Data Breaches Digest - Week 27 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 29th June and 5th July 2026.

1st July

A CISO’s Guide to Robocall Mitigation: Applying MITRE ATT&CK to Voice-Based Threats

Adobe patches seven max severity ColdFusion, Campaign flaws

AI-generated code risks reach security, legal, and compliance teams

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81 Million+ Attempts

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Claude Sonnet 5 includes safeguards against dangerous cyber use

EvilTokens Campaign Reveals Device Code Phishing Ticks Up 1,380%, Powered by AI

Insurance Giant Aflac Discloses Data Breach Impacting Millions

Major win for Anthropic as US lifts Mythos, Fable export controls

Microsoft wants to stop unwanted bots from entering Teams meetings

Model Context Protocol (MCP) Tool Poisoning Hijacks AI Agents to Steal Data

Nearly Half of Organizations Lack "Full" Visibility Into Employee AI Usage

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

The New Hacktivists: How Global Conflict Turned a Nuisance Into a Security Threat

Trump’s grip on the Federal Trade Commission (FTC) puts EU-US data transfer at risk

30th June

3 in 4 consumers would ditch a company if it suffered a major cyber attack

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

A ransomware leak exposed Apple's iPhone 18 Pro supply chain secrets

A simple Bing search led to an Akira ransomware attack

Aflac Japan data breach affects 4.38 million policyholders

Aflac Japan Data Breach Impacts 4.38 Million

Aflac Japan reports data breach affecting over 4 million customers

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin

Another Claude Code attack allows full takeover of developers’ systems

Anthropic to restore Claude Fable access on Wednesday

Apple iPhone 18 Pro Design and Component Data Leaked in Tata Electronics Data Breach

Apple iPhone 18 Pro images and details leak in Tata Electronics data breach

Apple iPhone 18 Pro Leak Exposes Supplier Network, Components and Prototype Images After Tata Data Breach

Apple iPhone 18 Pro Supplier List Exposed in Tata Data Leak

Apple iPhone 18 Pro supplier list, component details leaked in Tata data breach

Apple iPhone 18 Pro supplier list, parts leaked in Tata Electronics ransomware attack

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs

Apple rushed to squash 29 bugs because AI is supercharging hackers - update ASAP

Apple Says It's 'Concerned' as Massive Tata Electronics Data Breach Exposes Secret iPhone 18 Pro Details

Apple Security Update Patches 30+ Vulnerabilities in iOS 26.5.2

Apple Speeds iPhone Security Patches to Counter AI-Driven Hacking Threats

Apple’s AirDrop and Android’s Quick Share vulnerable: nearby hackers initiate connection, crash devices, or worse

Apple's iPhone 18 Pro Files Leaked Online In Ransomware Attack

Apple's iPhone 18 Pro supplier data leaked after Tata Electronics data breach

Apple's Secret iPhone 18 Pro Files 'Stolen' in Massive Tata Data Breach as Dark Web Leak Sparks Global Alarm

Apple's Upcoming iPhone 18 Pro Details Leaked Online After Cyber Attack

AssuranceAmerica Suffers Third-Party Data Breach, Customer Data Exposed

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

Barracuda warns of Microsoft phishing and malware rise

Blackfield ransomware asks Nidec Corporation for $2 million ransom

Blackfield seeks $2 million from Nidec after ransomware attack

BlueHammer Vulnerability Exploited in Ransomware Attacks

BumbleBee and AdaptixC2 Deliver Akira Ransomware Through Bing SEO Poisoning

Canada: Lawsuit filed in Alberta over data breach that affected almost three million voters

Canada: Proposed class-action lawsuit launched in Alberta over alleged elector data breach

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

CISA Says Microsoft Defender BlueHammer Flaw Is Now Used in Ransomware Attacks

Class action filed in alleged Alberta data breach that exposed millions of voters’ private information

ClickFix Now Cybercriminals' Favorite Malware Delivery Technique

Critical SimpleHelp Vulnerability Exploited For Malware Delivery

Cross Resource Group Data Breach Affects Current and Former Employees

Cybersecurity & Data Breach Statistics 2026: The Year Cybercrime Stopped Breaking In

Daktronics Controller Flaws Expose Highway Signs to Remote Hacking

Data Breach Scandal: Ernst & Young (EY) Employees Access Top Politician's Banking Details

Doxim Data Breach Settlement Underscores Third-Party Data Security Risk

Dutch regulator warns users are “pouring their hearts into chatbots” over data risks

Every search you make, it’s watching: this malicious Chrome extension captures AI query keystrokes

Exeter Finance Data Breach Compromises Financial Account Information

Fake Perplexity AI Chromium Extension Hijacks Browser Search via Typosquatted Domain

Fake Perplexity extension on Chrome Web Store tracked searches

FBI and Southampton County, Virginia, warns of phishing scam

Fly Phishing: How Business Aviation Can Fight AI-Supercharged Cybertheft

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

Hacked! Automotive giant Nissan discloses multi-country data breach

Hackers claim breach of 1-800-Dentist, threaten to leak health data of millions

Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing

Hackers say they have GameStop customers' personal data

Hackers Steal Data of 4.38 Million Aflac Japan Customers

Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware

Half the defense base still builds security around compliance

Home Office security warning for sponsors: phishing scams on the rise – is your SMS account secure?

How Hackers Just Dumped Apple’s Tightly Guarded iPhone 18 Pro Secrets on the Dark Web

How ransomware syndicates weaponize corporate-style organization

Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware criminal about law enforcement probe

India leads Asia-Pacific Ransomware Target List with 165% surge in attacks

India tops Asia-Pacific (APAC) ransomware target list

Insurance giant Aflac discloses data breach after subsidiary hack

iPhone 18 Pro photos 'leaked on dark web' after data breach involving 20,000 files

iPhone 18 Pro Supplier Details, Photos Leaked After Tata Electronics Data Breach

iPhone 18 Pro supplier list and photos leaked following Tata Electronics ransomware breach

iPhone Security Fixes May Arrive Sooner as AI Speeds Up Threats

Japan Hotel Industry Targeted With TONResolver RAT and Guest Complaint Phishing Emails

Kaspersky Warns of The Gentlemen Ransomware Group Expanding Operations with New Malware

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Malicious PyPI packages give hackers control of Telegram bot servers

Meta Adds WhatsApp Usernames: Here’s What You Need to Know

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft adds smarter bot protection to Teams meetings

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

Midland Care Connection Data Breach Exposes Social Security Numbers

Montenegro Detains Islamic Revolutionary Guard Corps (IRGC)-Linked Hacker Behind $3.4 Billion US University Breach

New BioShocking attack manipulates AI browser into data theft

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs

Nissan Confirms Data Breach Following Oracle PeopleSoft 0-Day Attacks

Nissan Confirms Employee Data Breach After Oracle PeopleSoft Zero-Day Attack

Nissan data breach: ShinyHunters-linked attack may expose staff records

Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day

Nissan Employee Data Breached in Oracle PeopleSoft Hack

Nissan the latest victim in Oracle’s PeopleSoft attack: sensitive data stolen

Nissan Traces Data Breach to PeopleSoft Zero-Day Exploit

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)

Over 300 UK Firms Hit by Ransomware in a Year

Pakistan: Massive Ransomware Attack Hits Capital Development Authority (CDA) Billing System

Park Dental Research Data Breach Exposes Social Security Numbers

Peruzzi Buick GMC Data Breach Exposes SSNs and Driver's Licenses

Phishing-resistant authentication can prevent tax-time fraud

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

Ransomware gangs exploit Microsoft Defender's BlueHammer vulnerability

Ransomware Is About Leverage: Return on Risk Takes It Away

Recently acquired radiology group reports data breach

River Bank & Trust Data Breach Potentially Exposes PII

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

Scotland: Cops prepare for Commonwealth Games cyber attack as fears mount over ticket fraud

