Welcome to DBD. On March 8th, DBD celebrated it's 5th anniversary and 
Dentons Senior Analyst, Washington DC
Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 31st March and 6th April 2025.6th April
5 ways to avoid email business phishing scheme
10 Best Ransomware File Decryptor Tools
Australian cab service 13cabs reveals a significant customer data breach
Carding tool abusing WooCommerce API downloaded 34K times on PyPI
Clicked on a phishing link? 7 steps to take immediately to protect your accounts
Cyber attack on Mercer County hospital impacted close to 90,000 patients
E-ZPass toll payment texts return in massive phishing wave
Hackers access personal information in Tasmanian Government data breach
Hackers stole payment card details from the City of Lubbock's utility payment portal
Millions Affected by Largest US Data Breach – How to Check If You are also Affected?
Oracle privately notifies Cloud data breach to customers
Over 200 Million X User Records Exposed in Massive Data Breach: Cybersecurity Alert Issued
Real estate firm Siegel Group confirms a major customer data breach
Record phishing attacks lead cybercrime surge in Türkiye, police detect 60K online fraud cases
Twilio Stock Tumbles On Report Of Data Breach, Company Says 'No Evidence' To Suggest It Happened
5th April
56% of Cyberattacks Exploit Valid Credentials
AI-generated Aadhaar, PAN cards spark debate on privacy, data breach
Australian Super Funds Hit by Major Cyber Attack: What Members Need to Know
Can AI Outsmart Ransomware 2.0 Before It’s Too Late?
Chinese hacker identified in Taiwan’s MacKay hospital ransomware attack, Criminal Investigation Bureau (CIB) reports
City Of Chattanooga Affected By Nationwide Recovery Services Data Breach
Cybercriminals shift focus to mobile devices, crypto assets
“Gay Furry Hacker” group’s former leader may have been raided by FBI
Hackers Intensify Crypto Scams with 83% More Attacks detected in 2024
How to be alert to investor risks from SMS phishing scams
Kellogg’s Confirms Data Breach Affected Servers that Sent Files to Human Resources
Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data
Maryland pharmacist used keyloggers to spy on coworkers for a decade, victim alleges
MGM Resorts Reaches $45 Million Settlement With Federal Trade Commission (FTC) Over Data Breach
Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws
North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages
Protect Your Investments: Top Tips to Dodge SMS Phishing Scams
Scam Emails Explained: How to Protect Yourself from Phishing and Fraud
Taiwan Hospital Ransomware Attack: Chinese Hacker Unveiled
Top Cybersecurity Concerns in 2025: Key Statistics You Must Know
WinRAR flaw bypasses Windows Mark of the Web security alerts
4th April
1.5 Million Explicit Images Leaked From Dating Apps, Including BDSM And LGBTQ+ Platforms
7 password rules security experts live by in 2025 - the last one might surprise you
16 months after they experienced a ransomware attack, Dameron Hospital notifies those affected
$500K Believed To Have Been Stolen From Aussie Superfunds In Data Hack Scandal So Far
$500,000 stolen in Australian super fund data breach
AI is now better than humans at phishing
Australia's data breach costs hit record AUD $4.26m
Australian pension funds hit by cyber attack affecting thousands
Australian pension funds hit by wave of credential stuffing attacks
Australian super system caught unprepared for cyber attack
Australian superannuation funds hit by cyber attacks, with members' money stolen
AustralianSuper data breach and $500K theft explained: Is your retirement safe?
