Editor's Message

Welcome to DBD. On March 8th 2026, DBD celebrates it's sixth anniversary and PRiSM celebrates it's third anniversary. Both projects have made a huge impact on my life and I'd like to thank each and everyone of you who have supported me, with special thanks to those individuals and communities who have helped me build up my knowledge on cybercrime and ransomware over the years. Thanks again for all your continued support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.



Thursday, 5 March 2026

Data-Leaking Ransomware Report - Food & Drink 2025

Welcome to a special DLR Report solely focused on the Food and Drink Sector, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed in the Food and Drink Sector in 2025.


DBD discovered and researched 311 Global Ransomware Victims over 57 Countries and Islands, including 153 US Ransomware Victims over 34 States and Districts, claimed by 57 Data-Leaking Ransomware Operators in the Food and Drink Sector in 2025, further details of which can be found in our PRiSM application.

Download PDF



Data Source: Data Breaches Digest.


Wednesday, 4 March 2026

Data-Leaking Ransomware Report - IT & Communications 2025

Welcome to a special DLR Report solely focused on the IT and Communications Sector, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed in the IT and Communications Sector in 2025.


DBD discovered and researched 737 Global Ransomware Victims over 77 Countries and Islands, including 316 US Ransomware Victims over 41 States and Districts, claimed by 100 Data-Leaking Ransomware Operators in the IT and Communications Sector in 2025, further details of which can be found in our PRiSM application.

Download PDF



Data Source: Data Breaches Digest.


Tuesday, 3 March 2026

Ransomware Operator Claims - Week 9 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 23rd February and 1st March 2026, kindly assisted by our partners.

DBD discovered and researched 213 Ransomware Victims over 37 Countries and Islands claimed by 41 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.


Monday, 2 March 2026

Data Breaches Digest - Week 10 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 2nd March and 8th March 2026.


5th March

12 Hacktivist Groups Targeted 110 Organizations Globally: Almost 150 DDoS Attacks in Over 15 Countries

62 people indicted by Taiwanese prosecutors over ties to cyber scam company Prince Group

APT28-Linked Campaign Deploys BadPaw Loader and MeowMeow Backdoor in Ukraine

Authorities pull plug on Tycoon 2FA phishing-as-a-service platform

Authorities Shut Down Tycoon 2FA Phishing Platform Used to Bypass MFA

AzCopy Misused In Active Ransomware Data Exfiltration Campaigns

Cisco flags more SD-WAN flaws as actively exploited in attacks

Cisco Issues Patches for 48 Vulnerabilities in Enterprise Networking Products

Cisco warns of SD-WAN Manager exploitation, fixes 48 firewall vulnerabilities

Coinbase, Microsoft & Europol Dismantle Tycoon 2FA Phishing Network

ContextCrush Flaw Exposes AI Development Tools to Attacks

Coruna Exploit Kit Targets Older iPhones in Multi-Stage Campaigns

Coupang Data Breach Affects Over 200,000 Taiwan Users; Ministry Orders Inspection and Compensation

Critical Cisco Catalyst SD-WAN Vulnerabilities Allow Attackers to Gain Root Access

Critical Cisco Secure Firewall Management Vulnerability Enables Remote Code Execution

Critical pac4j-jwt Authentication Bypass Lets Attackers Impersonate Any User

Cyber Attack Takes Down New Jersey County’s Phones, IT Systems

Data Breach Hits LexisNexis Legal & Professional Division, Thousands of Customer Records Affected

Dust Specter Targets Iraqi Officials with New SPLITDROP and GHOSTFORM Malware

Eureka Casino Settles Data Breach Class-Action Lawsuit for $1 Million

Europe: Banks must refund phishing victims first, recover later

Europol Operation Seizes LeakBase Data Breach Site

Europol-Led Operation Takes Down Tycoon 2FA Phishing-as-a-Service Linked to 64,000 Attacks

Europol’s Major Operation Dismantles Tycoon 2FA Phishing-as-a-Service Network Linked to Over 64,000 Cyberattacks

Fake Google Security Site Launches Phishing Attack: PWA App Used to Steal OTP and Crypto Wallet Data

FBI and Europol Dismantle LeakBase Cybercrime Forum With 142,000 Users

FBI and Europol Seize LeakBase Forum Used to Trade Stolen Credentials

Florida Software Distributor Sentenced for Illicit Microsoft Certificate of Authenticity (COA) Trafficking

Florida woman given major jail sentence for illegally selling Microsoft product keys