Security Organizations Reveal Threat Management Fails to Match Visibility

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

SonicWall: NHS hospitals hit by 10x cyber attack surge

South Korea: 22 Arrested for Laundering 41.5 Billion Won in Fraud, Voice Phishing Proceeds

South Korea: Suspicious Accounts Used in New Phishing Scams Like No-Show Fraud to Be Immediately Blocked...Up to 60 Additional Business Days of Suspension

South Korea expands account freezes beyond voice phishing to cover new fraud schemes

SystemBC Malware Turns Windows Machines Into SOCKS5 Proxies for Ransomware Attacks

Tata data breach exposes iPhone 18 Pro supplier details, prototype images

Tata Electronics Data Breach Leaks Apple iPhone 18 Pro Secrets

Texas Hearing Institute Data Breach: PHI and PII Exposed

Texas Parks Data Breach Exposes Over 3 Million Hunters and Anglers

The Gentlemen RaaS Uses New Ransomware Variant, Backdoor, Encryption

The Gentlemen Ransomware: 483 Victims, 90% Cut

The National Association of Insurance Commissioners (NAIC) Data Breach: A Turning Point for Data Collection and Privacy in the Insurance Industry

The Readiness Gap: What Wimbledon Reveals About Modern Cyber Defense

Thousands of Washington state residents affected in data breach by former Department of Social and Health Services (DSHS) employee

Trenitalia cyber attack exposes sensitive customer data

Trump drops restrictions on Anthropic’s Mythos and Fable models

UK: Barnham family left horrified after Home Office data breach

UK: Businesses warned as over 300 ransomware attacks reported last year

UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks

Ukraine Makes History With First $8.3 Million Seized Crypto Transfer to Asset Recovery and Management Agency (ARMA)

US offers $10 Million reward over Signal attacks on NATO officials

Vulnerability reports are arriving faster than GitHub can review them

Washington State Department of Social and Health Services (DSHS) investigating data breach involving former employee

What the Numbers Say About FIFA 2026 Cyber Risk

29th June

2.7 Million Sysco Emails Leaked Following ShinyHunters Data Breach

212 New Venezuela Earthquake Domains Prompt Donation Scam Warnings

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

A Data Breach Rarely Ends with the Breach Itself - Leaked Data Is Used in Travel and Ticket Scams During the Summer

Agentic AI Has an Identity Problem and Attackers Know It

AI Will Test Identity Infrastructure, Organizations Need More Prep

AI-Driven Identity Attacks Are Surging

Apple supplier Tata tightens internal controls post-data breach

ATM Jackpotting Gang Members Sentenced for Ploutus Malware Attacks

Australia: NSW Rural Fire Service admits security incident

Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection

Bradford Health Services settles class action lawsuit over 2023 data breach

Cambridge University Hospitals (CUH) Trust refers itself to regulator over data breach

Can generative AI be an ally in rooting out ransomware threats?

Canadian hacker sentenced for Texas Republican Party website defacement

Companies keep bolting AI onto their products, and the security bill is coming due

Copying the wrong person on an email could be considered a data breach in South Africa

Couple jailed over ‘worst ever’ Transport for London (TfL) data breach and £650k fraud

Critical SimpleHelp flaw exploited to deploy new stealer malware

Cyber insurance is delivering meaningful financial protection, with a majority of data breach and first-party losses covered according to Willis’ latest report

Cybersecurity for Food Companies: How to Prepare for Ransomware, AI Threats, and Supply Chain Disruptions

Danish official warns data stored on US cloud is shared with American spies

Dark Web Breach Exposes Secret Apple Supplier Data

DCloud Uni-App Scam Network Powers RainbowEx-Style Crypto Fraud and WhatsApp Phishing

DCloud Uni-App Templates Help Fraudsters Scale Crypto, Mobility, and Messaging Phishing Scams

Dell Wyse Management Suite Flaws Let Remote Attackers Execute Code

DentaQuest data breach class action filed over ShinyHunters cyberattack

Don’t pay the ransom: Warning to organisations to protect themselves from ransomware attacks as more than 320 businesses affected last year

European Data Protection Board (EDPB) Adopts Common Data Breach Notification Template

EvilTokens Phishing Breaches Finance Firms Using “Ghost” Code Across U.S. and European Businesses

ExtraHop report finds nearly half of ransomware victims suffer data theft before detection

FBI Sounds Alarm Over Russian Intelligence Signal Phishing

FBI warns of Russian Intelligence phishing campaign abusing Signal support services to target VIPs and high-value government and military targets - this is how to secure your account

FBI, CISA Issue Alert on Russian Phishing Campaign Targeting Messaging App Users

FoxTrot Data Breach Compromises Social Security Numbers

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

Germany discloses data over “silent SMS” use for surveillance

Ghostwriter Hackers Use Real-Time WebSocket Relay to Bypass SMS and OTP MFA

Ghostwriter Phishing Infrastructure Targets Gmail and Ukrainian Email Portal Users

GIFTEDCROOK Payload Targets Chrome, Firefox, KeePass, OpenVPN, and Sensitive Documents

Global Cybersecurity Firms Warn of Rising AI-Powered Phishing Attacks

Government Website in India Taken Offline After Defacement Attack

Hackers claim 110 Million Notion records exposed, but the company’s AI assistant is not concerned

Hackers claiming leak of 310 million Temu accounts: here's what we know

Hackers now exploit critical Oracle E-Business flaw in attacks

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

In major privacy win, Supreme Court rules geofence warrants are protected by privacy rights

India: Pune Property Tax Data Breach Sparks Alarm

India’s Meerut Development Authority Website Defaced With Pro-Pakistan Messages

Indian auto giant Bajaj targeted in ransomware attack

iPhone 18 Pro ‘drop test’ images, parts list included in ransomware leak

iPhone 18 Pro Supplier List, Parts, and Photos Leaked in Tata Ransomware Attack

Iran cyberattacks on Israel surged in 2026, Israeli cyber chief says

Japan Hit By Major Data Breach: Up to 14.22 Million Email Login Credentials Potentially Exposed

Japanese AI police chief takes on $2 billion scam epidemic

Japanese Telecom Giant Says Breach May Expose 14.2 Million Email Accounts

JSP webshells being dropped on unpatched PTC Windchill instances

Justices rule that cellphone location histories are protected by the Fourth Amendment

KDDI Breach Exposes Up to 14.2 Million Email Logins at Six ISPs

KDDI Data Breach Exposes 14 Million Emails in Japan

KDDI Data Breach Exposes 14.2 Million Logins: Shared Infrastructure Flaw Hits Six ISPs

KDDI Data Breach May Expose 14.2 Million Email Accounts

KDDI discloses data breach affecting up to 14.2 million customers

LAPSUS$ targeted Myanmar's AYA Bank, stole 120GB of banking data

London Hydro offers credit monitoring after data breach

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

MCBS Data Breach Compromises PII and PHI Data

Microsoft 365 Apps Security Update Fixes High-Severity Excel RCE Vulnerability

Microsoft extends Windows Server 2022 hotpatching until October 2027

Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts

Microsoft Removes Over 100 StegoAd Edge Extensions Hiding Malware via Steganography

Microsoft reveals phishing campaign targeting hotels in Europe and Asia

Millenium RAT Malware-as-a-Service (MaaS) Uses Telegram Bot API to Control Infected Windows Machines

Most teams accept higher risk for faster AI database work

Mozilla warns of indirect prompt injection risk in AI coding agents

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

National Association of Insurance Commissioners (NAIC) says public data stolen in ShinyHunters' PeopleSoft breach