AustralianSuper, Rest, ART Among Victims in Widespread Superannuation Cyberattacks
Beware of Fake Unpaid Toll Message Attack to Steal Login Credentials
Beware! Fake Unpaid Tolls Messages Used in Phishing Attack to Steal Login Credentials
CERT-UA Reports Cyberattacks Targeting Ukrainian State Systems with WRECKSTEEL Malware
Chinese State Hackers Exploiting Newly Disclosed Ivanti Flaw
Chinese threat actor jumps on misdiagnosed RCE in Ivanti VPN appliances
CISA warns of latest Ivanti firewall bug being exploited by suspected Chinese hackers
City of Chattanooga says it was also affected by data breach
Connected cars drive into a cybersecurity crisis
Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware
Cyber Agencies Warn of Fast Flux Threat Bypassing Network Defenses
Cyber attacks target Australian superannuation funds, members report account lockouts and missing funds
Cyber Insurance Market Adapts to Evolving Threats
Cyberattack affects major Aussie superannuation funds: Hostplus, Rest and AustralianSuper caught up in hack
Cybercriminals are trying to loot Australian pension accounts in new campaign
Data compromise confirmed by Highline Public Schools
DDoS attack cripples Dutch hosting company Argeweb for over a week
DDoS Attacks Now Key Weapons in Geopolitical Conflicts
DeepSeek-R1 Prompts Abused to Generate Advanced Malware and Phishing Sites
DeepSeek-R1 Prompts Exploited to Create Sophisticated Malware & Phishing Pages
EncryptHub Ransomware Uncovered Through ChatGPT Use and OPSEC Failures
EncryptHub Ransomware Unmasked Using ChatGPT & OPSEC Mistakes
Europcar GitLab breach exposes data of up to 200,000 customers
Evasive "fast flux" technique is latest national security threat, CISA warns
Forward-thinking CISOs are shining a light on shadow IT
Four in ten Irish businesses have suffered a cyber-attack in the last five years
Free VPN apps linked to Chinese military: over 70 million downloads
Go phish: Why the sudden rise in phishing attacks?
Hackers abuse Tax Day lure to steal credentials and deploy malware
Hackers Exploit Fast Flux to Evade Detection and Obscure Malicious Servers
Hackers Leveraging URL Shorteners & QR Codes for Tax-Related Phishing Attacks
Hackers strike Australia's largest pension funds in coordinated attacks
Hackers use Booking.com scam to hijack hotels
Hackers Use URL Shorteners and QR Codes in Tax-Themed Phishing Attacks
How Cyber Criminals Are Exploiting QR Codes for Phishing Attacks
Hunters International Dumps Ransomware, Goes Full-on Extortion
Hunters International rebrands away from ransomware
Insignia platform breached amid ‘unsettling’ super sector cyber attack
Jamaica: Suspects charged in National Commercial Bank (NCB) $47.5 million phishing scam
Lawmakers seek to close loophole limiting Secret Service investigations into cyber laundering
Lawsuit filed against Le Mars trucking firm over data breach
Leader of gay furry hacker group has home raided by FBI
Life University Confirms Data Breach Following July 2024 Cybersecurity Incident
LiUNA Announces Data Breach Following Confirmed Ransomware Attack
Longtime ‘Fast Flux’ Evasion Technique Now a National Security Threat
Major Australian superannuation funds targeted in cyberattack, with some customers believed to have savings drained from accounts
Major Cyber Attack Targets Australia's Pension Sector
Major superannuation cyber attack update after 'retirement funds stolen' in co-ordinated security breach
Mass Data Leak of 2.8 Billion X and Twitter User Profile May Have Been Work of Disgruntled Former Employee
Medusa Rides Momentum From Ransomware-as-a-Service Pivot
Medway Community Healthcare still recovering from 'cyber-attack'
Minnesota Tribe Struggles After Ransomware Attack
Nevro Files Notice of Data Breach Affecting Confidential Consumer Information
New PoisonSeed Attacking CRM & Bulk Email Providers in Supply Chain Phishing Attack
North Korean Hackers Disguised as IT Workers Targeting UK, European Companies
NSA and Global Allies Declare Fast Flux a National Security Threat
OPSEC Failure Exposes Coquettte's Malware Campaigns on Bulletproof Hosting Servers
Oracle admits data breach to some clients, investigations underway
Oracle Confirms The Data Breach - Starts Initiating Client Notifications
Pakistan: Government Issues Cybersecurity Warning Following Alleged Oracle Cloud Data Breach
Phishing Campaign Targets Users Of Monex Securities
PoisonSeed phishing campaign behind emails with wallet seed phrases
PoisonSeed Targets CRM and Bulk Email Providers in New Supply Chain Phishing Attack
Port of Seattle says 90,000 people impacted in 2024 ransomware attack
Port of Seattle says ransomware breach impacts 90,000 people
