Editor's Message

Welcome to DBD. On March 8th, DBD celebrated it's 5th anniversary and PRiSM celebrated it's 2nd anniversary. Little did I know when I started both of these ventures just how much an impact they would have on my life and I'd like to thank each and everyone of you who have supported me over the years, with a special thanks to those individuals who have kindly shared their knowledge with me, and continue to do so. Thanks again for your support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington DC



Monday, 14 July 2025

Data Breaches Digest - Week 29 2025

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 14th July and 20th July 2025.


20th July

748,763 Americans Now at Risk of Financial Fraud - Firm Says Hacker May Have Stolen Names, Social Security Numbers, Bank Records, Credit Card Details and More in Massive Data Breach

800,000 users at risk after MAJOR hack at betting giants - IP addresses, email addresses, and online activity compromised

$300 Million Coinbase hacker quietly goes long on Ethereum

Chinese Groups Launder $580M in India Using Fake Apps and Mule Accounts

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

Cybersecurity firm warns of ‘costly epidemic’ as ransomware cripples South African firms

EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

Hewlett-Packard Enterprise (HPE) warns of hardcoded passwords in Aruba access points

Inquiry launched after identities of SAS soldiers leaked in fresh data breach

June 2025 Healthcare Data Breach Report

Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available

Offline Ransomware Strikes: USB Drives Now Deliver Ransomware, Even Offline

Premier Health Data Breach Affects 154,731 Individuals: SSNs & Medical Info Exposed

Radiology Associates of Richmond data breach impacts 1.4 million people

Singapore Threatened! Hacker Group Allegedly From China Attacks State Vital Infrastructure

Singapore warns China-linked group UNC3886 targets its critical infrastructure

Special Air Service (SAS) soldiers’ identities leaked in data breach

SquidLoader Malware Campaign Hits Hong Kong Financial Firms

The 'Scamdemic' Affecting Everyone

U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog

19th July

Afghan data breach: Why UK politicians sought to keep it a secret

Chaos and fear as Afghans exposed in huge data breach left in limbo by UK

Chaos as fresh data breach leaks names of Special Forces soldiers - as inquiry launched

Chinese hacker groups target Taiwan’s chip industry

For privacy and security, think twice before granting AI access to your personal data

Genea Fertility cyber attack: Inquiry into IVF hack confirms details were published on to dark web

Government will 'robustly defend' any compensation claims from thousands of Afghans whose lives were put at risk by massive data breach

Hackers Exploit FIDO MFA With Novel Phishing Technique

How British Airways Paid the Price for a Preventable Privacy Breach

Independent Title Agency Data Breach: 932.4 GB Compromised

Indian crypto exchange CoinDCX hacked, $44 million drained

Louis Vuitton data breach affects nearly 420,000 Hong Kong customers

Louis Vuitton Hong Kong faces probe for data breach affecting 419,000 customers

Ministry of Defence (MoD) to ‘robustly defend’ compensation claims from Afghans in data breach case

Namibia: Otjiwarongo municipality hit by suspected ransomware attack

Nova Scotia Power to Have Power Meters Read Manually as It Continues to deal with the Aftermath of a Cyber Attack on its Systems

Over 1,000 arrested as Cambodia “cracks down on online scams”

Popular npm linter packages hijacked via phishing to drop malware

Questions raised over Ministry of Defence (MoD) amid data breaches

San Francisco: 2 men plead guilty to laundering millions from online phishing scams

Singapore battles massive cyberattack

Solix Data Breach Exposes Medical Info & Social Security Numbers

Taliban 'on killing spree of Afghan interpreters' after Government data breach put thousands at risk of reprisals

Thousands of Afghans denied compensation after UK data breach

Thousands of Afghans won't be compensated by UK for data breach

Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack

18th July

0-Day Exploit for Russian Gas Station Automation Systems Allegedly for Sale Online

5 Million Public, Unsecured Wi-Fi Networks Found Exposed

6 Million Qantas Customers Affected By Data Breach Could Receive Compensation

24GB of Internal Data from UK Energy Firm Baxter Kelly Allegedly for Sale

A surveillance vendor was caught exploiting a new SS7 attack to track people’s phone locations

Afghan data breach prompts secret UK relocation

Afghan data breach unmasked UK spies, special forces

Afghan veteran warns data breach poses shadow threat ‘for years to come’

AGX Financeira Allegedly Breached - Millions of Brazilians’ Data for Sale

AI adoption is booming but secure scaling not so much

AI-Generated Lcryx Ransomware Discovered in Cryptomining Botnet

Akira Ransomware Group Continues Attack Spree - Allegedly Compromising 12 Companies in 72 Hours

Anne Arundel Dermatology Data Breach Impacts 1.9 Million People

Arch Linux pulls AUR packages that installed Chaos RAT malware

Australia political parties hit with ransomware attack

Authorities Arrest Suspects Behind the Marks & Spencer Cyber Attack

Banking scam alert: New SMS phishing tricks thousands in Spain

British spies and SAS named in Afghan data breach

British spies, Special Forces named in Afghan data breach

Broadcom patches critical VMware flaws exploited at Pwn2Own Berlin 2025

Buy Now, Pay Later...with your data

Cambodia Arrests More Than 1,000 in Cyberscam Crackdown

Cambodia Cracks Down on Cybercrime: 1,000+ Arrests Across Five Provinces

Canada: British Columbian college warns students of data breach. Cybersecurity experts warn of wider problems

CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

China's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones

China’s ‘Salt Typhoon’ Hacker Group Lurked Inside U.S. National Guard Network for Nearly a Year

Chinese hackers infect 10 Million Androids with BADBOX 2.0, now Google is suing them

CISA Issues Advisories on Critical ICS Vulnerabilities Across Multiple Sectors

Class action alleges Qantas ‘failed’ to protect personal information in wake of major data breach

Co-op CEO acknowledges personal data has been stolen from all 6.5 Million Co-op Group members

Co-op 'piloting' security change after massive cyber attack

Compumedics confirms major data breach affecting U.S. division

Critical infrastructure in Singapore under Cyber attack

Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services

Cyberattack suspected at El Dorado hospital, part of growing trend targeting medical systems

Cyberattacks on Luxembourg firms up sharply from last year

Data breach at Air Serbia delays payslips, disrupts HR services

Data Breach Exposes 100 British MI6 and SAS Officials and Thousands of Afghan Collaborators