Nissan discloses employee data breach linked to Oracle zero-day attacks

North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis

Northern Technologies International Corporation (NTIC) Data Breach: Social Security Numbers Exposed

Nova ransomware group takes responsibility for NSW Rural Fire Service (RFS) hack

OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access

Operation Endgame Disrupts SocGholish, StealC Malware Networks

Over 14 million login credentials leaked from six ISPs in major data breach - here’s what we know

Phishing and ransomware - 10 ways to stop phishing-based ransomware attacks

Photo-themed phishing campaign targets European and Asian hotels with Node.js implant

Polymarket Users Lose $3.1 Million in Phishing Attack as 1,891 ETH Moves to Fresh Wallets

Public Proof-of-Concept (PoC) Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

Ransom should not be paid say Law Enforcement Agencies

Ransomware groups are coming for law firms

Ransomware hits European suppliers as attacks surge 55%

Rokarolla Uses Fallback C2 Domains to Maintain Control Over Infected Android Devices

Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover

Russian spies are targeting Signal accounts linked to Ukraine with new phishing tactic

Russian state hackers stealing new Signal accounts with old backup keys, FBI warns

Sender Policy Framework (SPF) checker guide: How to protect your domain from phishing attacks

South Korea: Golfzon Data Breach Victims Launch Class-Action Lawsuit

Tata breach exposes Apple iPhone 18 Pro parts, supplier lists, and images, sources say

Tata Ransomware Breach Exposes iPhone 18 Pro Supplier Data and Device Photos

Texas data breach hits 3 Million license customers

The Hacker’s 2026 Playbook from the Dark Web

The Machine Identity Era Has Already Started

Tower Administrative Services discloses data breach exposing SSNs and financial information

Trump White House Dips Toes Into AI Cybersecurity Regulation by Executive Order

Taiwan digital ministry admits failures over cyber institute data breach

Telegram-Based Millenium RAT Campaign Infects 60,000 Devices

The Gentlemen are knocking: сustom backdoors and evolving tactics

U.S. offers $10 million for hackers targeting WhatsApp, Signal users

U.S. Targets Russian Cyber Spies With $10 Million Bounty Over Messaging App Attacks

UAE Cybersecurity Council Calls for Stronger Digital Footprint Protection

UK businesses fear stigma of ransomware

UK data watchdog fines consultancy firm £300K for flooding people with millions of illegal texts

Ukraine to use seized crypto from cybercrime group to buy war bonds

Ukraine transfers $8.3 million in seized hacker crypto to state wallet, plans military bond purchase

UNC1151 Ghostwriter Hackers Target Belarusian Politician in Gmail Phishing Campaign

UNC5792: $10 million reward for information on Russian hackers

Update Chrome Now: Google Fixes 18 Security Flaws, Including Critical Bugs

US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw

US posts $10 million reward over Russian cyber campaign targeting Signal, WhatsApp

Wabi Sabi Behavioral Health Center Data Breach Exposes SSNs

Wales: Publication of pictures of medical files on social media prompts data breach inquiry

Website owners report surge in malicious bots impersonating Googlebot, sparking call to check IPs

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private

WhatsApp rolls out usernames to help users hide their phone number

Why Insider Threats Deserve a Spot at the Top of Your Risk List

Women's Center for Radiology Data Breach Compromises Personal and Health Information

Women's Wellness of Delaware Data Breach Impacts Aesthetic and Clinical Service Patients

Ransomware Operator Claims - Week 25 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 15th June and 21st June 2026, kindly assisted by our partners.

DBD discovered and researched 188 Ransomware Victims over 47 Countries and Islands claimed by 34 Data-Leaking Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 26 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 22nd June and 28th June 2026.

28th June

Anonymous-Linked Hacktivist Aubrey Cottle Jailed Over Texas GOP Cyberattack

Apple Documents Leaked in Tata Electronics Ransomware Attack

Black Spark Resistance Claims Data Breach at Shahed Drone Production Facility

Data breach exposes up to 14.2 million email logins at six ISPs

FBI warns Microsoft 365 users about new scam

Hackers Found New Way to Penetrate Microsoft Accounts Without Passwords, FBI Warns

Insurance industry faces data breach as National Association of Insurance Commissioners (NAIC) discloses PeopleSoft hack

Japan: Police Arrest Man for Allegedly Creating Ransomware Using AI After Hearing About Asahi Group Holdings Ransomware Attack

Japan: ‘Voice phishing’ scammers siphon ¥1.3 billion from over 30 companies nationwide

KDDI Data Breach Impacts up to 14.2 Million Email Accounts at Six ISPs

KDDI Data Breach May Expose 14.2 Million Email Logins

Korea Food Industry Association Confirms Potential Personal Data Breach

LastPass Confirms Vendor Breach Exposing Customer Data And Raising Phishing Risk

What Is BlackSuit Ransomware & How Could It Impact Your Organization?

Why did the KDDI data breach put up to 14.2 million ISP email logins at risk across Japan

27th June

Belgian federal police establishes a specialised anti-phishing unit

Clean GitHub repo tricks AI coding agents into running malware

Crypto Audit Gap: Why Private-Key and Phishing Losses Break the Smart-Contract Audit Model

Hospitality Sector Hit by Phishing Campaign Using Fake Guest Complaint Emails

Luxembourg: State services targeted by cyberattack on National Day

Malaysia: Ministry Of Health Confirms Portal Disruption Due To Cyber Attack

Montenegro Police and FBI Arrest Hacker Who Targeted Hundreds of Universities with 3.4 billion US dollars in Losses

OpenAI limits access to new GPT-5.6 models at US government’s request

Polymarket hack updated to $3.1 million days after the platform promised users full refunds

Scammers using AI to create convincing fake delivery texts, emails

Stark cyber attacks warning as staggering volume of Network Rail hacks laid bare

Tata Electronics steps up security as data breach probe continues

Tata Electronics Tightens Internal Security Following Massive Dark Web Data Breach

The World Cup Brings Scams Like Phishing Back To The Centerstage

Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

US approves limited release of Anthropic's Mythos 5 AI model

US Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) cancels phone surveillance contract over privacy concerns

Why SAP Access Governance Needs Business Context, Besides Automation

26th June

41.6% of South Korean workers open simulated phishing emails

Adblock for YouTube Chrome Extension Hides Dormant JavaScript Injection

AI can be an ally in rooting out ransomware threats

Alamo Heights ISD Data Breach Affected Nearly 30K

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

American Tower Data Breach: 215,000+ Accounts Exposed in ShinyHunters Attack

Anthropic accuses Alibaba of stealing Claude AI model using 25,000 fake accounts in massive cyber attack

Apple supplier Tata tightens internal controls after data breach, sources say

Australian journalists, human rights organisations coming under increasing cyber attack

Bajaj Auto confirms normal operations after ransomware attack

Bajaj Auto Says Operations Normal After Ransomware Attack

Bajaj Auto says operations uninterrupted as ransomware investigation continues

Belgium: Police in East Flanders break up international phishing ring

Bluekit Phishing Kit Gets Deadlier With Browser-in-the-Middle Upgrade

Bluekit phishing platform adopts new technique for account theft

Cambridge University Hospitals Probes Mass Data Breach Involving Crocodile Attack Victim's Records

Cambridgeshire Police Investigate Crocodile Pit Attack and Hospital Data Breach

Canada’s TD Bank Deploys WorkiQ Surveillance Software Amid Privacy Gaps

Challenge Manufacturing Data Breach Exposes Social Security Numbers

China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue

CISA sets urgent deadline to fix Cisco flaw exploited in attacks

Critical open-source projects get a new security framework

CVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access

Cyber Monitoring Centre (CMC) Releases Analysis and Guidance for Education Sector After Canvas Data Breach

