreign citizens’ financial data

Pakistan: National Cyber Crime Investigation Agency (NCCIA) Busts International Hacker in Major Data Breach Case

Pakistani Police Systems Hit by Chinese and Indian Espionage

PennyMac Data Breach Affects 3k Individuals: PHI Exposed

Progress Software Warns of "External Security Threat" to ShareFile

Progress warns ShareFile Users: shut down on-premises servers immediately

Prolific hacker 2019 selling alleged HotToner Australia customer data online

Public Key Infrastructure (PKI) Under Pressure: AI, PQC and Shorter Lifecycles Drive New Security Challenges

Ransomware ecosystem grows, but ‘four-headed monster’ dominates

Ransomware Groups Change Identities to Evade Cybercops

Ransomware negotiator jailed for 70 months after he just helped infect victims with malware

Ransomware negotiator who betrayed clients sentenced to 70 months in prison

Ransomware Targets 2.74% Of Malaysian Firms In 1Q26

RokRAT Malware Hides Behind Academic Event PDFs and Cloud Storage Links

Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions

Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach

Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns

Ryuk ransomware operator pleads guilty in $15 Million bitcoin extortion

Samsung Health users who refuse AI training get their data deleted

Security Leaders Discuss Exposure of 24 Billion Credentials

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers

ShinyHunters' PeopleSoft Zero-Day Rampage: 100+ Organizations Breached Before Oracle Even Published an Advisory

Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects

Social Media Users Warned Against Phishing Campaign on X

South Korea Military Faces Highest Cyberattack Volume Since 2021

Spear-Phishing Campaign Uses Proton Drive Links and LNK Files to Deliver SpyGlace

St. Paul, Minnesota, Notifies People Affected by 2025 Cyber Attack

Sturdy Health Data Breach Affects 1k Individuals

Supply Chain Attack: jscrambler npm Package Compromised, Targeting Wallets, AI Tools, Cloud Credentials

The Decision Burden Behind SOC Alert Fatigue and How Experts Would Reduce It

The ransomware negotiator who was working for the other side

The Rising Tide of AI-Enabled Social Engineering Scams: What Organizations Need to Know

This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June

TriWest Healthcare Alliance Notifies 11,844 Beneficiaries of Data Breach Affecting Health Information

U.S. sanctions First VPN Service over ransomware support

U.S. Treasury sanctions cybercrime enablers tied to ransomware attacks

UK charges suspects linked to Russian Coms call spoofing platform

UK Cyber Attacks Climb 34% as Ransomware Leadership Shifts

Ukraine: OPORA has been targeted by a coordinated phishing attack. Attackers are attempting to gain access to Gmail accounts via OAuth

United States: Sanctioning Ransomware Enablers In Coordinated International Action

US: Millions of Drivers in 12 States May Have Had Their Driver’s License Info Exposed in a Data Breach - Were You One of Them?

US and allies warn of Russian critical infrastructure attacks

US Imposes Sanctions on Belarusian Man in Ransomware Case

US Treasury Sanctions Malware and Infrastructure Providers Supporting Ransomware Attacks Against Americans

US Treasury sanctions malware providers tied to cyberattacks

Vermont: Funds recovered in recycling-related phishing scam

Vishing Call Becomes Key Lead in Massive Odido Cyberattack

VPN service favored by ransomware groups is sanctioned by US

Why cybercrime is becoming everyone’s problem in Ghana

Why Software Bill of Materials (SBOMs), signing, and provenance still don’t tell you if software is safe

Wildwood Surgical Data Breach Exposes Social Security Numbers

Year-Long Microsoft Device Code Phishing Campaign Bypasses MFA and Claims 218 Victims

YKK AP Data Breach Highlights Ongoing Cyber Risks Facing Glass Industry