Ransomware: The Final Frontier
Royal Mail investigates data leak
Royal Mail Suffers Major Data Breach Involving 144GB of Leaked Files
Russia jails hacker for two years over cyberattack on local tech company
Russian Android users hit with preloaded Triada trojan
Samsung Germany data breach exposes 270,000 customer support records
SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack
State Bar of Texas confirms data breach following ransomware gang's claims
State Bar of Texas Confirms Data Breach Started Notifying Consumers
Super account holders defrauded of hundreds of thousands in cyber attack
Super security fears as customer's disturbing revelation raises questions about when the massive cyber attack that hit five major funds really started
Texas city warns thousands of utility payment site breach
Texas State Bar hit by possible ransomware attack, warns of data breach
The threat of phishing attacks and law enforcement’s role
Tj-actions Supply Chain Attack Traced Back to Single GitHub Token Compromise
3rd April - World Cloud Security Day
2024 Ransomware Attack Compromised Data From Highline Schools, Washington
AI coding sounds great, until you realize it breaks, and leaks everything
AI Image Site GenNomis Exposed 47GB of Underage Deepfakes
Alleged Data Leak Targets Indonesian Ministry of Transportation
ALN Medical Management Data Breach Affects Patients of Teledigm Physician Services
Amateur Hacker Leverages Russian Bulletproof Hosting Server to Spread Malware
Attackers are leveraging Cisco Smart Licensing Utility static admin credentials (CVE-2024-20439)
Babuk2 and the dark art of ransomware data commoditisation
Beware fake AutoCAD, SketchUp sites dropping malware
Blogpost Based Phishing: A New Playground for Threat Actors
Building a cybersecurity strategy that survives disruption
Canadian hacker Cottle faces charges after allegedly stealing Texas Republican Party data
Cargills Bank Assures Customers of Security Amid Cyber Attack
Cargills Bank says core operations unaffected by data breach
Chinese hacker behind ransomware attack on MacKay Hospital, others
Chinese hacker targeting hospital identified
CISA warns of Fast Flux DNS evasion used by cybercrime gangs
CISA’s Latest Advisories Expose High-Risk Vulnerabilities in Industrial Control Systems
Class-Action Lawsuit Targets Oracle for Alleged Data Breach
Crooks target Spotify and Apple Music to attack users
CrushFTP Vulnerability Exploited Following Disclosure Issues
Cybercriminals exfiltrate data in just three days
Cybercriminals Offer Access to 'Lucid' Phishing Platform to Target iPhone, Android Phones in 88 Countries
Cybersecurity Leaders, CTS Technology Solutions, Infiltrate Rhysida Ransomware Command Center to Uncover Attack Tactics
DNS Deep Diving Into 2025’s Up and Coming Ransomware Families
EvilCorp and RansomHub Collaborate to Launch Worldwide Attacks on Organizations
Evolve to settle data breach lawsuit for nearly $12M
Gay furry hacker leader ‘raided by FBI’ after Project 2025 details leaked
Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent
Greece: Students eye legal action over alarming data breach
Hacker Claims Twilio’s SendGrid Data Breach, Selling 848,000 Records
Hackers Abuse Cloudflare Services for Sophisticated Phishing Attacks
Hackers Exploit Stripe API for Web Skimming Card Theft on Online Stores
Hackers hit Ukrainian state agencies, critical infrastructure with new ‘Wrecksteel’ malware
Hackers target Aussie pensioners in major super fund cyber attack
Hamilton County investigates data breach affecting 14,000 ambulance customers
HellCat Ransomware: What You Need To Know
Hospitals need unified strategy vs ransomware
Hunters International Overlaps Hive Ransomware Attacking Windows, Linux, and ESXi Systems
Hunters International Ransomware Gang Rebranding, Shifting Focus
Hunters International shifting tactics amid growing risks
Hunters International shifts from ransomware to pure data extortion
Infected 4G/5G routers secretly send SMS messages and drain accounts
Iowa Department of Transportation (DOT) Warns Consumers of Text Phishing Scam
Ivanti patches Connect Secure zero-day exploited since mid-March
Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)
Jamaica: Major Organised Crime and Anti-Corruption Agency (MOCA) makes two more arrests in phishing scam targeting NCB accounts
Kelly Benefits Notifies Guardian Life Insurance Customers of Data Breach Affecting Their Sensitive Information
Lazarus and other North Korean threats: how hackers steal billions from US companies
Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost Malware
Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign
Max severity RCE flaw discovered in widely used Apache Parquet
Medusa Ransomware: Evolution of Cyber Extortion
Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware
NCC report reveals cyber threats to UK emergency services
Nearly 600 Phishing Domains Emerge Following Bybit Heist
New Phishing Campaign Attacking Investors to Steal Login Credentials
New Phishing Campaign Targets Investors to Steal Login Credentials
North Korean hacker group cashes in on crypto trade
Open-source malware doubles, data exfiltration attacks dominate
Oracle Acknowledges Data Breach and Starts Informing Affected Clients
Oracle privately confirms Cloud breach to customers
Oracle tells clients of second recent hack, log-in data stolen
Over 173,000 people impacted in Tennessee dental care provider breach
Over Half of Attacks on Electricity and Water Firms Are Destructive
Phishers are increasingly impersonating electronic toll collection companies
Phishing Attacks Lead to Theft in the Shipping Industry
Phishing Scams: Here's How To Recognise Them And Keep Yourself Safe
Poland’s prime minister says cyberattack targeted his party as election nears
Putnam Sheriff says student ransomware attack came from out-of-state
Qilin Operators Mimic ScreenConnect Login Page to Deliver Ransomware & Gain Admin Access
RansomHub attack disrupts Minnesota tribal community systems
Ransomware remains the greatest cyber threat to operational technology
Ransomware Report Shows Surge in New Players
Recent GitHub supply chain attack traced to leaked SpotBugs token
Red Piranha Shuts Down Ransomware Gang Targeting Australian Legal Sector
Rhysida ransomware group claims major data theft from Forrest City School District
Royal Mail Investigates Cyber-attack Claim of 144GB Leaked Data
Royal Mail investigates potential data breach following leak of 144GB of stolen data
Royal Mail investigating possible data breach after supplier targeted
Russia captures Ukraine drone infected with malware
Scam Kill Chain – what is it, and how can it help fight cybercrime?
Scammers stealing tax returns from thousands of Americans
Securing critical infrastructure: The path to phishing-resistant authentication
Sensitive Data Breached in Highline Schools Ransomware Incident
Sensitive Data From Parking Payment Platform Allegedly Leaked
Sophisticated QR Code Phishing Attack Targeting Microsoft 365 Users to Steal Logins
Suspected Russian Cyber Attack Hits Ukraine’s State Railway Operator Ukrzaliznytsia, Disrupting Operations
Texas State Bar warns of data breach after INC ransomware claims attack
Thailand Post Data Breach: 19 Million Customer Records Allegedly for Sale on Dark Web
The Evolution of Smishing: 3 Ways to Detect and Prevent Attacks
The Social Security data breach compromised 'billions' of accounts. Here's how to protect yourself
Threat Actor Claims to Sell Sensitive Information Belongs to BajajCapital
Threat Actors Allegedly Selling SnowDog RAT Malware With Control Panel on Hacker Forums
Threat actors leverage tax season to deploy tax-themed phishing campaigns
TikTok set to face €500 million fine over EU data breach to China
Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices
Trump’s Signalgate proves, once again, that human error is still the number one cybersecurity threat
UK Announces Stricter Cyber Reporting Rules for Critical Infrastructure
UK’s Royal Mail investigates major data breach
US, Australia, Canada warn of ‘fast flux’ scheme used by ransomware gangs
Verizon Call Filter leaks call records, exposing millions of Americans
Warning: QR Code Phishing (Quishing) Becoming Increasingly Stealthy
Watch Out Louisiana – A Massive Data Breach of Elon Musk’s X Could Leave You Exposed
2nd April
5 Questions CISOs Should Ask Third-Party Vendors
All organizations are vulnerable to browser ransomware. Here's why
Alleged Access to Mexican Territorial Operating System Exposes Thousands of Records
Alleged Data Breach of Thailand Post Exposes 19M Records
ALSO Cloud UK highlights need for robust, proactive cybersecurity measures against ongoing ransomware threats
Apple Backports Zero-Day Patches to Older Devices in Latest Security Update
Balancing data protection and clinical usability in healthcare
Be Alert to Investor Risks from SMS Phishing Scams
Boosting Cyber Attack Resilience with an Optimized Simulation Training Approach
Browser-Native Ransomware Adds to Threat Risks
Bybit Heist Fuels Record Crypto-Theft Surge
Canon Printer Drivers Flaw Could Let Hackers Run Malicious Code
Check Point plays down impact of alleged breach
China’s FamousSparrow APT Hits Americas with SparrowDoor Malware