Data Breaches Up 10% Although Victim Count Falls Sharply

DeepSeek is risky, but employees are still using it at work

Europe Uncovers Names of Russian Hacker Group Members Funded by the Kremlin

Exposed: Tory hypocrisy over Afghan data breach cover-up

FBI Tracks 1,610 BTC to Armenian Hacker in Explosive Ransomware Case

Financial Supervisory Service (FSS) prepares response plan following ransomware attack on SGI Seoul Guarantee

Former UK defence secretary Grant Shapps defends Afghan data breach superinjunction

From Backup to Cyber Resilience: Why IT Leaders Must Rethink Backup in the Age of Ransomware

Google Sues 25 Chinese Entities Over BADBOX 2.0 Botnet Affecting 10M Android Devices

Google Sues the Operators Behind the BadBox 2.0 Botnet

Hacker reconnaissance work continues on TeleMessage app vulnerability

Hackers scanning for TeleMessage Signal clone flaw exposing passwords

How to Address Growing Security Risks in Cyber-Physical Systems

HR-themed phishing emails among most-clicked in Q2

Hundreds of Ministry of Defence (MoD) data breaches revealed as security questions raised in wake of Afghan data breach

Indonesian Paint Giant Indaco Allegedly Hit by Data Breach

Information Commissioner's Office (ICO) says Ministry of Defence (MoD) Afghan data breach ‘unacceptable – and should never happen again’

It’s Official: Thailand’s Labour Ministry Breached, Backups Erased, Network in Ruins

Ivanti Bugs Exploited Even After Three Months of Patch Availability

Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks

Japanese police release decryptor for Phobos ransomware after February takedown

LameHug: first AI-Powered malware linked to Russia’s APT28

Law firm signs up 1,000 clients affected by Afghan data breach

Louis Vuitton Confirms UK Customer Data Breach in Third LVMH Attack This Year

Meta settles $8 billion lawsuit over data breach allegations ahead of testimony

Microsoft Reveals Scattered Spider TTPs Used in Recent Attack Campaigns

Microsoft Uncovers Scattered Spider Tactics, Techniques, and Procedures in Recent Attacks

Mid America Physician Services Data Breach Affects Patient Info

Millions could be compensated over major Qantas data breach

My focus was on saving lives after Afghan data breach, Former Defence Secretary Sir Grant Shapps says

Naper Grove Vision Care Breach Affects Patient Info

Nearly 750K exposed after hacker attack on drug tester

New Cisco Bugs Rated CVSS 10.0, Patch Immediately

New CrushFTP zero-day exploited in attacks to hijack servers

New FileFix Attack Turns Windows Clipboard Into a Silent Malware Delivery Tool

New “LameHug” Malware Deploys AI-Generated Commands

New Phobos and 8base ransomware decryptor recover files for free

New QR Code Attacks Through PDFs Bypass Detection and Steal Credentials

New QR Code Attacks via PDFs Evade Detection and Steal Credentials

New Veeam-Themed Phishing Attack Uses Weaponized WAV File to Target Users

New Veeam-Themed Phishing Campaign Delivers Malware via Weaponized WAV File

'No evidence' data was stolen in Glasgow City Council cyber attack

'No evidence of data loss' in Glasgow City Council cyber attack

No evidence of data loss in Glasgow City Council cyber-attack, experts say

Novel malware from Russia’s APT28 prompts LLMs to create malicious Windows commands

NVIDIA Issues Advisory After Demo of First Rowhammer Attack on GPUs

One year later, little details or accountability shown by Columbus officials after ransomware attack

Personal crypto wallet and physical attacks on the rise as market rallies

PoisonSeed Tricking Users Into Bypassing FIDO Keys With QR Codes

Qantas Data Breach Class Action Launched: Nearly 6 Million Could Benefit From It - Here's What We Know

Ransomware attacks surge 63% in Q2 2025, healthcare hit hard

Ransomware gang attacking NAS devices taken down in major police operation

Ransomware incident disrupts Russian vodka maker

Retail Becomes New Target as Healthcare Ransomware Attacks Slow

Rethinking the security of PDFs

Ring camera alleged data breach may have let unknown devices spy on you

Russia Linked to New Malware Targeting Email Accounts for Espionage

Russian alcohol retailer WineLab closes stores after ransomware attack

Russian Vodka Maker Beluga Struck by Ransomware Attack

Russian Vodka Producer Beluga Hit by Ransomware Attack

Russian Vodka Producer Beluga Hit by Ransomware, 2,000+ Stores Disrupted

Salt Typhoon Hacks National Guard Systems

Scanception Exposed: New QR Code Attack Campaign Exploits Unmonitored Mobile Access

Secrecy, scrutiny and the Afghan data breach

Singapore accuses Chinese state-backed hackers of attacking critical infrastructure networks

St. Andrew’s School Of Boca Raton Sued Over Data Breach

Stormous ransomware lays claim on North Country HealthCare hack

Summer Vacation Alert Surfaces More Than 5 Million Unsecured Wi-Fi Networks

Taiwan’s Chip Giants Under Attack from Chinese Hacker Group

The ransomware that doesn’t need internet: Why Mamona is a threat you shouldn’t ignore

Top Tory Grant Shapps claims Afghan data breach kept secret over risk of executions

U.S. part of global operation to take down pro-Russian hacker group

UK special forces, spies included in Afghan data breach

UK ties GRU to stealthy Microsoft 365 credential-stealing malware

Ukrainian hackers claim disruptive cyberattack on key Russian drone supplier

Ukrainian hackers claim the cyber attack on Gazprom

‘UNC3886 is Attacking Our Critical Infrastructure Right Now’: Singapore’s National Security Lawmaker

UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns

Unsecured database at Gladney Centre for Adoption exposes over 1.1 million sensitive records

Victims of catastrophic Afghan data breach can 'expect compensation in the thousands'

What is known about the Ukrainian cyber attack to Gazprom

Why we must go beyond tooling and CVEs to illuminate security blind spots

Years Long Linux Cryptominer Spotted Using Legit Sites to Spread Malware

Zumpano Patricios Data Breach Affects 279,275 Individuals

17th July

0-Day RCE Flaw in SonicWall SMA Devices Exploited to Launch OVERSTEP Ransomware

$2.17 billion in crypto stolen in first half of 2025, driven by North Korean hacks

64% of Leaders are Highly Concerned About Data Sovereignty Amid Tariff Uncertainty

100,000 Americans' info exposed in a data breach: What to do if you're affected?