Cyberattack Exposes Data Breach at France's Insee

Cybersecurity firms targeted by fraudulent OpenAI organization invites

Fake Amazon Web Services (AWS) pages bypass MFA and put cloud credentials in cybercriminals’ hands

FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys

Five Eyes Warns AI Could Speed Cyberattacks Within Months

France statistics agency Insee confirms cyberattack on staff data

France's statistics department reports cyberattack on staff data

From Phishing to Vishing: Why DevSecOps Must Rethink Communication Security

Gamaredon 2025: New Tools, Turla Alliance, Cloud Exfiltration

Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

Hackers Claim French Employment Leak Exposes Over 1 Million Records, Health Data

Healthcare leaders see a fatal cyber incident as inevitable

Hong Kong: 15 arrested in HK$16.8 million Water Supplies Department phishing scam

Hong Kong, mainland police smash HK$16.8 million cross-border phishing syndicate

Hotel Phishing Attack Uses Calendly to Bypass Email Authentication Filters

Hotel Phishing Clears All Email Security Filters: Microsoft Names New Attack Class

How the Latest Ransomware Attacks Are Disrupting Global Financial Systems

Huntsville Hospital vendor hit by data breach: What patients need to do now

Iranian Hacker Arrested Over Alleged $3.4 Billion Cyberattack on USA Infrastructure

Iranian Hacker Wanted by US Arrested in Montenegro Over $3.4 Billion Cyberattack Case

Iranian Hacker Who Caused $3.4 Billion Damage to US Arrested

Italy: Trenitalia hacker attack on some customer data

LastPass Has Been Hacked Again. Here's What to Do If You're a Customer

LastPass Security Incident Raises Concern for Targeted Phishing Attacks

macOS Flaw Allowed Standard Users to Disable CrowdStrike and Kandji Security Tools

Madison Square Garden faces class action lawsuit over breach of 26 million customer records

Massive data breach hits Apple supplier Tata Electronics

Massive Data Breach at Tata Electronics Reveals Apple Confidential Files

Massive Hack: Iranian National Arrested for $3.4 Billion Cyber Attack

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Microsoft Extends Windows 10 Security Updates to 2027

Microsoft gives Windows 10 users an unexpected extra year of free security updates

Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant

Mirage2FA phishing kit uses HTML smuggling to steal Microsoft 365 credentials

Montenegro arrests Iran-linked hacker wanted by US

Montenegro Arrests Iranian Hacker Tied to Massive Cyber Heist

Montenegro Police arrests Iran-linked hacker wanted in US

Montenegro police, FBI arrest Iran-linked hacker wanted by US

Montenegro police, FBI arrest US-wanted Iranian hacker

Montenegro Snags Alleged Iranian Hacker Wanted In New York University Cyber Heists

Myanmar AYA Bank Acknowledges Customer Data Breach Amid Conflicting Claims Over Scope of Leak

Myanmar’s AYA Bank acknowledges cyberattack after hacking group claims data breach

Mystery hackers use novel SharkLoader dropper against governments, software developers

National Association of Insurance Commissioners (NAIC) confirms breach as ShinyHunters dumps 3.1TB tied to national insurance systems

National Association of Insurance Commissioners (NAIC) confirms data breach with ShinyHunters claiming 3.1TB of data stolen in Oracle zero-day attack

New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

New License Plate Reader Tech Could Track Phones, AirPods, and Smartwatches

New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks

Northern Ireland: New warning to parents over schools cyber attack

Ohio: Stark-based Northeast Professional Caregivers announces data breach

Okanogan Behavioral Healthcare Settles Class Action Data Breach Lawsuit

OpenAI limits GPT-5.6 rollout after government request, says restrictions shouldn’t be the norm

Over 80,000 individuals impacted in Minnesota Epilepsy Group cyber incident

Polymarket Confirms Crypto Hack, Refunds User Stolen Funds After Third-Party Vendor Breach

Polymarket Covers $3 Million in Losses After Phishing Attack Hits 4,500 Users

Polymarket customers lose $3 million in supply-chain attack

Polymarket Hackers Drain $2.9 Million From User Wallets, Funds To Be Refunded

Polymarket hit by $3 Million cyberattack via third-party dependency, promises full refunds

Polymarket Phishing Attack Drains Nearly $3 Million From User Wallets

Polymarket to refund users after $2.94 Million frontend phishing attack

Ransomware gangs find Europe’s weakest link in third-party suppliers

Ransomware victims spot attacks only after data theft

Resecurity Warns Maritime Sector Faces Rising Cyber Threats

Russia Used Cellebrite on Jailed Activist's iPhone Months After Sales Cutoff

Russia used social engineering to breach prominent messaging accounts, Ukraine says

Russian hacker has bad news for South Africans who stay at hotels

Russian Hackers Behind the $2.5 Billion Jaguar Land Rover Cyberattack, Investigators Say

Russian hackers now target Signal backup recovery keys

Russian hackers were behind $2.5 Billion hack of Jaguar Land Rover

Scammers abuse Shopify’s Shop app with fake receipts

Security Leaders Discuss Texas Hunting, Fishing License Data Breach

SIM-swapping gang busted in international police operation

Someone hacked Johnson & Johnson's internal systems to teach it a lesson

Synology issues critical fix for MailPlus Server vulnerabilities

Tata Electronics tightens security after Apple, Tesla data breach

Tata Electronics Tightens Systems After Major Data Breach

TD Bank begins monitoring staff activity as experts warn Canada lacks workplace surveillance safeguards

Teens behind Transport for London (TfL) cyber-attack were known to police years before the breach

Teens who hacked Transport for London (TfL) were known to police years before cyber-attack

The Fedcap Group Data Breach Exposes SSNs and Driver's Licenses

The Security Coverage Gap is a Maths Problem

The ‘year of AI’: 2026 sees influx of ransomware attacks

Think You're Too Smart to Be Scammed? UK Fraud Victims Lose an Average of £443, New Survey Finds

Tower Administrative Services Data Breach Exposes SSNs and Financial Information

Trump Administration releases Anthropic Mythos to be used by more than 100 US companies, agencies

Turkish Cypriot administration data breach exposes health records on dark web

Turla group adds more malware to Russia’s espionage efforts against Ukraine

UK CEOs want Cyber Attack recovery within Hours and not Days or Weeks

UK hospital reports itself after 40 staff accessed crocodile attack victim’s records

Windows 10 just very quietly got another year of free support - but why?

Woodgnat Hackers Use Mistic RAT to Broker Access for Ransomware Gangs

World’s Most Wanted Hacker Arrested: FBI and Montenegrin police detain member of Iran’s Revolutionary Guard in Kotor

X suspends security researchers over so-called "malicious behavior," sparking backlash

25th June

26K+ people impacted by data breach at Alamo Heights ISD, Texas attorney general says

27 million passwords seized as Microsoft and EU authorities knock down malware infrastructure

61% of Healthcare Organizations Predict a 'Fatal' Cyberattack Within 5 Years

Adversary-in-the-Middle (AiTM) Phishing Kit Steals Console Credentials and MFA Codes from Amazon Web Services (AWS) Environments

AgelessRx Data Breach Exposes Patient Health Information

Agentic Red-Team Tools Expose API Keys, Sandbox Escape, and Host Compromise Risks

Almost half of ransomware victims have data stolen before they can even detect an intrusion

Amazon Web Services (AWS) Adversary-in-the-Middle (AiTM) Phishing Kit Steals Console Credentials and MFA Codes in Real Time

Anatomic and Clinical Laboratory Associates (ACLA) Data Breach Exposes Social Security Numbers & Medical Information