Cisco warns of CSLU backdoor admin account used in attacks
Clicked on a phishing link? Take these 7 steps ASAP to protect yourself
Counterfeit Android devices found preloaded With Triada malware
Crimelords at Hunters International tell lackeys ransomware too 'risky'
Cybersecurity is the second highest business concern for SMBs
Devastating security failure hits “Gay Daddy” dating app: 50K users exposed
DragonForce Claims to Be Taking Over RansomHub Ransomware Infrastructure
Evolving strategies essential amidst AI-driven cyber threats
FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites
For healthcare organizations, disaster recovery means making sure doctors can save lives during ransomware infection
“Gay Furry Hacker” Group Leader Has Allegedly Been Raided and Arrested by the FBI
Genetic data site openSNP to close and delete data over privacy concerns
GitHub expands security tools after 39 million secrets leaked in 2024
Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse
Google is making sending end-to-end encrypted emails easy
Google simplifies end-to-end encrypted emails for businesses on Gmail
Gray Bots Surge as Generative AI Scraper Activity Increases
Hacker claims over 200 million X users data leaked
Hacker Leaks 144GB of Royal Mail Group Data, Blames Supplier Spectos
Hacker Leaks 270,000 Samsung Customer Records - Stolen Credentials Were Left Unchecked for Years
Hacker linked to Oracle Cloud intrusion threatens to sell stolen data
Hacker Steals $5.4M from zkLend - Then Gets Scammed
Hackers are using QR codes to steal your login info – and it’s working
Hackers steal even micro crypto tokens as $70M theft hits UPCX
Hamilton County investigates data breach affecting 14,000 ambulance customers
Houston Housing Authority reports data breach affecting over 30,000 Texans
Huge data breach sees 50,000 profiles LEAKED from 'Gay Daddy' dating app - exposing users' names, private photos, and HIV status
Information Commissioner’s Office (ICO) Apologizes After Data Protection Response Snafu
Information Commissioner’s Office (ICO) Fines Advanced Computer Software Group £3 Million Following Ransomware Attack
Karl Malone Auto Group Files Notice of Recent Data Breach
'Largest breach ever': Massive data breach at Musk's X leaks over 200 million users' email addresses, photos and more
Latest Ivanti bug, paired with malware, earns an alert from CISA
Malaysian Airport's Cyber Disruption a Warning for Asia
Malicious IPs suddenly started scanning PAN-OS firewalls
Massive 2.9B-user Twitter leak less serious than feared
Microsoft Teams, other tools exploited in new vishing scam
MSPs remain targets for ransomware attacks
National Presto Industries claimed to be compromised by InterLock ransomware gang
Native tribe in Minnesota says cyber incident knocked out healthcare, casino systems
New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth
North Korea's Fake IT Worker Scheme Sets Sights on Europe
North Korean IT worker scam spreading to Europe after US law enforcement crackdown
North Korean IT workers set their sights on European organizations
Only 1% of malicious emails that reach inboxes deliver malware
Oracle Staff Tell Some Clients Hacker Stole Login Credentials
Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
Pennsylvania Bankers warns consumers of uptick in phishing scams
Prince Ransomware – An Automated Open-Source Ransomware Builder Freely Available on GitHub
QR Code Phishing (Quishing) Attacks Your Smartphones To Steal Microsoft Accounts Credentials
Ransomware Is a Core Threat Across 93% of Industries – Resilience Key
Romanian Security Firm Allegedly Breached Affecting 586K Customers
Royal Mail confirms cyber attack resulting from third-party provider Spectos
Royal Mail Investigates Data Breach Affecting Supplier
Royal Mail investigates data leak claims, no impact on operations
Steam Surges to Top of Most Spoofed Brands List in Q1
Still Using an Older Version of iOS or iPadOS? Update Now to Patch These Critical Security Vulnerabilities
Stripe API Skimming Campaign Unveils New Techniques for Theft
The Siegel Group Announces Data Breach Following Early 2025 Cyberattack
This Is the Most Damaging Cyber Attack in History
Threat actor using vishing, MS QuickAssist and Teams can potentially drop ransomware
Top Data Breaches of March 2025
Top gig platform service may have leaked over 14 million user files
Trump’s national security adviser reportedly used his personal Gmail account to do government work
Two ransomware incidents highlight how attackers target security blind spots
Verizon Call Filter API flaw exposed customers' incoming call history
What Are The Most Scammed Brands of 2025 So Far?