Afghan data breach is the long shadow of a botched evacuation

Afghan data leak: Details of more than 100 British spies and Special Air Service (SAS) operatives included in breach

AI Cloaking Tools Enable Harder-to-Detect Cyber-Attacks

AI-Powered Cloaking Services ‘Hoax Tech’ and ‘JS Click Cloaker,’ Most Used in Phishing Campaigns

Air Serbia Confirms Data Breach in Latest Aviation Sector Cyberattack

Alabama Law Enforcement Agency (ALEA) warns Alabama residents of nationwide phishing scam

All Co-op Members Hit in April Cyberattack, CEO Breaks Silence

Armenian, Ukrainian nationals among Ryuk ransomware actors facing US hacking charges

Australia: Clive Palmer’s political parties suffer data breach affecting ‘all emails...documents and records’

Belk Suffers Major Data Breach; Law Firm Investigates Class Action

British spies and SAS named in Afghan data breach

China-linked hackers ramp up attacks on Taiwan’s chip industry, researchers report

Chinese hackers breached National Guard to steal network configurations

Chinese Hackers Target Taiwan's Semiconductor Sector with Cobalt Strike, Custom Backdoors

Chinese Salt Typhoon Infiltrated US National Guard Network for Months

Cisco patches critical CVE-2025-20337 bug in Identity Services Engine with CVSS 10 Severity

Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

Citibank Korea employees honored for preventing voice phishing scam

Citrix Bleed 2 exploited weeks before PoCs as Citrix denied attacks

Cloaking-as-a-service set to reshape the phishing landscape

Co-op boss admits data breach affected all 6.5 million members

Co-op CEO confirms data breach exposed sensitive information of 6.5 million members

Collaboration is Key: How to Make Threat Intelligence Work for Your Organization

Court Lifts super-injunction over Afghan data breach

Cryptocurrency Exchange BigONE Loses $27M in Hacker Attack

Cyber Attack On Canadian Electric Utility Nova Scotia Disconnects Power Meters

CyberMaxx Q2 2025 Ransomware Research Report shows a 40% drop in attack volume from the previous quarter

Data Breach: The secret scramble to bring Afghans to Britain

Data Breach and Ransom Demand Reported at Namibian Municipality

Debt collection firm leaks personal data of over 160,000 in cyber security failure

Defence chiefs face MASSIVE £1 billion compensation bombshell over Afghan data breach

Defence secretary revealed sensitive Afghan data breach details - but media still banned from reporting it

Department of Justice (DOJ) Presses $15M Extortion Charges Against Alleged Ryuk Ransomware Gang Member

Details of more than 100 British people included in massive Afghan data breach

Devman Claims Cyberattack on Thailand Ministry of Labour, Demands $15M Ransom

DEVMAN Ransomware Group Allegedly Breaches Thai Ministry of Labour

E.U. says joint law enforcement operation dismantled pro-Russian hacker group

Emerging Cloaking-as-a-Service Offerings are Changing Phishing Landscape

Europol conducts large-scale operation against pro-Russian hacker network

Europol Disrupts NoName057(16) Hacktivist Group Linked to DDoS Attacks Against Ukraine

Ex-Army Soldier Cameron John Wagenius Pleads Guilty to $1M Cyber Extortion Scheme

Experts link Qantas data breach to AI voice impersonation

GitHub Abused to Spread Amadey, Lumma and Redline InfoStealers in Ukraine

Global retail ransomware intrusions surge

Google Gemini AI Flaw Could Lead to Gmail Compromise, Phishing

Google Gemini can be used as a phishing mule

Google Reveals How a Hacker Exploits SonicWall Hardware Using OVERSTEP Backdoor

Google sues to disrupt BadBox 2.0 botnet infecting 10 million devices

Government 'faces £1 billion compensation claim' over Afghan data breach

Hacker steals $27 million in BigONE exchange crypto breach

Hackers are trying to steal passwords and sensitive data from users of Signal clone

Hackers Can Hide Malicious Code in Gemini’s Email Summaries

Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency Miner

Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters

Hacktivism Increasingly Targeting Critical Infrastructure

How bad is Afghan data breach for MI6 and SAS?

How Secure Is Online Fax: Privacy and Data Protection Standards

INC Ransom Allegedly Adds 8 More International Firms to Victim List

Intelligence committee demands to know why ministers kept them in the dark over Afghan data breach

Ireland: Ransomware budgets are set to increase

LameHug malware uses AI LLM to craft Windows data-theft commands in real-time

Machine unlearning gets a practical privacy upgrade

Major UK leak exposes identities of spies and Afghans who helped Britain

Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads

Marks & Spencer (M&S) dishes out free treats to millions of customers as a ‘thank you’ after cyber attack

Massive Data Leak at Texas Adoption Agency Exposes 1.1 Million Records

Massive hackers' takedown: pro-Kremlin group NoName057(16) turned hacking the West into a game

Max severity Cisco ISE bug allows pre-auth command execution, patch now

Meta AI leak gave access to AI prompts and answers from other users

Meta investors, Zuckerberg settle $8 billion privacy lawsuit tied to Cambridge Analytica scandal

Microsoft Exposes Scattered Spider’s Latest Tactics

Microsoft Teams voice calls abused to push Matanbuchus malware

Military-trained hacker brought down in telecom data theft

Most European Financial Firms Still Lagging on Digital Operational Resilience Act (DORA) Compliance

Mower County still working to restore systems after cyber attack

National Crime Agency (NCA) officer jailed for stealing and laundering 50 BTC: how was it recovered?