Another Russian dairy company reportedly disrupted by cyberattack

Anthropic Accuses Alibaba of Largest Claude AI Distillation Attack

Anthropic AI restrictions spark lawsuit against Trump administration

Australian Security Intelligence Organisation (ASIO) Reveals Nation-State Hack of Australian Critical Infrastructure

Bajaj Auto Confirms Systems Affected by Ransomware Attack

Banking trojans are still with us, and they’re more dangerous

Bluekit phishing kit adopts browser-in-the-middle for login theft

Bradford Health Services; Bradford Health Partners Settle Data Breach Lawsuit

Cal Water Confirms User Credentials Exploited in Hacking

Cellebrite UFED Used by Russia Against Activist Andrey Pivovarov Despite 2021 Cutoff

Chrome Ad Blocker with 10 Million+ Installs Found with Dormant Script Injection Capability

Cisco Catalyst SD-WAN Manager Zero-Day Exploited to Gain Root Access

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access

Cisco Vulnerability Exploited Months Before Disclosure, Google Warns

ClawHub Malicious Skills Deliver macOS Infostealers Through Base64 curl-pipe-bash Droppers

Columbia Pacific Advisors Data Breach Exposes Personal, Health and System Access Information

Corporate cybercrime: Why businesses are becoming prime targets of hackers

Croatia: Plitvice Lakes System Falls Victim to Cyber Attack

curl Patches 18 Vulnerabilities Including Password Leak and WebSocket Memory Bugs

Cyber Attack on Alamo Heights ISD Exposes Personal Data

Cyber attacks enter AI automation era as subscription crime platforms spread

Cyprus: Police warn public over phishing emails impersonating tax department

Data breach may affect former Mayo Clinic patients, says Xsolis

Data breach on healthcare AI vendor exposes records from 1.4 Million patients

Dean Cosmetic Dentistry Center Data Breach: Sensitive Files Compromised

Edge users beware - this malicious extension can break out of the sandbox and install ransomware

Eisen Data Breach Exposes Sensitive Personal Info Including Social Security Numbers

Elite network says it was hacked after members’ personal data was left exposed

ESET research investigates Gentlemen ransomware gang and its defence-evasion tools

Europe Becomes a Growing Ransomware Hotspot as Attacks Surge

Europe Evolves Into Ransomware's Favorite Region

Europol Disrupts Cybercrime-as-a-Service Networks Used for Ransomware and Financial Fraud

Europol Disrupts SocGholish, Amadey, and StealC Malware Networks in Global Cyber Strike

Europol, Microsoft Hit Malware Network Behind 27 Million Stolen Logins, 140,000 Infected Computers

Ex-Huntress analyst claims company insider fed info to a ransomware criminal. Social media drama ensues

Fake Grand Theft Auto 6 (GTA 6) Early Access Websites Target Gamers with Malware and Crypto Scams

Fileless Ransomware Backdoor Mistic Erases Itself: Symantec Warns File Scans Will Miss It

From Bajaj to Tata: Ransomware Exploits India’s Industrial Supply Chain

Hacked Klue says criminals are deleting stolen customer data, but now other hackers are making threats

Hacker gets 18 months for attack that compromised 60,000 betting accounts

Hackers Abuse Chrome Policy Keys to Force-Install Malicious Browser Extension

Hackers Abuse Cloudflare-Hosted Amazon Web Services (AWS) Phishing Domains to Steal Console Logins

Hackers behind cyber attack on Transport for London plead guilty ahead of trial

Hackers Exposed Knicks, Madison Square Garden Data

Hackers Use Cloned AWS Console Login Pages to Capture MFA Codes and Replay Credentials

How Universities Can Manage Vendor Risk After the Canvas Breach

India: Cyber Crime Cracks APK Fraud; Mastermind Arrested: Hails From Phishing Capital Jamtara

Inside Mistic, the New Stealth Backdoor in Ransomware Intrusions

Inside the 2026 SMB threat landscape: From phishing and scams to fake AI tools

Interpol: Cybercrime Hits 30% of Recorded Crime in Surveyed APAC Countries

Kaspersky 2026 SMB Threat Report: Fake AI Tools Used in 33,000+ Attacks

Klue Hit by Double Extortion as Second Hacker Group Emerges

Langflow AI Pipeline RCE Exploited Within 20 Hours to Steal Keys and Credentials

Lapsus$ claims cyber attack on Virta Health, nearly 15,000 affected

LastPass hit with another data breach

LLM security advice looks solid until you check the hard cases

LokiBot Infostealer Uses Obfuscated JScript and PowerShell Loader in Recent Campaign

macOS Flaw Lets Standard Users Disable Endpoint Detection and Response (EDR) and Mobile Device Management (MDM)

macOS.Gaslight Rust Backdoor Uses Prompt Injection to Mislead AI Malware Analysts

Major Increase in Ransomware Attacks Targeting Europe, Warns New Report

ManageEngine AD360 Flaw Lets Unauthenticated Attackers Take Over User Accounts

Microsoft: 2 ransomware groups hit SharePoint in parallel attacks

Microsoft’s ‘New Approach’ to Fighting Malware Nabs Amadey, StealC Infrastructure

Millions of Texans may be affected by this state agency’s data breach

Milton says city data stayed secure after suspected ransomware attack in 2025

Most teams will ship AI-written infrastructure code with little review

National Association of Insurance Commissioners (NAIC) confirms June data breach

New ‘Blacksite’ phishing kit bundles Adversary-in-the-Middle (AiTM) with scanner evasion

New CISA Guide Helps Agencies Adopt Secure Access Service Edge (SASE) For Zero Trust

New 'Edgecution' malware silently hijacks Microsoft Edge to deploy ransomware

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

New macOS malware embeds fake errors to confuse AI analysis tools

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

New SharkLoader Malware Targets Diplomatic and Government Entities Across Multiple Countries

Nigeria: Independent National Electoral Commission (INEC) suspends electoral officer over voter data breach

Operation Endgame Disrupts SocGholish, Amadey, and StealC Malware, Recovers 27 Million Stolen Login Credentials

Optimum First Mortgage Data Breach: 9.3TB Compromised

Order-tracking app Shop abused to push callback phishing attacks

Poland busts SIM-swapping gang tied to millions in crypto theft

Polymarket says hackers stole users’ funds

Prince George County, Virginia, Discloses Recent Cyber Attack

Researchers hijack 26,000 AI agents using fake skill marketed on Instagram

Rokarolla Android Banking Trojan Turns Smartphones Into Weapons Against Users

Russia used Cellebrite phone-hacking tool to crack down on dissident after firm cut off country

Scattered Spider teens plead guilty to Transport for London cyberattack

Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs

Shai-Hulud Campaign Abuses node-gyp Rebuild to Execute Credential-Stealing npm Payloads

South Korean Regulator Fines Bithumb for Data Breach

State-Backed Cyber Actors Increasingly Hiding Behind Ransomware Operations

Stealthy new backdoor surfaces in attacks on multiple sectors

Stryker Cyberattack Lawsuit Faces Challenge as Company Seeks Dismissal

Suspected Cyberattack Sends Fake Emergency Alert to Phones Across Brazil

Tata Electronics Confirms Data Breach After 630GB Leak Claim Targets Apple and Tesla

Texas data breach hits 3 Million license customers

Texas Parks Data Breach Exposes Information of 3 Million+ Customers

The Extortion Market Has Matured, And the Response Industry Is Part of It

Third-Party Data Breach May Affect Some Former Mayo Clinic Patients

Top medical aid in South Africa with 200,000 clients hit by data breach

Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds

Twenty Million US IP Connections Used by Proxy Services

Two Indian Manufacturers Hit in Ransomware Attack Cluster This Week

Ubiquiti UniFi OS devices targeted: CISA orders the patching of critical bugs

UK Museums left vulnerable to cyber-attack as government overly reactive in face of threats