Frankel Loughran Starr & Vallone (FLSV) Data Breach Exposes SSNs and Other PII

Gecko Custom Data Breach Exposes Customer and Order Information

Global Coalition Disbands Tycoon 2FA Phishing Operation

Hackers Now Use Official Microsoft Logins to Send Malware to Government Agencies

HungerRush Data Breach Allegedly Exposes 28 Million Users

INSS Cyberattack: Handala Hack Team Claims Data Breach

Iranian APT Groups Target Critical Infrastructure Amid Geopolitical Tensions

Israel Air Defense Systems Allegedly Hacked by Cardinal Group

Israel Claims it ‘Struck’ Iran’s Cyber Warfare Headquarters

JBS Brazil Targeted by Coinbasecartel Ransomware Attack

Krece Fintech Data Breach Exposes Millions of User Records

Kubernetes and AI Workloads Under Attack By VoidLink Malware

Law enforcement and security firms take down huge Phishing-as-a-service (PhaaS) platform

Law enforcement and tech firms take down Tycoon phishing platform

LeakBase Cybercrime and Hacker Forum Seized

LeakBase cybercrime forum with 142,000 users taken down in global operation

LeakBase Hacker Forums Dismantled in Global Law Enforcement Operation, 37 Highly Active Users Targeted

Major data leak forum LeakBase seized by FBI, Europol, and shut down

Major Phishing Network Tycoon 2FA Taken Down in Joint Operation by Coinbase, Microsoft, and Europol

Major phishing operation disrupted in joint Europol action

Meta AI Glasses Prompt UK Information Commissioner's Office (ICO) Investigation Over Privacy as Employees Review Intimate User Videos

Microsoft Issues Warning: Malware Spread Through Abuse of OAuth Redirect Flow

Microsoft, Europol take down global phishing as a service network which was able to bypass 2FA with ease

New MongoDB Vulnerability Allows Attackers to Crash Any Server

One of the largest hacker forums in the world has been seized by the US Department of Justice (DoJ)

One Of The World's Largest Hacker Forums Dismantled

Phishing Campaign Uses Google Cloud Storage For Malicious Redirects

Phobos ransomware admin pleads guilty to wire fraud conspiracy

Police dismantle major phishing platform blamed for attacks on hospitals and schools

Police dismantle online gambling ring exploiting Ukrainian women

Proof-of-Concept (PoC) Exploit Released for Cisco SD-WAN 0-Day Vulnerability Actively Exploited in the Wild

Russian Phobos Ransomware Administrator Pleads Guilty to Wire Fraud Conspiracy

Russian Ransomware Operator Pleads Guilty in US

Scottish National Party (SNP) Government forced to take down part of Alex Salmond Files over 'shambolic' data breach fears

Silver Dragon APT Uses Google Drive For Covert Communication In European, Asian Attacks

Social Media Rumors: New Cyber Attack at Caesars?

Star Citizen's billion-dollar community is irate over delayed data breach reveal

Telegram has become a common marketplace for hackers, cybersecurity firm says

That attractive online ad might be a malware trap

The biggest AI threats come from within - 12 ways to defend your organization

The Great Security Culture Shift: Building a Proactive Defense in an Era of Advanced Threats and Social Engineering

This paint company is dripping stolen information, hackers claim

U.S. and Global Law Enforcement Dismantle Major Hacker Forum Selling Stolen Data

Understanding the Dark Web Changes How Organizations Approach Security

University of Mississippi Medical Center Reopens Clinics After Ransomware Attack

US and EU join forces to seize LeakBase, one of the world’s largest hacker forums

US and EU police seize LeakBase, a site where crooks share stolen passwords and hacking tools

Zero-Click FreeScout Bug Enables Remote Code Execution

4th March

7 Phishing Gang Members Arrested in Korea for Stealing 800 Million Won from Virtual Wallets

149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict

AI agents are too easy to fool, with websites now littered with hidden “system override” commands

AI Raises the Cybersecurity Stakes - But People Still Open the Door

AI Technology Is Placing The Maritime Industry At Greater Risk Of A Cyber Attack, Reveals New Data

Alleged Data Breach at Colombia’s Tax Authority Could Expose Millions of Citizens’ Records

Anubis ransomware claims responsibility for AkzoNobel network breach

APT41-Linked Silver Dragon Targets Governments Using Cobalt Strike and Google Drive C2

Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks

Attackers are abusing Google logins to spread malware

Australia: It’s time schools moved beyond passwords

Brown Advisory Data Breach Exposes PII Including SSNs

Browser-in-the-browser attacks: from theory to reality

Calls for Global Digital Estate Standard as Posthumous Deepfake Fraud Risk Grows

Canada: Phishing scam targeting Ponoka residents, vendors

Car Tyre Sensors Can Be Used to Track Drivers Without Their Knowledge

Children’s Council of San Francisco Data Breach Affects 12k People

China-linked hackers hide cyber-spy operation inside Windows services and Google Drive

CIMB denies data breach involving 1.2 million records

CIMB Dismisses Recent Data Breach Allegations As False

CIMB refutes claims of data breach involving 1.2 million records

CISA Adds Actively Exploited VMware Aria Operations Flaw CVE-2026-22719 to Known Exploited Vulnerabilities (KEV) Catalog

CISA Warns of Actively Exploited Memory Corruption Vulnerability in Qualcomm Chipsets

CISA Warns of Actively Exploited Vulnerability in VMware Aria Operations

Cisco warns of max severity Secure Firewall Management Center (FMC) flaws giving root access

ClickFixers now pretend to be investors and target crypto professionals

Coinbase, Microsoft disrupt Tycoon 2FA phishing network linked to credential theft

Coinbase, Microsoft take down phishing site Tycoon 2FA, seize 330 domains

Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1

Coupang Data Breach Leads to Q4 Losses

Cyber spillover: Middle East conflict triggers phishing, deepfakes and brand impersonation risks for Indian companies

Cybersecurity is now the price of admission for industrial AI

Cybersecurity professionals are burning out on extra hours every week

CyberStrikeAI Deployed in Over 600 FortiGate Attacks Targeting 55 Countries

Cydome report finds 150% surge in maritime Operational Technology cyberattacks as ransomware tightens grip in 2025

Data Breach Allegedly Hits Colombian Tax Authority DIAN

Data breach at University of Hawaiʻi Cancer Center impacts 1.2 Million individuals

Data breach sparks outrage at Cloud Imperium among players

Department of Justice (DOJ) takes down huge hacker forum, seizes LeakBase’s data

DoorDash, Walmart data manager breached, with millions of records exposed, attackers claim

Dorset ambulance service pays out £30k in data breach claims

Dragonforce Attacks New Generation Media, Lincoln Green, Bravo Electro

Dutch watchdog accuses Meta of turning a blind eye as scam ads keep circulating

Eureka Casino in Mesquite to Pay $1M After Massive Data Breach Exposed 229K Records

Epic Fury Cyber Conflict Surges As Iran Goes Offline, Hacktivists Strike Back

Europol-coordinated action disrupts Tycoon2FA phishing platform

Fake Laravel Packages on Packagist Deploy RAT on Windows, macOS, and Linux

Fake LastPass support email threads try to steal vault passwords

FBI seizes LeakBase cybercrime forum, data of 142,000 members

From phishing to Google Drive C2: Silver Dragon expands APT41 playbook

General Physician Pays $2.5 Million to Settle Data Breach Litigation

Global coalition dismantles Tycoon 2FA phishing kit

Global phishing-as-a-service platform taken down in coordinated public-private action

Global Takedown Neutralizes Tycoon2FA Phishing Service

Google’s Biggest Android Security Update in Years Fixes 129 Bugs, Including an Actively Exploited Zero-Day

Hack on French medical site sees over 15 million records leaked, including private health info

Hacker mass-mails HungerRush extortion emails to restaurant patrons

Hackers Abused Legit Certificates to Sneak Into Work PCs

Hackers claim LexisNexis breach exposing data on 400K users, including .gov accounts

Handala Hack Claims Aramco Ransomware Breach: The Facts So Far

Havoc C2 framework weaponized in new tech support scam

How to clean up your digital footprint - and why it matters more than you think

ICAFe Companies Suffers Ransomware Attack by Akira Group

Inside Tycoon2FA: How a leading Adversary-in-The-Middle (AiTM) phishing kit operated at scale

Insight Hospital and Medical Center Data Breach Exposes PHI and PII

IPVanish VPN for macOS Vulnerability Allows Privilege Escalation and Code Execution

Iran Conflict and Cybersecurity: What to Expect in the Next 30 Days

Iran’s AI-Powered Cyber Offensive Intensifies, Warning of Threat to Global Infrastructure