New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers

North Korean hackers blamed for record spike in crypto thefts in 2025

Octo Tempest targets airlines as Microsoft warns of new cyber risks

One in 12 US/UK Employees Uses Chinese GenAI Tools

Operation “Eastwood”: Pro-Russian hacker network NoName057 unmasked in Italy

‘Operation Eastwood’ Dismantles Pro-Russian DDoS Group NoName057

Over 318K impacted by Compumedics ransomware-related breach

Phishing attack abuses QR codes to bypass FIDO keys

Phishing scams target Philippine banks, e-wallets

Police Shut Down 100 Servers Tied to Russian NoName057(16), Arrest 2

Possible cross-chain crypto laundering exceeds $21.8B as criminals try to cover tracks

Qantas goes to court to protect customers hit by data breach

Qantas takes legal action to protect millions hit by major data breach

Ransomware: from crisis to comeback

Ransomware actors target patched SonicWall SMA devices with rootkit

Ransomware Group Claims to Have Stolen Data of 600,000 North Country HealthCare Patients

Russian vodka producer reports disruptions after ransomware attack

Saint Andrew's School Data Breach Exposes Social Security Numbers

Scattered Spider Cyber Gang Now Targeting Airlines With Ransomware, Microsoft Warns

Seoul Guarantee Insurance (SGI) ransomware attack puts lax financial cybersecurity rules under scrutiny

Solace Cyber Urges Immediate Action on New ‘CitrixBleed 2’ Vulnerability Threatening Businesses Worldwide

SonicWall SMA Devices 0-Day RCE Vulnerability Exploited to Deploy OVERSTEP Ransomware

SonicWall SMA Devices Targeted by 0-Day RCE in OVERSTEP Ransomware Campaign

South Africans warned to stay vigilant against tax season phishing scams

Thai officials restore Ministry of Labor website after hack, defacement

Thousands of Afghans secretly moved to UK after data breach

Thousands of Afghans set to sue Ministry of Defence (MoD) after data disaster - with taxpayers 'bracing for £1 billion bill'

TikTok, AliExpress, and WeChat violate EU privacy laws, data protection group claims

UK Law Firms Prepare to File Compensation Claims for Afghan Evacuation Applicants Affected by Data Breach

UK National Crime Agency (NCA) officer jailed for stealing bitcoin from darknet criminal he previously helped investigate

UK Retailer Co-op Confirms 6.5 Million Members’ Data Stolen in Massive Cyberattacks

UK secretly relocated Afghans after 2022 data breach

United Australia Party and Trumpet of Patriots suffer cyberattack

United Australia Party Confirms Major Ransomware Attack and Data Breach

United Australia Party (UAP) confirms ransomware attack, personal data and email correspondence exposed

United Natural Foods Expects $400M revenue impact from June cyber attack

US Data Breaches Head for Another Record Year After 11% Surge

US indicts alleged Ryuk ransomware operator

VMware fixes four ESXi zero-day bugs exploited at Pwn2Own Berlin

What a mature Operational Technology (OT) security program looks like in practice

What Fortune 100s are getting wrong about cybersecurity hiring

16th July

6 ways to protect your passport and other travel docs from cybercriminals - before it's too late

21-year-old former US soldier pleads guilty to hacking, extorting telecoms

75% of Organizations’ Building Systems Affected by Exploited Vulnerabilities

90% of Large Organizations Unprepared for AI-Enabled Threats

6,500,000 people had their details stolen after Co-op cyber attack

Access to Israeli Flight Agencies and Hotels Allegedly Sold on Dark Web After Zero-Day Breach

Afghan data breach a shameful sequel to the Kabul horror story

Afghan data breach is a shameful blight on the UK - and a symptom of broader systemic failures

Afghan data breach risks pushing more asylum seekers onto small boats

Afghan data breach super injunction ‘deeply disturbing’ for press freedom

Afghan data breach timeline: The fallout behind the scenes

All 6.5 million Co-op members had their data stolen in cyber attack earlier this year, retailer admits

All Co-op members had data stolen in cyber-attack

All Co-op’s 6.5 million members had details stolen in cyber attack, boss confirms

“All the information was killed:” hackers wipe out Russian defense giant

Alleged Collection of 1 Million Israeli Card Holders Data Offered for Sale

Alleged Data Breach Impacts Brazilian Company GRS Informatica

Alleged Data Breach Impacts VantageFinance Customers

Alleged Data Breach Rocks Unnamed Major Crypto Gaming Company

Amid border dispute, Thailand goes after Cambodian tycoon over alleged cyber scam ties

Armenian national extradited to the U.S. faces federal charges in Oregon for ransomware extortion conspiracy

Authorities Seize Over 100 Servers of the Pro‑Russian NoName057(16) Hacktivist Network

BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide

Betrayal after betrayal: Afghan special forces abandoned by Britain had details leaked in Ministry of Defence (MoD) data breach

'Betrayed' Afghan interpreter says family 'waiting for death' under Taliban after UK military data breach

BigONE Hacked: Hacker Steals Over $27 Million Worth of Crypto

BlackFog Report Reveals 63% Increase in Q2 Ransomware Attacks Year on Year

Chinese authorities are using a new tool to hack seized phones and extract data

Cloudflare Blocks Record-Breaking 7.3 Tbps DDoS Attack

Co-op Aims to Divert More Young Hackers into Cyber Careers

Co-op boss admits all 6.5 million members had data stolen in cyber-attack

Co-op boss confirms all 6.5 million members had data stolen

Co-op chief exec: All 6.5 million members’ data was compromised in April cyber-attack

Co-op confirms 6.5 million members had data stolen in cyber attack

Co-op confirms ALL 6.5 million members had data stolen in cyber attack

Co-op confirms data of 6.5 million members stolen in cyberattack

Co-op Cyber-Attack Exposes Data of All 6.5 Million Members in Major Security Breach

Co-op hacker stole personal data from 6.5 million members as boss says sorry

Co-op issues update following 'devastating' cyber-attack data breach

Compumedics Ransomware Attack Led to Data Breach Impacting 318,000

Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent Access

Cyberattack Allegedly Compromises Chartered Institute of Bankers of Nigeria (CIBN) Servers

Data stolen from 6.5 million Co-op members in ‘devastating’ cyber attack

Defence secretary 'unable to say' if anyone killed after Afghan data breach

Diskstation ransomware gang subjected to global crackdown

DragonForce hackers breach Belk, exposing customer data

Dumfries and Galloway Council apologises after email data breach

Dumfries and Galloway Council say sorry after data breach

Education Sector is Most Exposed to Remote Attacks

Elite 'Matanbuchus 3.0' Loader Spruces Up Ransomware Infections

Engineered To Evade: How Phishing Attacks Are Designed To Get Through Your Secure Email Gateway

Europol and Eurojust dismantled the pro-Russian hacker group

Europol disrupts pro-Russian NoName057(16) DDoS hacktivist group

Ex US Soldier Cameron Wagenius Guilty in Telecom Hacking and Extortion

Experts unpack the biggest cybersecurity surprises of 2025

Fears of riots after secret Afghan resettlement scheme exposed following Ministry of Defence (MoD) data breach