Ukraine's state postal operator reports app disruption after cyberattack

What happens when hackers steal AI? US lawmakers push new reporting rules

WhatsApp will warn users before they message a potential scammer

Why patch directives only go so far

24th June

AI in Cybersecurity Has a Value Problem, Not a Technology Problem

AI Is Making Attacks Cheaper, Faster and More Covert

AI-Powered Phishing Attacks Surge 1,380% as Criminal Platforms Render MFA Obsolete

Airbnb scams surge 30x as criminals hijack legitimate host accounts

Algerian national accused of running cybercrime marketplaces extradited to US

Amadey and StealC Malware Network Disrupted, 27 Million Stolen Credentials Recovered

Amadey, StealC malware operations disrupted in Operation Endgame action

Anthropic's Mythos model found flaws in classified US systems within hours

Apple and Tesla Supplier Tata Electronics Confirms 630 GB Data Theft: iPhone Specs on Dark Web

Asia-Pacific cyber threat environment intensifies as INTERPOL records surge in ransomware, phishing, DDoS attacks

Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker

Bajaj Auto Confirms Ransomware Attack on Key Systems

Bajaj Auto Confirms Ransomware Incident on Internal Systems and BATL Unit

Bajaj Auto Hit by Ransomware Attack

Bajaj Auto hit by ransomware attack after Tata Electronics breach, putting focus on manufacturing cyber resilience

Bajaj Auto hit by ransomware attack, operations unaffected

Bajaj Auto reports ransomware attack on systems, says impact contained

Bajaj Auto says ransomware attack affected its systems and tech subsidiary

Bajaj Auto shares fall over 2% after disclosing ransomware attack on company, subsidiary systems

Bally's Interactive Data Breach Exposes Social Security Numbers

Be on the lookout for Mistic, a new backdoor used by ransomware broker

British Scattered Spider Hacker Pleads Guilty to Cyberattacks on Transport for London (TfL); SSM Health Care; Sutter Health

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

CISA warns of max severity Ubiquiti flaws exploited in attacks

Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)

Cisco Unified CM Flaw Exploited After Proof-of-Concept (PoC) Reveals File-Write Path to Root

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

Credentials Lost the Top Spot. They Didn’t Lose Their Teeth

Data breach affects Texas fishing and hunting license holders

Data Breach Impacts Madison Square Garden Sports and the New York Knicks

Data Breach Response Plan for MSPs: A Complete Guide for 2026

Department of Justice (DoJ) Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering

DraftKings hacker 'Snoopy' sentenced to 18 months in prison

Europol Disrupts StealC and Amadey Malware Infrastructure in Operation Endgame

Europol-Led Operation Endgame Takes Down StealC and Amadey Infostealers

Equinix Inc. Data Breach Exposes Personal and Health Information

EvilTokens Hides Its Attack Flow in the Browser, Exposing Static Analysis Gaps

EvilTokens phishing service scales attacks 1,380% with AI integration

Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords

Fantasy Sports and Betting Website Hacker Sentenced for Credential Stuffing Attack Compromising 60,000 Accounts

German businesses face growing Bankruptcy risks from Ransomware Attacks

Google releases new privacy controls for activity history, personalization

Hacker behind Reynella East College hack dumps hundreds of gigabytes of alleged teacher and student data on darkweb

Hackers Exploit Unpatched SharePoint Servers to Deploy Ransomware and Custom Backdoors

Healthcare AI Platform Xsolis Confirms Data Breach Affecting 1.4 Million People

Healthcare AI platform Xsolis suffers data breach impacting 1.4 Million individuals

Healthcare Vendor Xsolis Reports Breach Affecting 1.4 Million People

How 100 Romanian hospitals switched to pen and paper after a devastating ransomware cyber-attack

Humana, Mayo Clinic vendor breach exposes records of 1.4 Million patients

Hillcrest Convalescent Center Settles Class Action Data Breach Litigation

Income Tax Department Phishing Campaign Uses Malicious Tax_Assessment.img to Drop Malware

Indian auto giant Bajaj Auto hit by ransomware incident

Iranian banks targeted in cyber attacks amid peace talks

Iranian-linked hacker group did not breach California water systems, investigation finds

Japan: Information for 14 million email accounts possibly leaked in cyberattack on KDDI

KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Million Email Credentials

KDDI Data Breach Exposes 14.2 Million Managed Email Credentials

KDDI Data Breach May Have Exposed Up to 14.22 Million Email Accounts

Kenya records over 3 billion cyber-attack attempts in three months

Klue hack leads to customer data breach

KongTuke team uses new Mistic backdoor

LastPass confirms 2026 customer data breach: Klue hack exposed Salesforce data

LastPass confirms data breach after hacker compromises supply chain - here's what we know

LastPass Confirms Vendor Breach Exposed Customer Contact, Support Data

LastPass customer data exposed through Klue supply chain attack

LastPass customer info leaked again after third-party data breach

LastPass data breach confirmed: Everything we know so far

LastPass discloses data breach via Klue integration with Salesforce environment

LastPass hit by new data breach - 4 steps you should take now

LastPass suffers another data breach, but this time your password vault is safe

LastPass Suffers Fresh Data Breach via Third-Party Supplier

Law enforcement hits StealC and Amadey malware networks

macOS Backdoor Uses Prompt Injection to Evade AI Triage

Madison Square Garden Hack Exposes 26 Million Visitor Records

Major Global Cyber Operation Disrupts SocGholish, Amadey, And StealC Malware Networks

Malicious Edge extension abuses Native Messaging as bridge to malware

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

Microsoft DART Uncovers Multiple Attackers Operating Inside Same Compromised Network

Microsoft Teams Phishing Lures Push Victims Toward Remote Access Tool Installation

ModeloRAT and Mistic Backdoor Activity Linked to Ransomware Initial Access Broker

Multiple Vulnerabilities in QNAP NAS Devices Resolved Through Security Updates

Nearly Half of Ransomware Victims Suffer Data Theft Before Detection

New GhostShell Hacking Group Targets Ukraine’s Drone Defense Sector

New ‘Mistic’ RAT Opens Door to Several Ransomware Families

Nintendo of America's employee data stolen by Shadowbyt3$ extortion group

Operation Endgame Disrupts StealC, Amadey and SocGholish Malware Networks

Phishing attack on healthcare firm Xsolis impacts 1.4 million people

Phishing Reconnaissance: How Attackers Identify and Target Vulnerable Domains

Ransomware attacks grew in 2025 as traditional data breaches fell

Ransomware's New Maths: Inside the £1.9 Billion Season That Redefined Critical-Infrastructure Risk

Ransomware’s next move: Why disabling security tools changes the rules of cyber defence

Researchers Trick AI Browsers Into Leaking Credentials

Security testing was built for a slower world

Sensitive data of over 40,000 people impacted in Blue Fish Pediatrics cyber attack

SMEs must constantly revisit cyber security measures

Stealthy Mistic backdoor linked to ransomware access broker KongTuke

Suspected Cyberattack Triggers False Emergency Alerts Across Brazil

Tata Breach Leaks Apple and Tesla Trade Secrets

Tata Confirms Apple, Tesla Data Breach Claim

The Massive Madison Square Garden Hack Exposed Celebrities and Customers - and Started With 1 Old-School Trick

The Personal Information of 800,000 Texas Residents Is Hacked In A Carnival Cruiseline Data Breach

Third DraftKings Hacker Sentenced to 18 Months in Prison

Thousands in Brazil received a fake ‘ALIEN ATTACK’ emergency alert at 1:30 a.m. Hacker group later claims responsibility for the hack

Three ‘cybercrime as a service’ operations undercut by Microsoft, law enforcement