What business leaders need to know about the Cyber Security and Resilience Bill
When it comes to security, public Wi-Fi could be a risky choice for commuters worldwide
Who’s driving ransomware’s accelerated growth in 2025
Why banning ransomware payments is only a limited fix
World Cloud Security Day: The Growing Threat of Ransomware & Data Breaches
X Breach: Here's what hackers can do with the leaked information
Years-old login credential leads to leak of 270,000 Samsung customer records
Your smart home may not be as secure as you think
ZkLend Hacker Loses Stolen ETH to Phishing Scam
1st April
173,000 Patients Affected by Chord Specialty Dental Partners Email Data Breach
A Crypto Disaster: zkLend Hacker Loses 2,930 Stolen ETH to Fake Tornado Cash - The Shocking Details Revealed
AI has ushered in a new kind of hacker
Akira Ransomware Group Claims Cyberattack on Spain’s STE Group and Exfiltrating 30GB of Data
Alleged Schneider Electric data posted following November ransomware incident
Apple Backports Critical Fixes for 3 Recent 0-Days Impacting Older iOS and macOS Devices
Apple backports zero-day patches to older iPhones and Macs
Attackers are probing Palo Alto Networks GlobalProtect portals
Australia: 13cabs may have suffered a major data breach
Australia: New South Wales police investigating online court registry data theft
Baiting for small fish or a whale: Here is how scammers customise their phishing attacks to steal money
California Cryobank faces class action suit over 2024 data breach
Canon CVE-2025-1268 Vulnerability: A Buffer Overflow Threatening Printer Security
Check Point Acknowledges Data Breach, Claims Information is ‘Old’
Check Point Data Breach: Big Deal or Big Bluff?
Check Point denies severity of alleged data breach amid hacker claims
China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions
Chord Specialty Dental Partners Data Breach Exposes Customer Personal Data
ClickFix technique leveraged in new crypto-targeted Lazarus attacks
Coinbase security under fire after $46M phishing attacks
Coinbase Users Hit by $46M in Phishing Scams
Companies battle rising ransomware threats
Critical auth bypass bug in CrushFTP now exploited in attacks
Cyber attack impacts operations at South Africa's top poultry supplier Astral Foods
Cyber Security and Resilience Bill Will Apply to 1000 UK Firms
Cybercriminals Expand Use of Lookalike Domains in Email Attacks
Cybersecurity Breach at Capilano University (CapU)
Digital disruptions continue for Russian transportation, this time at state railway
Don’t take the bait: Essential tips to protect your business from phishing
Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform
Even more active North Korean IT workers now targeting Europe
Evolution of Sophisticated Phishing Tactics: The QR Code Phenomenon
FBI investigating cyberattack at Oracle
Federal Trade Commission (FTC) head says 23andMe genetic data safe in wake of bankruptcy sale
Former GCHQ Intern Pleads Guilty to Smuggling Top Secret Data
Generative AI Is reshaping financial fraud. Can security keep up?
Gig platform app Yoojo leaks millions of user files
Global iOS, Android SMS phishing facilitated by Lucid PhaaS platform
Google rolls out easy end-to-end encryption for Gmail business users
Google says easy email encryption is on the way - for some users
Google to Switch on End-to-End Encryption (E2EE) for All Gmail Users
Hacker Claims Breach of Check Point Cybersecurity Firm, Sells Access
Hacker falls victim to phishing scam after exploiting ZkLend for millions
Hacker Loses 2,930 ETH to Phishing While Laundering via Tornado Cash
Happy 21st Birthday, Gmail! Google’s Present to Enterprise Gmail Users: End-to-End Encryption
Help! I clicked on a phishing link - now what?
Hong Kong: Fashion firm found at fault for data breach
How cybercriminals exploit AI for April Fool’s day phishing scams
How to build an effective cybersecurity simulation
How to talk to your family and friends about online security - before it's too late
I Froze My Kids' Credit After a Data Breach. Here's Why You Should Too
Infostealer malware poses potent threat despite recent takedowns
Lawmakers warn of impact Department of Health and Human Services (HHS) firings will have on medical device cybersecurity efforts
LensDeal Data Breach Exposes 100,000 Customers’ Personal Information
Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing
Man charged after cyber attack saw terror messages displayed at train stations
Man, 36, is charged over Network Rail 'cyber attack' at 19 railway stations after passengers logging onto public wi-fi were shown 'terror messages'
Massive 400GB X (Twitter) Data Leak Surfaces on Hacker Forums
Meerkat Mayhem: Phishing-as-a-Service Unleashed
Microsoft Teams Vishing Used to Deploy Malware via TeamViewer
Morphing Meerkat leads sophisticated phishing operation
Moscow Metro Digital Outage: Alleged Cyberattack or Technical Failure?