Former US soldier pleads guilty to hacking telecom companies

From a Teams Call to a Ransomware Threat: Matanbuchus 3.0 MaaS Levels Up

Generative AI supercharges voice phishing in South Korea

Global crackdown hits pro-Russian cybercrime, 100+ systems taken down worldwide

Global effort manages to take down big chunk of pro-Russian hacker network

Global Operation Takes Down Pro-Russian Hacker Network Attacking Ukraine and NATO

Gmail’s AI summaries have a security flaw that could affect 2 billion users

Google fixes actively exploited sandbox escape zero day in Chrome

Google Gemini can be hijacked to display fake email summaries in phishing scams

Google spots tailored backdoor malware aimed at SonicWall appliances

Google’s Big Sleep Foils Hackers by Spotting SQLite Flaw Before Exploit

Guide to the Afghan data breach: Why scandal has erupted now and what happens next

Hackers claim responsibility for Belk data breach

Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms

How Simple IAM Control Could Have Prevented Major Cyber-Attacks

Identity Theft Resource Center Sees Acceleration of 2024 Data Breach Trends in First Half of 2025

International operation disrupts pro-Russian hacker group NoName057(16)

Italian police dismantle Romanian ransomware gang targeting nonprofits, film companies

Italy launches operation targeting Russian hacker group Noname

IWACLUB Allegedly Suffers Data Breach

Keir Starmer blasts former Tory ministers for Afghan data breach at PMQs

Keir Starmer says Tories have 'serious questions' to answer over Ministry of Defence's Afghan data breach

Large-scale operation against pro-Russian hacker network conducted in Europe

Lithuania part of international operation targeting pro-Russian hacker group

Louis Vuitton data breach affects customers in Turkey, South Korea, and the UK

Louis Vuitton says regional data breaches tied to same cyberattack

Mauritanian Government Employability Platform Allegedly Breached

Marks and Spencer, Co-op and Harrods cyber attack arrests update

Microsoft Teams Calls Weaponized to Deploy and Execute Matanbuchus Ransomware

Microsoft Teams phishing spreads updated Matanbuchus malware loader

Ministry of Defence (MOD) Data Breach Put Thousands of Afghan Lives at Risk

Ministry of Defence (MoD) offered to speed up resettlement case of Afghan who posted data breach names on Facebook

Ministry of Defence (MoD) official responsible for catastrophic Afghan data breach that cost billions still works for government

Most cyber incidents stem from the same 10% of employees, study finds

Most cybersecurity risk comes from just 10% of employees

'My family is finished': Afghan man in UK military data breach says he feels betrayed

National Cyber Security Centre (NCSC) Expands Vulnerability Research to Tackle Evolving Cyber Threats

New Fortinet FortiWeb hacks likely linked to public RCE exploits

New Keepnet Study Shows New Employees Highly Vulnerable to Phishing Attacks Within First 90 Days

New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code

NoName057(16), pro-Russian hacker network dismantled: over 100 servers deactivated worldwide

Operation Eastwood disrupted operations of pro-Russian hacker group NoName057(16)

Over 5.4 Million Affected in Healthcare Data Breach at Episource

Over One Million Records Exposed in Data Breach Involving Adoption Agency

Phishing Scam Cost Rural Nebraska School District $1.8M

Popular fitness app Fitify exposes 138K user progress photos

Prime Minister: Tories have questions to answer over Afghan data breach and superinjunction

Pro-Russian Cybercrime Network Demolished in Operation Eastwood

Pro-Russian hacker group targeting Ukraine and allies dismantled in Europe

Qilin Ransomware Group Allegedly Breaches Five U.S. Entities - Halvorsen Family Law, WH Rogers Sheet Metal, City of Green River, Paul Wilkinson Law Firm, and ProActive Solutions USA

Ransomware attack disrupts Korea's largest guarantee insurer

Ransomware attackers targeted Oregon company, others: ‘We’ve easily penetrated your network’

Ransomware in South Africa: the human factor behind the growing crisis

Ransomware surges 63 percent in Q2

Ransomware threat ‘Global’ in VPN and edge-device exploits

Retail Ransomware Attacks Jump 58% Globally in Q2 2025

Retail Sector Cyber-attacks Peaked in Q2 2025

Ryuk ransomware operator extradited to US, faces five years in federal prison

Scattered Spider expands its roster of tactics in recent hacks

Senate panel passes Intelligence Authorization Act that takes aim at telecom hacks

Serious questions for Tories over Afghan data breach

'Serious questions' over UK secret Afghan relocations

'Serious questions to answer,' says Starmer of opposition MPs who oversaw Afghan data breach

Sesame Street responds to vile hacking of Elmo's X account

SonicWall SMA devices hacked with OVERSTEP rootkit tied to ransomware

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit

SquidLoader Malware Campaign Targets Hong Kong Financial Sector

Starmer says former Tory ministers have 'serious questions to answer' over Afghan data breach

Starmer’s fury over Afghan data breach as he warns Tories ‘have questions to answer’

The spare change: Another UnitedHealth subsidiary has suffered a data breach

Thousands Of Afghans Secretly Resettled In UK After Data Breach

Thousands Of Afghans Secretly Resettled In UK After Ministry of Defence (MoD) Data Breach

Thousands of Afghans win U.K. asylum after huge data breach

Threat actor targets end-of-life SonicWall SMA 100 appliances in ongoing campaign

U.K. military data breach that put Afghans at risk was kept secret under publication ban for nearly two years

U.S. Army soldier pleads guilty to extorting 10 technology, telecom firms

UK Co-op Data Breach: DragonForce Hackers Steal Personal Info from All 6.5 Million Members

UK Defence Secretary ‘unable to say’ if Afghan data breach led to deaths

UK retail giant Co-op confirms hackers stole all 6.5 million customer records

UK Sets Up Secret Plan To Evacuate Afghans Exposed In Major Data Breach

UK Takes Drastic Action After Major Data Breach Exposes Afghan Allies to Taliban Threat

Ukraine-aligned hackers claim cyberattack on major Russian drone supplier

Ukrainian hackers say they compromised a major Russian drone company, destroying data, backups, and systems

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

UnitedHealth-Linked Health Tech Firm Episource Breach Hits 5.4 Million Patients

Update Google Chrome to fix actively exploited zero-day (CVE-2025-6558)

Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild

US National Guard severely hacked by Salt Typhoon in 2024

What is the Afghan data breach? Everything to know

What we know so far about Afghan data breach

What's going on with Nova Scotia Power's billing in wake of ransomware attack

Who knew about the Afghan data breach - and who was in the dark?