Ivanti Connect Secure devices may carry dormant RESURGE malware

LastPass issues alert as customers face second major phishing campaign of 2026

LastPass Warns of New Phishing Campaign

LastPass warns of spoofed alerts aimed at stealing master passwords

LexisNexis confirms data breach at Legal & Professional arm, some customer records affected

LexisNexis confirms data breach, says hackers hit customer and business info

LexisNexis Data Breach: Threat Actor Claims Theft of 2.04 GB of Data

LexisNexis Faces Data Breach After 2.04 GB of Data Allegedly Stolen

LexisNexis Legal & Professional confirms data breach after React2Shell exploit

LexisNexis Says Data Breach Has Been Cointained; Hackers Claim Access to Government and Law Firm User Data

Mail2Shell zero-click attack lets hackers hijack FreeScout mail servers

Malaysia: CIMB Refutes Claims Of Data Breach Involving 1.2 Million Records

Microsoft Alerts Customers to New Phishing Attack Exploiting OAuth in Entra ID to Bypass Detection

Microsoft and Coinbase Aid in Shutting Down Tycoon Phishing Service

Microsoft Flags Malware Delivery Tied to OAuth Login Phishing Campaign

Microsoft Flags New OAuth-Based Phishing Attack Targeting Public Sector

Microsoft flags phishing campaign abusing Entra ID, Google OAuth links

Microsoft leads takedown of Tycoon2FA phishing service infrastructure

Microsoft Warns of Advanced Phishing Campaign Abusing OAuth in Entra ID

Microsoft Warns of Phishing Exploiting OAuth URL Redirects

Mississippi medical center reopens clinics hit by ransomware attack

Moroccan hacker group announces cyber campaign targeting Israel

Multi-Stage "BadPaw" Malware Campaign Targets Ukraine

Nevada’s Eureka Casino settles $1 million data breach case

New LexisNexis Data Breach Confirmed After Hackers Leak Files

New phishing scam uses legit software to hijack computers, but the real story is even wilder

New Power Party Data Breach Exposes 33K User Records

New Starkiller phishing kit bypasses MFA, mimics legitimate sites

North America leads global ransomware cases

OptimizerAI Data Breach Exposes Over 118,000 User Records

Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500)

Paint giant AkzoNobel reveals data breach, says US site was affected

Perplexity AI Browser Flaw Could Let Calendar Invites Access Local Files

Phishing Campaign Exploits Google Cloud to Host Malicious Redirects via Google Cloud Storage (GCS) Bucket

Qilin Hacks Vision Aero, ATS, Golden Clay, Outsourcia, Dr. Pizzoglio

Ransomware Breach at University of Hawaii Cancer Center Affects 1.2 Million People

RedAlert Trojan Campaign Disseminates Fake Emergency App Targeting Israel via SMS Spoofing, Steals Contacts, GPS Data

RoundOne AI Data Breach Exposes Job Candidate Information

Russian hackers deploy new malware in phishing campaign targeting Ukraine

Seoul Police Arrest Crypto Phishing Ring That Stole $570,000

South Korea: Phishing Group Arrested for Stealing 800 Million Won in Tether

Sprawling FBI, European operation takes down Leakbase cybercriminal forum

Spyware-grade Coruna iOS exploit kit now used in crypto theft attacks

Star Citizen developer draws ire over delayed data breach disclosure

Surge in Attacks on Surveillance Cameras Linked to Iranian Hackers

Suspected Iranian Threat Actors Compromise IP Camera Feeds in Iran, Israel, the UAE, Qatar, Bahrain

Telegram Increasingly Used to Sell Access, Malware and Stolen Logs

Telegram Used By Hackers For Initial Access To Critical Corporate Infrastructure

The Afghan Data Breach Victims Who Say They Have Been Abandoned by Britain

The Booking.com scam crisis - how a simple message revealed a sophisticated fraud

The Coruna iPhone Exploit Kit Used by Cybercriminals, Possibly a Leaked Government Hacking Tool

The Most Common Swap Scams in 2026, and How to Avoid Them

The vulnerability that turns your AI agent against you

Third-Party Data Breach at Online DIY Firm ManoMano Affects Nearly 38 Million People

Trusted Azure Utility AzCopy Turned into Data Exfiltration Tool in Active Ransomware Campaigns

Tycoon 2FA Phishing Kit Disrupted by Microsoft, Europol and Partners

Tycoon 2FA Phishing Platform Dismantled in Global Takedown

Tycoon2FA phishing platform dismantled in major operation

United States Leads Dismantlement of One of the World’s Largest Hacker Forums

University of Hawaii Cancer Center Data Breach: 1.2 Million People Impacted

US and EU police shut down LeakBase, a site accused of sharing stolen passwords and hacking tools