Moscow Metro targeted in likely retaliatory cyberattack
Most Phishing Emails Rely Purely on Social Engineering
Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign
New Phishing Attack Combines Vishing and DLL Sideloading Techniques
New York University (NYU) hit with 10 class action lawsuits following data breach
North Korea home to multiple threat actors, not just Lazarus
North Korean IT worker army expands operations in Europe
Ongoing Gamaredon phishing campaign targets Ukraine with Remcos RAT
Oracle Cloud Data Breach Claims Surface Despite Company Denials
Oracle Health data breach possibly compromised millions of patients' data
Oracle Hit with Lawsuit Over Alleged Cloud Breach Affecting Millions
Oracle warns customers of health data breach amid public denial
Over 200 Million X User Records Allegedly Leaked Online
Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign
Phishing scams caused €5.6 million in damage in 2024
Phishing Twist: zkLend Hacker Being Scammed 2,930 ETH
Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream
Ransomware Never Disappeared - and in 2025, It’s Worse Than Ever
Researchers are warning Android users about Crocodilus banking Trojan
Royal Mail customer data stolen in massive attack, hackers claim
Royal Mail suffers alleged data breach as threat actor claims 144GB stolen
Russia tightens cybersecurity measures as financial fraud hits record high
Samsung Germany customer data exposed in credential breach linked to third-party vendor
Security Firm Reveals Voice Phishing Attack Targeting Microsoft Teams
SIR.trading begs hacker to return $255K or ‘no chance for us to survive’
Someone stole the stolen money from ZKLend
Tables Turned: zkLend Hacker Scammed Out of Millions
Tax scams intensify ahead of tax filing deadline
The human side of insider threats: People, pressure, and payback
UK: Man charged over train station cyber attack
UK GDPR Regulator Fines Data Processor After Ransomware Attack
UK sets out new cyber reporting requirements for critical infrastructure
Ukraine Blames Russia for Railway Hack, Labels It "Act of Terrorism"
What Really Happens in a Data Breach (and What You Can Do About It)
Why delaying software updates is a terrible idea
Why global tensions are a cybersecurity problem for every business
Why multi-factor authentication is absolutely essential in 2025
Why no small business is too small for hackers - and 8 security best practices for SMBs
Why paying the ransom is not the answer
Will using a VPN help protect you from malware or ransomware?
World Backup Day: Why Human Error Remains the Biggest Threat to Data Protection
WP Ultimate CSV Importer Flaws Expose 20,000 Websites to Attacks
ZkLend exploit backfires as hacker loses $9.6 million in ETH to phishing scam
zkLend hacker claims losing stolen ETH to Tornado Cash phishing site
zkLend Hacker Gets a Taste of Instant Karma: $5.4M in Stolen ETH Lost to Phishing Scam
ZkLend Hacker Gets Hacked: Loses $5.4M Stolen ETH in Phishing Scam
zkLend hacker loses all 2,930 stolen ETH to TornadoCash phishing scam
31st March - World Backup Day
65% of the 100 largest US hospitals and health systems have had a recent data breach
200 Million X User Records Released - 2.8 Billion Twitter IDs Leaked
A fake Zoom app is spreading – and it’s harvesting your data
A ransomware attack through an IP camera
ABYSSWORKER: Malicious driver disables security tools
API testing firm APIsec exposed customer data during security lapse
Belgium: Reports of phishing down sharply in 2024
Beware! A Fake Zoom Installer Drops BlackSuit Ransomware on Your Windows Systems
Bitdefender Threat Debrief: March 2025
British intel intern pleads guilty to smuggling top secret data out of protected facility
Bromley man accused of cyber attack on trains to 'incite religious hatred'
Browser-native ransomware threat examined
Canadian hacker arrested for allegedly stealing data from Texas Republican Party
CISA Details New Malware Used in Ivanti Attacks
CISA reveals new malware variant used on compromised Ivanti Connect Secure devices
CISA warns new malware targeting Ivanti zero-day vulnerability
CISA, FBI warn healthcare, other critical sectors about Medusa ransomware
ClickFake Interview Campaign by Lazarus Targets Crypto Job Seekers
ClickFix Captcha – A New Technique Hackers Used to Deliver Infostealers, Ransomware, & Quakbot Malware
Clop ransomware admits Sam’s Club compromise
Coinbase users hit by $46M in suspected phishing scams
Coinbase Users Lose $46M in Crypto Phishing Scams
Coinbase Users Report Millions Lost to Phishing Scams in March
Coinbase Users Suffered $46 Million Loss from Phishing Scams in March 2025
Coinbase Victim of Latest Phishing Scam, Users Lose over $46 Million
Contractor Brighton Australia listed on SafePay’s ransomware leak site
Cryptocurrency Caper: Notorious Hacker Falls Prey to Elaborate Scam - Mystery Unravels in $9.6 Million Heist!