Windows Hello flaw allows hackers to “swap faces” and access sensitive data

WordPress Security Alert: CVE-2025-6043 Enables Remote File Deletion via Malcure Plugin

15th July

$1.8 Million Stolen From US School District in Phishing Scam

13 Arrested in Romania Over Phishing-Based UK Tax Fraud Scheme

47% of Manufacturing Breaches in 2024 Involved Ransomware

7,000 Afghans Being Relocated To UK Due To 'Massive' Data Breach. Here's What Happened

Afghan Collaborators Resettled in UK After Data Breach

Afghan data breach blunder prompted fears of Taliban ‘kill list’

Albemarle County Ransomware Breach Compromises Residents’ Personal Data

Albemarle County, Virginia, IDs Group Behind Ransomware Attack

Almost 7,000 Afghans being relocated to UK in secret scheme after Ministry of Defence (MoD) data breach

Android malware Konfety uses malformed APKs to evade detection

Arcadia Finance hits $3.5m hacker with ultimatum: pay up or get hunted

AsyncRAT evolves as ESET tracks its most popular malware forks

AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe

Attackers Hide JavaScript in SVG Images to Lure Users to Malicious Sites

Authorities Arrested 14 Hackers in Connection With Large-Scale Tax Fraud Operation

Banks must beef up cyber resilience as financial phishing attacks increase

Belk hit by May cyberattack: DragonForce stole 150GB of data

British military Afghan data breach exposed: government cover-up risked 100,000 lives

Businesses are overconfident as mobile phishing scams surge

Catastrophic Ministry of Defence (MoD) data breach that put up to 100,000 lives at risk finally revealed as superinjunction lifted

Community Care Alliance to pay $1.09 million to settle data breach class action

Critical cyber flaw linked to End-of-Train (EoT) module ignored in US rail systems for 12 years, fix not expected until 2027

Cyber attack shakes supermarket loyalty, insurers on alert

Cyber scam: Four foreigners held in Islamabad

Cybercrime-as-a-Service Is Scaling - Are MSSPs Ready?

Dark 101 Ransomware Deploys .NET Payload to Cripple Recovery Mode and Task Manager

Data Breach at Debt Settlement Firm Impacts 160,000 People

Data Breach Leads to Thousands of Afghans Being Offered UK Asylum

'Disgusting' antisemitic and racist messages posted on Elmo's X page by hacker

DOGE staffer with access to Americans’ personal data leaked private xAI API key

DragonForce Cyberattack Targets Belk Inc. with Ransomware Attack

DragonForce hackers claim responsibility for Belk data breach

Fake Telegram Apps Spread via 607 Domains in New Android Malware Attack

Fresh NHS Tayside data blunder as journalist’s details sent to every staff member

From ClickFix to FileFix: A New Era of Deception from the Interlock Ransomware Group

GLOBAL GROUP Ransomware-as-a-Service (RaaS) Adds AI-Powered Negotiation Feature for Ransom Demands

Google AI Chatbot Target of Potential Phishing Attacks

Government set up secret £850m scheme to offer Afghans asylum after data breach

Hacked Elmo X Account Spews Racist, Antisemitic Posts

Hacker uses Elmo's X account to post antisemitic rant and demand release of Epstein files

Horizon Healthcare RCM data breach hits over 75,000 people

How Ministry of Defence (MoD) covered up data breach that put Afghans at risk of Taliban reprisals

Hyper-Volumetric DDoS Attacks Reach Record 7.3 Tbps, Targeting Key Global Sectors

Information Commissioner's Office (ICO) statement in response to 2022 Ministry of Defence (MoD) data breach

Inside the £7 billion secret scramble to save lives after Ministry of Defence (MoD) data breach

Investigation reveals Google Gemini for Workspace flaw that could have been exploited to enlist AI in phishing schemes - 'Summarize this email' tool would faithfully obey malicious instructions hidden inside an email

Louis Vuitton confirms customer data stolen in cyber attack

Louis Vuitton says customers in Turkey, South Korea and UK impacted by data breaches

Manufacturing industry still favorite target of cybercriminals

Marks & Spencer hackers hit US retailer Belk

Massive investment fraud campaign leverages 17,000 fraudulent news sites

Meta fixes bug that could leak users’ AI prompts and generated content

Ministry of Defence (MoD) could face 'strong claims for substantial compensation' following 'catastrophic' data breach

Ministry of Defence (MoD) could face ‘substantial’ compensation claims over data breach, lawyer says

Ministry of Defence data breach timeline

Mitigation measures can reduce malware risk by 50%–80%

MITRE Launches New Framework to Tackle Crypto Risks

National Cyber Security Centre (NCSC) Launches Vulnerability Research Institute to Boost UK Resilience

National Security Agency (NSA): Volt Typhoon was ‘not successful’ at persisting in critical infrastructure

New Ransomware Operation’ Global Group’ Launches with AI Negotiators

New ZuRu Malware Variant Targeting Developers

Newly Emerged GLOBAL GROUP Ransomware-as-a-Service (RaaS) Expands Operations with AI-Driven Negotiation Tools

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages

North Korean Actors Expand Contagious Interview Campaign with New Malware Loader

North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign

North Korean XORIndex malware hidden in 67 malicious npm packages

Novel Interlock variant harnesses FileFix for widespread attacks

NYC Health + Hospitals Data Breach Affects 5,728 Patients

Phishing email costs US school district $1.8 million

Pierce County Library System reports data breach affecting over 335,000 individuals

Police disrupt “Diskstation” ransomware gang attacking Network-Attached Storage (NAS) devices

ProSmile Holdings Settles Class Action Data Breach Lawsuit

Ransomware attack forces SGI Seoul Guarantee Insurance stock down 14% from peak

Ransomware Gangs Attack Clinical and Pathology Laboratories

Ransomware Group Claims Attack on Belk

Ransomware still dominates, but systemic events are harder to model

Red Bull-Themed Phishing Attacks Steal Job Seekers Login Credentials

Reframing Return of Investment (ROI) in Cybersecurity: From Cost Center to Business Enabler

SaaS Security Adoption Grows Amid Rising Breach Rates

Secret Afghan Relocation Scheme Unveiled Amid Controversial Data Breach

Secret evacuation of thousands of Afghans to UK after Ministry of Defence (MoD) data breach revealed