US and Global Law Enforcement Shut Down LeakBase Hackers Forum

US Shuts Down 'LeakBase' Hacker Forum Known for Selling Stolen Data

Verlat Energy Suffers Data Breach by Vect Ransomware Group

VoidLink Malware Framework Targets Kubernetes and AI Workloads in New Cyber Attack Wave

Why “Old” Cyber Attacks Still Work - and What Organizations Get Wrong

Why workforce identity is still a vulnerability, and what to do about it

Wynn Resorts Data Breach: 800,000 Records Stolen

youX hacker declines to publish further stolen data

3rd March

1 billion personal records exposed in massive new data leak - full names, addresses, phone numbers and more

1 Million Impacted by University of Hawaii Cancer Center Breach

1.2 Million Affected by University of Hawaii Cancer Center Data Breach

1.2 Million Impacted As Heartless Hackers Attack Cancer Center In Ransomware Breach

5 years of shifting cybersecurity behavior

15 million impacted in French health ministry cyber attack

45% of Cybersecurity Leaders Work a “Sixth Day”

$100 radio equipment can track cars through their tire sensors

A suite of government hacking tools targeting iPhones is now being used by cybercriminals

AI adoption shrinks cyber attack window to 48 hours in shipping

AI and Deepfakes Supercharge Sophisticated Cyber-Attacks

AI supercharges LinkedIn phishing risks in Australia

AI technology is placing the maritime industry at a greater risk of a cyber attack, reveals new data

AI went from assistant to autonomous actor and security never caught up

AI-driven hacking uses booking.com and Microsoft Teams in vibe coding and “flat pack” malware campaigns

AI-Powered Ransomware threatens even Encrypted Backups

AiLock Ransomware Hits Aaronson Rappaport & Demanor

Andal Law Group Suffers Anubis Ransomware Attack and Data Breach

Android gets patches for Qualcomm zero-day exploited in attacks

Android’s March 2026 security patch fixes over 100 flaws, one under targeted exploitation

Attackers could hijack Perplexity’s Comet browser to take over your 1Password vault

Aura.Build Data Breach Exposes Information of Over 132,000 Users

California fines national high school ticketing platform $1.1 million for privacy violations

Check if your Chrome is up to date: Google’s Gemini might still be spying on you

Chrome Extension Hijacked to Deliver Malware, Steal Crypto Wallets

CISA flags VMware Aria Operations RCE flaw as exploited in attacks

Cloud Imperium faces backlash over delayed data breach disclosure

Cloudflare tracked 230 billion daily threats and here is what it found

Coruna: Spy-grade iOS exploit kit powering financial crime

Critical MS-Agent Vulnerability Allows Attackers to Hijack AI Agents and Gain Full System Control

Cyber Resilience as a Corporate Mindset

Cyber-Kinetic Warfare Escalates as Iran, US, and Israel Clash Across Military and Digital Fronts

Cyberattack on healthcare RCM vendor may have impacted 140K patients

Digital Sabotage And Bad Grammar: Inside The Cyber Hijack Of Pakistan’s Airwaves

Epic Fury/Roaring Lion Sparks Escalating Cyber Conflict as Iran Goes Offline, Hacktivists Step Up Retaliation

Fake Google Security page used in Progressive Web App (PWA) phishing campaign

Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations

Fake Zoom and Google Meet Pages Trick Users Into Installing Monitoring Tool

Figure data breach exposes nearly 1 Million accounts

From reactive to proactive: closing the phishing gap with LLMs

Gamers furious as British studio Cloud Imperium quietly admits to data breach

German Court Convicts Key Operator of Global Multi-Million Investment Scam Milton Group

Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited

Hacked traffic cams and hijacked TVs: How cyber operations supported the war against Iran

Hackers Abuse .arpa Top-Level Domain to Host Phishing Scams

Hackers abuse OAuth error flows to spread malware

Hackers breach Star Citizen players’ personal data in January, but CIG only just got around to mentioning it

Hackers Use CyberStrikeAI Tool to Breach Fortinet FortiGate Devices

Hackers Use GTFire Phishing Attack to Steal Credentials via Google Services

Hacktivists Claim Department of Homeland Security (DHS) Breach, Leak 6,600+ ICE Contractor Records