Daisy Cloud Hacker Group Exposed 30K Login Credentials Across a Wide Range of Services
Data breach at Oracle Health leads to extortion of hospitals
Department of Justice (DOJ) charges hacker for 2021 Texas GOP website defacement
Ex-GCHQ employee pleads guilty to secret data breach risking national security
Ex-GCHQ intern admits risking national security with data breach
Fake Zoom installer tries to trick users into installing dangerous ransomware – here’s how to stay safe
Federal Trade Commission (FTC) says 23andMe purchaser must uphold existing privacy policy for data handling
Find out what to do in the event of a cyber attack on your business
Former GCHQ intern admits top secret data breach risking national security
Gen Z’s Rising Susceptibility to Social Engineering Attacks
GenAI turning employees into unintentional insider threats
Georgia Urology Notifies Patients of Data Breach Following Compromised Employee Email Accounts
Hacker Leaks Samsung Customer Data
Hacker linked to Oracle Cloud intrusion threatens to sell stolen data
Hacker Tactics: Exploiting Edge Devices, Missing Multifactor
Hackers abuse WordPress Must-Use Plugins (MU-Plugins) to hide malicious code
Hackers broke Google’s AI. Here’s how they did it
Hackers Distributing Phishing Malware Via SVG Format To Bypass File Detection
Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images
Hong Kong: Data breach of 128,000 'due to system fix and neglect'
How to recognize and prevent deepfake scams
KnowBe4 Report Finds Polymorphic Phishing Features Present in 76.4% of Campaigns
Latest gambit for Gamaredon: Fake Ukraine troop movement documents with malicious links
Lyon Living Files Notice of Data Breach; Sends Notification Letters to Victims
Major dating app data breach may have exposed 1.5 million private user images online
Morphing Meerkat phishing kits exploit DNS MX records
Moscow subway app and website disrupted in possible retaliation for Ukraine railway hack
National Cyber Security Centre (NCSC) Urges Users to Patch Next.js Flaw Immediately
National Defense Corporation victim of ransomware attack; discloses breach and declines to pay any ransom
New Android Banking Trojan Targets More Than 750 Financial and Crypto Apps
New Malware Variant RESURGE Exploits Ivanti Vulnerability
New phishing attack uses real-time interception to bypass 2FA
New phishing scam outsmarts security codes to steal your info
North Korean hackers adopt ClickFix attacks to target crypto firms
Only 2-5% of application security alerts require immediate action
Oracle buried serious data breach from customers, now hacker has it up for sale
Oracle hid serious data breach from customers, now hacker has it up for sale
Oracle under fire for its handling of separate security incidents
Oracle warns health customers of patient data breach
Phishing Attacks Shift to More Subtle Enticements
Phishing Emails Aren't as Obvious Anymore. Here's How to Spot Them
Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks
Phishing Tests in the Workplace: Does Fear Truly Drive Awareness?
Ransomware crews add 'EDR killers' to their arsenal – and some aren't even malware
Resilience in the face of ransomware: A key to business survival
Russia-Linked Gamaredon Uses Troop-Related Lures to Deploy Remcos RAT in Ukraine
Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp
Sam’s Club investigates possible Cl0p ransomware breach
Sam’s Club investigating possible Clop ransomware breach
Samsung in trouble: data of 270,000 customers dumped online
SimonMed confirms data breach
SquareX warns of rising browser-native ransomware threat
Thousands of subscribers affected in Nine-owned news masthead data breach
Ukraine: Organizers of cyber attack on JSC Ukrzaliznytsia (UZ) don’t receive personal data of passengers, info about military cargo
United Domestic Workers of America Sends Out Data Breach Letters Following Apparent Cyberattack
University of Michigan athlete sues school, former assistant coach over private image data breach
US Seizes $8.2m from Romance Baiting Scammers
Walmart’s Sam’s Club claimed by Cl0p ransomware gang
Was Check Point hacked? Security firm calls ransom demands old news
Weaponized Zoom Installer Used by Hackers to Gain RDP Access and Deploy BlackSuit Ransomware
Why no business is too small for the cyber criminals
World Backup Day: Why Backup Isn't Enough in the Age of AI and Data Exfiltration