Securing vehicles as they become platforms for code and data

Serious Google Gemini flaw: it obeys hidden prompts in malicious emails

Sesame Workshop regains control of Elmo’s hacked X account after racist posts

Seychelles Commercial Bank Confirms Customer Data Breach

Sosandar cuts profit guidance following Marks & Spencer (M&S) cyber attack

Sosandar shares down 20% as it feels knock-on impact of M&S cyber-attack

State-Backed HazyBeacon Malware Uses AWS Lambda to Steal Data from Southeast Asian Governments

Stolen identities a fear after Episource breach affects 5.4 Million patients

Stop settling for check-the-box cybersecurity policies

SVG Smuggling Attacks Elevate Phishing Campaign Techniques, Embedding Malicious JavaScript Code

The SaaS Security Disconnect: Why Most Organizations Are Still Vulnerable

Third Time in 90 Days: Louis Vuitton UK Latest Victim in LVMH Cyberattacks

This is what you should include in your password to make it uncrackable

Thousands Of Afghans And Families Brought To UK After Data Breach

Thousands of Afghans at risk of Taliban reprisals secretly brought to UK

Thousands of Afghans were moved to UK in secret scheme after data breach

Thousands of Afghans win UK asylum after huge data breach

Threat Actors Exploit SVG Files in Stealthy JavaScript Redirects

TikTok faces fresh EU scrutiny over data transfers to China

UK Government condemned over Afghan data breach

UK Government To Relocate 7000 Afghans After Data Breach

UK Pet Owners Targeted by Fake Microchip Renewal Scams

UK secretly relocated thousands of Afghans after 2022 data breach, reveals Defence Minister Healey

Ukrainian hackers claim to have destroyed servers of Russian drone maker

UnitedHealth subsidiary Episource hit with data breach, millions affected

Unprecedented superinjunction helped keep Afghan data breach secret for three years

Unveiled: Britain's Secret Afghan Relocation Amid Data Breach

Up to 7,000 Afghans being relocated to UK after data leak blunder

US Army soldier pleads guilty to hacking telcos and extortion

Vulnerable firmware for Gigabyte motherboards could allow bootkit installation

Your eSIM might not be as safe as you think: researchers hack and clone numbers

14th July

$1.8 million stolen from Broken Bow Public Schools in phishing scam

4 Critical, Known Exploited Vulnerabilities Added to KEV Catalog

5.4 million hit in major healthcare data breach - names, emails, SSNs and more exposed

A simple radio hack can emergency stop any train in North America, researchers warn

Africa’s Growing Vulnerability: How Complacency Exposes the Continent to Rising Cyber Threats

Alabama city purportedly compromised by INC Ransom group

Alleged Data Breach of Colmedsa Exposes Records of Argentine Medical Professionals

Artivion data breach exposes sensitive customer information

Asia Pacific and Japan (APJ) Ransomware Demands Drop 50%, Yet 54% Firms Pay Hackers

Auditor questions city of Cleveland cyber security in wake of attack

Australia: Data Breach Notification - Office of the Migration Agents Registration Authority (OMARA) agents portal

Australian Office of the Migration Agents Registration Authority discloses accidental data breach

Azerbaijan: Over 6,000 users become victims of hacker attacks this year

Banks told: Be more vigilant against financial phishing

Banks urged to beef up cybersecurity amid more incidents of financial phishing

Broken Bow Public Schools impacted by phishing email scam, $1.8 million shared with fraud account

Broken Bow Public Schools target of phishing email scam, $1.8 million in funds stolen

Broken Bow Public Schools working to recover funds after $1.8 million phishing scam

CARSTAR Business Group Allegedly Hit by Sarcoma Ransomware

Chicago’s WFMT radio station reportedly breached by ransomware group Play

Chinese Hacker Arrested in Association With Silk Typhoon State-Sponsored Espionage Campaign

Click Happens: The Case for Realistic Government Phishing Drills

Cloned Phones, Stolen Identities: The eSIM Hack No One Saw Coming

Columbus to invest $23 million in 'zero trust network' one year after cyber attack crippled city

Cost of West Lothian schools cyber attack will be revealed - but investigation could take a year

Cyber Storm Hits Travel Industry: Phishing, Fake Bookings, and AI Scams Threaten Summer Travelers

Denmark Moves Toward AI Copyright Rules for Voice and Appearance

DragonForce: How a ransomware cartel secures its position

Edison-Based Lab Suffers Data Breach, Lawyers Say Patient's Personal Info Leaked to the Dark Web

Elmo Account Hacker Posts Antisemitic Rant, Claims Trump's In Epstein Files

Elmo becomes unlikely pawn in hacker’s antisemitic rant targeting Donald Trump and the Epstein scandal

Elmo Is in Hot Water After Antisemitic Tweet Appears on X Account

Elmo said what? Sesame Workshop pins ‘disgusting’ racist, obscene tweets on hacker

Elmo’s social media ‘compromised’ by unknown hacker

Elmo’s X account hacked to publish racist and antisemitic posts

Elmo’s X account posts racist and antisemitic messages after being hacked

Elmo’s X Account ‘Secure’ After Hacker Posts Antisemitic Slurs, Demands ‘Epstein Files’ Release

Elmo’s X Account ‘Secured’ After Hacking; ‘Sesame Street’ Says ‘Unknown Hacker Posted Disgusting Messages, Including Antisemitic and Racist Posts’

Episource is notifying millions of people that their health data was stolen

eSIM Vulnerability in Kigen's eUICC Cards Exposes Billions of IoT Devices to Malicious Attacks

Exploited Wing file transfer bug risks ‘total server compromise,’ CISA warns

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)

Fake News Sites Mimicking CNN, BBC and CNBC Pave Way for Investment Scams

Financial giant Prudential will pay up to $5,000 per person following massive Social Security data breach

Finastra Data Breach Affects Over 800K Americans: SSNs Exposed

Flutter Entertainment confirms data breach impacting 800,000 customers

France Nabs Russian Basketball Player in Ransomware Probe

Freedom Plaza Data Breach Exposes Personal and Medical Info

Freedom Square Data Breach Impacts 5,849 Nationwide

Gambling websites Paddy Power and Betfair confirm data breach

Gigabyte motherboards vulnerable to UEFI malware bypassing Secure Boot

GLOBAL GROUP: Emerging Ransomware-as-a-Service, Supporting AI Driven Negotiation and Mobile Control Panel for Their Affiliates