"To see a play, you must now pay with your privacy”: backlash over facial recognition expansion in London’s West End

Transport for London (TfL) Hackers Plead Guilty After Breach Exposed Customer Data and Cost £29 Million

UK: Museums left vulnerable to cyber-attack as government overly reactive in face of threats

UK Museums Face Cybersecurity Risks, MPs Warn

UK’s museums and galleries left vulnerable to cyber-attack and theft, MPs warn

What Bajaj Auto ransomware attack says about cyber security risks for Indian automakers

With jobs on the line, CEOs now demand cyber attack recovery in hours, not days or weeks

You Won't Spot These World Cup Scams the Way You Used To

23rd June

2 Scattered Spider-Linked Hackers Plead Guilty Over £39 Million Transport for London (TfL) Cyberattack

4 ways to protect the company against vishing attacks

29-Year-Old Squidbleed Flaw Discovered With Help From Claude Mythos Preview

After Files Surface On Dark Web, Tata Electronics Confirms Data Breach

Algerian man extradited from Spain, charged with running cybercrime operation

Amazon One Medical Seniors discloses health data breach

An Income Tax Assessment Notice Phishing Campaign Delivering Malware

Apple and Tesla trade secrets exposed as Tata hit by data breach

Apple investigating cyber incident at Tata Electronics after ransomware group’s leak claims

Apple, Tesla trade secrets allegedly exposed in Tata Electronics hack

April 2026 Healthcare Data Breach Report

Auburn, New York, Warns of Phishing Scam Impersonating Government

Bajaj Auto hit by ransomware attack

Bajaj Auto reports ransomware attack on systems, says impact contained

Belgian State Security hit by data breach, employee data potentially exposed

Canadian Electricity Provider London Hydro Discloses Data Breach

Cherry Health Data Breach Compromises Health Records

Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks

CodeStorm Phishing Kit Uses Tenant-Aware M365 Replay to Hijack Microsoft 365 Accounts

CodeStorm Phishing Campaign Targets Microsoft 365 (M365) Tenants With Token Reuse and Replay Attacks

‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking

Coupang’s $409 Million Fine Shows the Real Cost of Weak AI Governance

Critical FFmpeg flaw discovered: just watching a video can fully compromise your system

Cruise Line Data Breach Could Effect 800,000 Texans

Cyber Risk Assumptions Are Becoming Obsolete Due to AI

Cybercriminals Abuse Traffic Distribution System (TDS) Infrastructure to Bypass Firewalls and Hide Malicious Destinations

Data Breach at Tata Electronics Tied to Apple and Tesla

Duo accused of role in Transport for London (TfL) cyber attack plead guilty after ‘lengthy, highly complex, and painstaking investigation’

ESET Research investigates Gentlemen ransomware gang and its defense-evasion tools

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

Feds seize alleged cyber-scam infrastructure connected to Southeast Asian company

Finch CPA Firm Data Breach Exposes Sensitive Personal and Financial Data

Five Eyes agencies sound alarm about AI’s threat to cybersecurity

Five Eyes Alliance: Threats from Frontier AI Models Only Months Away

Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

Free, no-signup World Cup streams serve scams instead of football

Gentlemen ransomware gang supplies EDR killers to affiliates

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

Google sues Chinese phishing network over fake texts

Grand Theft Auto VI (GTA 6) early access offers are taking gamers’ crypto

Grand Theft Auto VI (GTA 6) Scams Emerge as Pre-Orders Open

Hacker employs Claude to breach booking firms, leaves millions of records publicly accessible

Hacker hijacks Brazil's national alert system, sending "misanthropy" to millions of phones

Hackers Abuse Compromised Microsoft 365 Accounts to Scale CodeStorm Phishing Operations

Hackers Abuse Outlook Groups and Microsoft 365 Collaboration Features for Phishing Attacks

Hackers Deploy FortigateSniffer Tool to Harvest Credentials From Compromised Firewalls

Hackers Obtain The Personal Data of Texas Hunting and Fishing License Holders

Healthtech firm Xsolis suffers data breach impacting 1.4 million people

How 100 hospitals switched to pen and paper to defeat a national cyber-attack

Hundreds of Belgian organisations hit by cyber attack

Hunter Associates Data Breach Exposes Social Security Numbers and Financial Information

India's Bajaj Auto says ransomware attack hits systems

Inside ‘GentleKiller’: How The Gentlemen Ransomware Disables Enterprise EDR

INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

Iranian Hacker Groups Using AI to Target Space Infrastructure

KH Credit Union Data Breach Exposes Social Security Numbers

Klue investigating supply chain attack that targeted Salesforce integrations

Klue says hackers stole credential from 2022 that led to customer data breaches

Land Transport Authority impersonation phishing scams on the rise again in Singapore

LastPass Confirms Customer Data Breach After Klue OAuth Token Theft

LastPass confirms data breach in Klue supply chain attack

LastPass notifies users of yet another data breach

Lookalike npm Package Hides a Multi-Stage Windows RAT

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

Mayo Clinic Confirms Data Breach Involving Third-Party Vendor X-Solis

Men admit £39m cyber attack on Transport for London

Meta employee surveillance controversy sparks Data Breach concerns

Meta hits pause on tracking employees’ keystrokes after internal leak

Meta is pausing its employee keystroke-tracking program after sensitive data was exposed internally

Meta pauses employee monitoring program after data protections fail

Meta Pauses Model Capability Initiative (MCI) Over Data Security Concerns

Meta Puts Employee Input Tracking Programme On Indefinite Hold After Sensitive Data Breach

Microsoft 365’s Most Trusted Features Are Being Weaponized Against Corporate Users

More Than 3 Million Texas Hunting, Fishing License Holders Impacted by Data Breach

Mount Royal University (MRU) still resolving impacts of cyber attack, but some problems eased

National Portrait Gallery of Australia investigating data breach claims

New CryptoBandits Malware Uses USB Drives and Tor to Steal Crypto

New Go ransomware Prinz Eugen hits newest files first

New macOS ClickFix attack silently mounts DMGs to push infostealer

New Phishing Attack Abuses Outlook and Microsoft 365 Groups Features to Attack Users

New WhatsApp phishing campaign allows for remote access from a single business document

North Korean hackers infiltrated software used to build AI apps, Microsoft says

Only 7% of companies are ready for the AI agents they deployed

Password manager maker LastPass says hackers stole customer support case data during Klue breach

Payouts King Ransomware Initial Access Broker Deploys New Edgecution Malware

Phishing hides in routine Microsoft 365 workflows

Ransomware Attack Targets Bajaj Auto Systems; National Cyber Agency Informed

Ransomware bans won’t stop ransomware. Resilience might

Ransomware losses hit $5.3 million as insurance payouts fall short

Residential proxy SDKs are hiding in LG and Samsung smart TV apps

Scammers Ripped Off Consumers for $16 Billion Last Year, Mostly Running Imposter Schemes

Scattered Spider Hackers Plead Guilty to £39 Million Cyber-Attack on Transport for London

Scattered Spider members plead guilty to 2024 Transport for London (TfL) cyber attack

Scattered Spider members plead guilty to hacking Transport for London

Scattered Spider Teens Convicted of Transport for London (TfL) Cyber-Attack

South Korea: Police Launch Probe Into 'Startup for All' Data Breach

South Korea: Police Probe 'Startup for All' Data Breach

South Korea is investigating a data breach affecting participants in a government program and has launched a broad cybersecurity investigation

Tata Electronics admits data breach after 630GB of files posted on hacker forum

Tata Electronics confirm data breach, with hackers claiming 200,000 Apple, Tesla files stolen

Tata Electronics confirms cyberattack as hackers leak data

Tata Electronics confirms cyberattack after alleged Apple, Tesla documents appear online