Half of US CISOs Work the Equivalent of a Six-Day Week

Handala Hack Breaches Sharjah National Oil & Israel Opportunity

Healthcare organizations are accepting cyber risk to cut costs

Higginbotham Data Breach Affects 9k Texans: SSNs Exposed

Hospital General de Medellín Data Breach Exposes Patient Records

How Israel hacked Iran’s traffic cameras to pinpoint Khamenei

How Pakistan, Bangladesh, and Sri Lanka Were Hit by India-Linked Threat Actors

Huge “Shadow Layer” of Organizations Hit by Supply Chain Attacks

I4C Warns of Ransomware Groups Turning To Professional Firms, Targeting Network Storage Devices

Iran leveraging AI and stolen data to escalate cyber campaigns

Iranian Communications and Sensors Disrupted by US Cyber Command; Researchers Warn of Retaliatory Cyber Attacks

Iranian Cyber Threat Actor Targets Iraqi Government Officials in AI-Powered Campaign

Iranian Use of Cybercriminal Tactics in Destructive Cyber Attacks

Ireland: Fifth of companies experienced a cyber attack in last two years

Israel: RedAlert Spyware Campaign Exploits Wartime Panic With Trojanized App

Leaked Database Sheds Light on Iranian Crypto Sanctions Evasion

LexisNexis confirms data breach as hackers leak stolen files

LexisNexis Data Breach - Threat Actor Allegedly Claims 2.04 GB Stolen

LexisNexis Investigates Massive Data Breach by FULCRUMSEC

LexisNexis says hackers accessed legacy data in contained breach

Mercer Advisors Hit by ShinyHunters Data Breach

Microsoft reveals OAuth redirection abuse powering new phishing attempts

Microsoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets

Microsoft warns of OAuth phishing campaigns able to bypass email and browser defenses - says 'these campaigns demonstrate that this abuse is operational, not theoretical'

MTN Irancell Data Breach Exposes Customer Information

Nevada: $1 Million Eureka Casino data breach class action settled

New Google-Themed Phishing Attack Turns Browser Features Into Spyware

New Starkiller Phishing Framework Uses Real Login Pages to Bypass MFA Security

OAuth phishers make ‘check where the link points’ advice ineffective

OAuth Redirect Abuse Targets Government and Public Sector Organizations, Microsoft Warns

OCRFix Botnet Trojan Uses ClickFix Phishing To Evade Detection

Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries

Paint maker giant AkzoNobel confirms cyberattack on U.S. site

Phishing campaign exploits OAuth redirection to bypass defenses

Play Ransomware Hits Cabka, WCC, LRA, Kuker Group & More

Project Compass Targets 764 Network as 30 Arrested and Victims Rescued

Ransomware is now less about malware and more about impersonation

Ransomware Tightens Grip on Chartered Accountancy (CA) & Consulting Firms; NAS Devices Emerge as Prime Target

Sadenet ISP Data Breach Exposes 160K Customer Records

Samsung comes clean after collecting Texans’ TV data

Samsung reaches settlement with Texas over smart TV data collection practices

SloppyLemming Targets Pakistan and Bangladesh Governments Using Dual Malware Chains

SonicWall Firewalls Under Siege From Over 4,000 Unique IP Addresses

Star Citizen developer CIG admits that a hacker gained access to account data...six weeks ago

Star Citizen developer suffers data breach impacting user personal data

Star Citizen Forgot to Mention Your Data Was Leaked Over a Month Ago

Star Citizen game developer discloses breach affecting user data

“Star Citizen” maker says that an undisclosed month-old data breach isn’t a big deal

Star Citizen studio suffered a data breach in January, and some players aren't happy with the very quiet disclosure that only happened this week

Starkiller Phishing Framework Uses Real Login Pages to Evade MFA Protections

Starkiller Phishing Suite Uses AitM Reverse Proxy to Bypass Multi-Factor Authentication

Study Finds AI Is Fueling An Alarming Surge In Sophisticated Phishing Scams

Surviving Ransomware: Best practices to safeguard your business

Suspected ShinyHunters’ Vishing Attack Hits Ad Tech Firm Optimizely, Leaking Business Information

This new phishing campaign uses a fake Google Account security page to steal passcodes and more

Threat actors weaponize OAuth redirection logic to deliver malware

UK academia strong, but still at threat from cyber attack

University of Hawaiʻi Cancer Center says up to 1.2 million affected in ransomware breach