Global Louis Vuitton data breach impacts UK, South Korea, and Turkey

Gmail AI summaries can be hijacked for phishing scams

GMX Exploit Nets Hacker $5 Million “Bounty” After $40 Million Heist

Google Gemini Bug Turns Gmail Summaries into Phishing Attack

Google Gemini can be hijacked to display fake email summaries in phishing scams

Google Gemini flaw exploited to turn AI-powered email summaries into the perfect phishing tool - everything you need to know

Google Gemini Tricked Into Showing Phishing Message Hidden in Email

Google Gemini Vulnerability Allows AI-Powered Phishing Attacks via Hidden Email Commands

Google’s Gemini AI Model for Workspace Exposes Users to Advanced Phishing Attacks

Grok-4 Jailbroken Two Days After Release Using Combined Attack

Hacker Gets Access to Elmo’s X Account, Posts Vulgar Messages

Hacker Impersonating Elmo Makes Antisemitic X Posts

Hacker uses Elmo’s X account to post antisemitic messages

Hackers Just Found a Wild Way to Trick Google Gemini Into Phishing You

Hate-Filled Hacker Hijacks Loveable Muppet Elmo's Social Media to Share Shocking Antisemitic & Expletive-Filled Posts

India's Central Bureau of Investigation (CBI) Shuts Down £390K U.K. Tech Support Scam, Arrests Key Operatives in Noida Call Center

Indian Police Raid Tech Support Scam Call Center

Interlock ransomware adopts FileFix method to deliver malware

Interlock ransomware group deploys new PHP-based RAT via FileFix

Interlock Ransomware Unleashes New RAT in Widespread Campaign

IoT Devices at Risk Due to eSIM Flaw in Kigen eUICC Cards

Ireland: State's debt management agency loses €5m in phishing attack

Irish debt office to review security protocols after losing 5 million euros in phishing attack

Justice Department Announces Arrest of Prolific Chinese State-Sponsored Contract Hacker

Kaspersky urges vigilance in The Phillippines as financial phishing rises

Law enforcement authorities bust international Microsoft scam call center

Legal gaps in AI are a business risk, not just a compliance issue

Linux Is No Longer Immune: Why Ransomware Gangs Are Going All-In on Linux Targets

Louis Vuitton confirms customer data stolen in cyber attack

Louis Vuitton confirms UK customer data stolen in cyber attack

Louis Vuitton Data Breach - Customer Information Compromised

Louis Vuitton Suffers Data Breach - Customer Information Stolen

Louis Vuitton Data Breach Hits Customers in Several Countries

Louis Vuitton Investigates Cyber-Attack

Louis Vuitton UK Hit by Cyberattack, Third LVMH Breach in 3 Months

Louis Vuitton UK Latest Retailer Hit by Data Breach

Luxury retailer LVMH says UK customer data was stolen in cyber attack

Malicious VSCode extension in Cursor IDE led to $500K crypto theft

Man Gets Suspended Sentence for Hate-Fueled UK Train Stations WiFi Hack

Marks & Spencer (M&S) resumes online recruitment following cyber attack

'Massive and sophisticated' cyber attack targets Florida Trident and its parent organization

McDonald’s Hiring Bot: Would You Like A Side of PII With That?

Mobile phishing threat preparedness lagging among organizations, report finds

National Cyber Security Centre (NCSC) Urges Enterprises to Upgrade to Microsoft Windows 11 to Avoid Cyber Threats

Naver.com Allegedly Suffers Significant Data Leak

Nearly 250,000 Records From Tax Credit Consulting Agency Exposed

Nebraska school district loses $1.8 million in ‘sophisticated’ phishing scam

New American Funding Data Breach Affects Many

New Attack Uses Gemini Summaries to Deliver Phishing Lures

New Mexico State Treasurer’s Office Issues Urgent Warning On Scam Calls, Docusign Phishing Attacks

New PHP-Based Interlock RAT Variant Uses FileFix Delivery Mechanism to Target Multiple Industries

New Zealand: Supermarket loyalty card cyberattack prompts password warning

Operation "ELICIUS": International Hacker Gang "Diskstation" Dismantled by Italian Postal Police

Paddy Power and Betfair users warned as parent company suffers data breach

Phishing attempts target staff and students at Waterloo Region District School Board

Phishing no longer ‘just a consumer issue’

Phishing potentially facilitated by Google Gemini exploitation

Police Service of Northern Ireland (PSNI) officer accused of fraud over data breach payment scheme

Racist, antisemitic content floods Elmo's X account after unexpected hack

Ransomware and Data Extortion Attacks in Insolvency Scenarios

Ransomware attacks nearly double in 2025, with US and SMBs most heavily targeted

Ransomware disrupts Virginia county

Ransomware drops, but don’t relax yet

Ransomware gang takes credit for hacking Belk in May 2025, report says

Ransomware in Italy, strike at the Diskstation gang: hacker group leader arrested in Milan

Regency Oaks Data Breach Affects 10+ Massachusetts Residents

Researchers Jailbreak Elon Musk’s Grok-4 AI Within 48 Hours of Launch

Romanian police arrest 13 scammers targeting UK’s tax authority

Russia-linked group spoofing European journalists to spread disinformation

Russian Basketball Star Daniil Kasatkin Arrested in Ransomware Probe

Saudi industrial services group breached, hackers claim

Scotland: Councillors given assurance on full costs of cyber attack

Securing Against Phishing Beyond Email

Sesame Workshop Says Unknown Hacker Responsible For Posting Antisemitic And Racist Posts To Elmo’s X Account

“Shadowy developer” targets crypto users by compromising legitimate software

Survey Finds AI Adoption Outpacing Security Readiness

The 10 most common IT security mistakes

The ransomware boom shows no signs of letting up – and these groups are causing the most chaos

The Unusual Suspect: Git Repos

UK authorities arrest four in major retail cyber attack probe

UK Crowdfunding Platform Rebuilding Society Allegedly Hacked

UK launches vulnerability research program for external experts

UK replaces US as “No. 1 target” for Russian cyberattacks

Waterloo Region District School Board monitoring phishing scam that targeted staff, students

Waterloo Region District School Board (WRDSB) staff, students targeted in phishing scam

Why your Microsoft 365 setup might be more vulnerable than you think

WinRAR Zero-Day Exploit Allegedly on Sale for $80,000

Your AI, a Weapon Against You: How a Gemini Vulnerability Turns AI into a Phishing Tool

Your eSIM might not be as safe as you think: researchers hack and clone numbers