University of Hawaii Cancer Center Breach Exposes SSNs of 87,000+ Participants

University of Hawaii Cancer Center confirms data compromised

University of Hawaii (UH) Cancer Center data breach affects nearly 1.2 million people

“We go bankrupt:” stolen Gemini API key turns $180 monthly bill into $82K catastrophe, developer says

Wild pack without a leader: pro-Iranian hackers already active in wake of US-Israeli strikes

Wisconsin ‘Denmark School District’ Cyber Incident Triggering Network Outage Claimed by INC Ransom

2nd March

4 Data Security Incidents to Know About

A new app alerts you if someone nearby is wearing smart glasses

After the hack: why Odido’s crisis is only getting bigger

Agent Tesla Phishing Campaign Uses Process Hollowing To Evade Security Tools

AI is placing maritime industry at greater risk of cyber-attack

AI Overviews Rife With Scam Phone Numbers

AI placing maritime industry at risk of cyber attack

AI risk moves into the security budget spotlight

AI threats will get worse: 6 ways to match the tenacity of your digital adversaries

AI Tools Are Supercharging Hackers

AkzoNobel Suffers Data Breach by Anubis Ransomware Group

Alabama man pleads guilty to hacking, extorting hundreds of women

All data from Dutch telco Odido’s 6.5 Million customers leaked online

Alleged India-linked espionage campaign targeted Pakistan, Bangladesh, Sri Lanka

APT28 Exploits MSHTML Zero-Day Ahead of February 2026 Patch Tuesday

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before February 2026 Patch Tuesday

BE-ATEX Data Breach Exposes Customer and Employee Information

British authorities issue cyber alert as former FBI chief warns Iran will retaliate with ransomware and digital sabotage

British organizations urged to be alert to threat of Iranian cyberattacks

Building Detroit Data Breach Allegedly Exposes 185,000 Records

Bumble Faces Lawsuit Over “Preventable” Data Breach

Canadian Tire data breach affects over 38 million accounts

Chilean National Extradited to U.S. Over Stolen Credit Card Data Trafficking Scheme

Claude Code Weaponized in Mexican Government Cyberattack, Exposing Roughly 195 Million Identities

ClawJacked Bug Enables Covert AI Agent Hijacking

Compromised Go Crypto Package Delivers Rekoobe Malware To Dev Systems

Conduent Data Breach: 25 Million Exposed. What to Do Now?

Coupang Q4 Profit Plunges 97% Following Major Data Breach

Cyberattack briefly disrupts Russian internet regulator and defense ministry websites

CyberStrikeAI tool adopted by hackers for AI-powered attacks

Data Breach Exposes 25 Million Americans in What Texas Calls the Largest US Hack in History

Data Breach Prompts Lawsuit Against Clackamas Community College

DDoS and Website defacement might increase on US Networks says Department of Homeland Security (DHS)

Den kulturelle skolesekken Data Breach Exposes 1.3 Million Records

Dohdoor Malware Targets U.S. Schools and Healthcare In Multi-Stage Campaign

Don’t Click Yet: How to Recognize a Phishing Scam Fast

DuckDuckGo Browser UXSS Flaw in AutoConsent JS Bridge Enables Cross-Origin Code Execution

Excel Healthcare Receivable Management & Consulting Data Breach Impacts Health Information

Expect Iran to Launch Cyber-Attacks Globally, Warns Google Head of Threat Intel

Fake Google Security site uses Progressive Web App (PWA) to steal credentials, MFA codes

Fake Zoom Update Scam Infects 1,437 Users, Deploys Surveillance Malware In Just 12 Days

Florida woman imprisoned for massive Microsoft license fraud scheme

Foom Cash Recovers $1.84 Million After $2.26 Million Exploit With Help From White Hat Hacker

French firm making Airbus and Boeing parts faces cyber threat

Fundacão Getulio Vargas (FGV) Suffers Ransomware Attack

German court convicts alleged mastermind behind global investment scam network

Growing AI use by maritime sharply increases the risk of a cyber attack

Grupo D’arc Suffers Ransomware Attack by Qilin Group

GTFire Phishing Campaign Exploits Google Services to Bypass Detection and Harvest Credentials

GTFire Phishing Scheme Abuses Google Services to Evade Detection and Steal Credentials

Hacked Prayer App Weaponized in Cyber Operations Amid US-Israel Strikes on Iran

Hackers and internet outages hit Iran amid U.S. air strikes

Hackers exploit .arpa domains for sophisticated phishing attacks

Hackers hijack .arpa domain for phishing scams - hosting malicious websites and domains where no one can spot them

Hackers infiltrated Iran's popular prayer app and posted political messages

Hackers Leverage Campaign Platform To Bypass Google Ads Security and Promote Malicious Ads

Hacktivists claim to have hacked Homeland Security to release ICE contract data

Hotel hacker arrested after digital fraud involving paying 1 cent for luxury suites

Hundreds of FreePBX instances infected by web shells exploiting command injection vulnerability

Hybrid Middle East Conflict Triggers Surge in Global Cyber Activity

Identity attacks rise to 67% of incidents

IDMERIT breach: How hackers turn fake news into ransomware

INC Ransomware Breaches Ramet-Trom, LKE Group, Abrams, Denmark High School

Iran-US conflict triggers internet blackout, cyberattacks, and UAE misinformation warning

Iran's cyberwar has begun

Iranian Apps, Websites Hacked Following US-Israeli Strikes

Israel Faced Record Cyber Threats in 2025 as Alerts Surged

Israeli MOSSAD Sophisticated Cyber Attack Against Pakistan Media

Madison Square Garden Data Breach Confirmed Months After Hacker Attack

Maritz Holdings Data Breach Exposes Social Security Numbers

Meta AI in WhatsApp organizes chats and reopens privacy issues

Nephrology Associates Data Breach Exposes Social Security Numbers

New Chrome Vulnerability Let Malicious Extensions Escalate Privileges via Gemini Panel

North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT

OAuth redirection abuse enables phishing and malware delivery

OCRFix Botnet Trojan Leveraging ClickFix Phishing and EtherHiding to Conceal Blockchain-Based Command Infrastructure

OCRFix Botnet Uses ClickFix Phishing and EtherHiding to Mask Blockchain C2 Infrastructure

OneUptime Command Injection Flaw Enables Full Server Takeover

Pakistan cyber attack targets Indian TV channel ABP News

Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages

Pakistani news channels hacked with pro-Mossad messages

PayPal Loan App Customer Data Breach Results in Unauthorized Transactions and Refunds

Phishing Pages for Zoom and Google Meet Install Teramind Monitoring Tool

PIH Health Discloses Data Breach Exposing SSNs, Health Information, and More

Popular Iranian App BadeSaba was Hacked to Send “Help Is on the Way” Alerts

Protecting the Most Vulnerable: Lessons from Last Year’s Nursery Cyber Attack

Purchase order attachment isn’t a PDF. It’s phishing for your password

Ransomware has changed - and so must public sector organisations

Ransomware Payments Decline 8% as Attacks Surge 50%

Remote-working breaches as phishing fears reach record high

Rhysida Ransomware Attack Hits Southold Police and Senior Services

Rising Network of Teenage Hackers: From Data Theft to Digital Extortion, Cyber Threat Becomes More Serious

Security debt is becoming a governance issue for CISOs

South Korea Tax Office Leaks Cryptocurrency Assets, Critical Failure Leads to Wallet Breach

Study Finds Phishing Scams Are on the Rise, Accelerated by AI

Teramind stealthily spread via Zoom, Google Meet-exploiting phishing schemes

The InterTech Group Data Breach Exposes Social Security Numbers

The Top Ways Attackers Infiltrate Systems Today

This purchase order PDF is fake, malicious, and after your password

Turkcell Superonline Customer Data Breach Exposes PII

UK reduces cyberattack fix times from two months to eight days

UK warns of Iranian cyberattack risks amid Middle-East conflict

Ukrainian hacker pleads guilty to running OnlyFake AI ID scam site

University of Hawaiʻi Cancer Center confirms data leak following ransomware attack

University of Mississippi Medical Center (UMMC) operations return to normal after cyber-attack

University of Mississippi Medical Center phones working after cyberattack

University of Mississippi Medical Center (UMMC) reopens clinics shut down by ransomware attack as recovery progresses

University of Mississippi Medical Center (UMMC) restores phone lines after ransomware attack

University Spine Center Discloses Data Breach to Department of Health and Human Services (HHS)

Unprecedented GitHub hacking spree: “security research” AI bot compromises major repositories from Microsoft, Datadog, and others

Valley Radiology Consultants Medical Group Discloses September Data Breach

Vietnam Announces National Cybersecurity Firewall Plan Under New Digital Governance Law

Why encrypted backups may fail in an AI-driven ransomware era

Why enterprise AI agents could become the ultimate insider threat

Your dependencies are 278 days out of date and your pipelines aren’t protected