Tata Electronics Confirms Data Breach Affecting Apple, Tesla Supplier

Tata Electronics confirms data breach after sensitive files appear online

Tata Electronics confirms data breach involving sensitive files

Tata Electronics confirms data breach, Apple and Tesla-linked files emerge online

Tata Electronics Confirms Ransomware Attack as Leaked Data Purportedly Links to Apple, Tesla

Tata Electronics Data Breach Exposes Confidential Apple and Tesla Documents

Tata Electronics data leaked on dark web:Hackers stole Apple & Tesla's secret designs

Tata Electronics faces cybersecurity breach; says no impact on business

Tata Electronics hack claims to leak Apple, Tesla data

Tata Electronics hit by data breach, Apple and Tesla files found in leak: Here is what happened

Tata Electronics Hit by Data Breach; Apple, Tesla Files Allegedly Exposed

Tata Electronics hit by ransomware attack claiming to expose Apple, Tesla trade secrets

Tata Electronics Leak Exposes 200,000 Files, Including Apple and Tesla Documents

Tenant Phishing Scams and the UK Letting Industry’s Email Problem

The Evolution of iGaming Fraud: What Security Teams Should Expect in 2027

The world's top intelligence alliance: AI could supercharge cyberattacks within months

Trump directs federal agencies to protect US data from quantum threats

Two Scattered Spider Hackers Convicted Over Transport for London Cyber Attack

Two Scattered Spider hackers plead guilty over Transport for London cyberattack

Two Scattered Spider members plead guilty over cyberattack that crippled London transit

US healthcare AI platform Xsolis confirms data breach that affects 1.4 million individuals

Usbliter8 Exploit Targets Apple SecureROM in Older iPhones, iPhone XS–11

What is known about the Transport for London (TfL) cyber attack after two men admitted the £39 million hack

What the Fortibleed campaign means for organizations running FortiGate firewalls

WhatsApp Phishing Attack Uses Fake Business Documents to Hack PCs

WhatsApp VBScript Campaign Installs ManageEngine RMM, Kaspersky Warns

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Why Tata Electronics' cyber breach could be a concern for Apple and Tesla

World Cup scams surge as AI fuels fake betting sites, phishing links and QR traps

World Leaks Ransomware Group targets Apple and Tesla Trade Secrets

Xsolis Data Breach Affects 1.4 Million Individuals

Xsolis Data Breach Affects Near 1.4 Million Healthcare Patients

Xsolis Data Breach Exposes Personal Information of 1.4 Million People

Xsolis Data Breach Exposes Records of 1.4 Million Patients

Xsolis Data Breach Hits 1.4 Million People As Healthcare Vendor Reports Patient Data Exposure

Xsolis Data Breach Impacts 1.4 Million People

Xsolis Discloses 1,396,519-Person Data Breach - What Is A Data Breach?

22nd June

3 million Texans affected in hunting, fishing license data breach

23andMe settlement shows what privacy is really worth

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak

A newbie hacker used "vague, low-skill prompts" in Claude and Codex to breach 14 companies, and the AI Agents did all the legwork

AI and Ransomware Fuel an Explosion in Transnational Crime, Interpol Warns

AIBOMs: Bringing AI Security Out of the Shadows, A Practical Guide for Security Professionals

Amazon Prime Day fuels surge in malicious domains, researchers warn

Anubis Ransomware Attack Cripples European Port Operations, ₹94 Crores Ransom Reportedly Demanded

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

AssuranceAmerica Data Breach Exposes Sensitive Info for At Least 611k Individuals

ATM Fraud Alert: How to Protect Yourself from Card Skimming, Phishing, and Other Banking Scams in 2026

Australia: Victorian RV dealer suffers alleged cyber attack

Beats Studio Buds Flaw Could Let Nearby Attackers Eavesdrop on Users

Belgian State Security hit by Ivanti data breach

Beyond encryption: Ransomware now threatens to leak stolen data

Boyd Bros. Transportation Data Breach: SSNs and Personal Contact Information Exposed

Brazil Suspects Hack Behind Unauthorized ‘Misanthropy’ National Phone Alert

Britain's cyber agency warns AI-written code could create security disasters if left unchecked

Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices

Canadian lender TD tells some employees it will use software to monitor their work

Canadian utility fesses up to data breach, but key details remain off-grid

Carnival Faces Investigation Following Massive Data Breach Affecting 800,000 Texans

Chinese Cyber Contractors Use Malware, Botnets, and Stolen Data to Enable State Operations

Colorado Health Network Data Breach Exposes PII and PHI Information of Patients

Cyber Attack Believed to Have Exposed Data of 3 Million Texans

Cyber Attack On Tata Electronics Threatens To Expose Apple Data, Tesla's 'Trade Secret'

Cyber criminals target World Cup 2026

Cybercriminals exploit World Cup hype with phishing schemes

Data breach exposes personal information of over 3 million Texas hunters, fishers

Data Breach Impacts More Than 3 Million Texas Hunters

Data leak fears after ransomware attack hits Hong Kong’s famous Kee Wah Bakery

Developers giving attackers a free ride after hundreds of iPhone AI apps found exposing credentials

Dutch privacy regulator warns municipalities are struggling to control public camera surveillance

Encrypted DNS still tells an eavesdropper where to look

Fake Grand Theft Auto 6 (GTA 6) beta testing programme targets gamers with phishing emails and malware downloads

FFmpeg fixes PixelSmash flaw in widely used video decoder

FortiBleed campaign used custom FortiGate sniffer to steal credentials

From Emerging Threat to Leading Ransomware-as-a-Service: The Evolution of INC Ransomware

FulcrumSec hacker group leaked over 250 GB of data stolen from pharma giant Novo Nordisk

FulcrumSec Spent Two Months in Novo Nordisk Networks Before 1.3TB Theft

GentleKiller Framework Disables Victims' Security Software

Ghana Among Africa’s Main Business Email Compromise (BEC) Hubs as Cyber Losses Rise

Global cybersecurity agencies warn of credential exposure in FortiBleed campaign targeting Fortinet firewalls, VPN gateways

Hackers Deploy Prinz Eugen Ransomware With RMM Abuse and Hands-On-Keyboard Tactics

Hackers dump 200,000 alleged secret Apple, Tesla files after Tata Electronics breach

Hackers Use RemotePC RMM and PowerShell Stagers to Deploy Prinz Eugen Ransomware

Hackers Use Steganographic Loader to Deliver Remcos RAT via Phishing Attachments

High-Severity Apple Beats Studio Buds Flaw Enables Eavesdropping Attacks

How Cybercriminals Are Exploiting India’s Travel Season Through Phishing, Fraud and Fake Websites

How to recover rapidly and safely from a cyber attack

Hundreds of AI-powered iOS apps found exposing credentials

India’s Tata Electronics hit by cyber breach claiming to expose Apple, Tesla trade secrets

Information of Texas hunting, fishing license holders exposed in data breach, Texas Parks and Wildlife Department (TPWD) says

INTERPOL: Phishing, Ransomware and AI Scams Sweep Asia-Pacific

Interpol flags sharp rise in cybercrime across Asia

INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

JaredFromSubway Maximal Extractable Value (MEV) bot hacked in $15 million crypto theft

Klue Breach Enables Hackers to Compromise Cybersecurity Firms via OAuth Tokens

Klue breach exposed Salesforce CRM data through stolen OAuth tokens

Klue Hack and Data Breach Hits Several Top Cybersecurity Firms

Klue Hack Leads to Data Breach Across Multiple Cybersecurity Companies

Klue hack results in data breach at several cybersecurity firms

Kodak confirms a major data breach following ShinyHunters hacking claim

Kodak Confirms Data Breach Linked to ShinyHunters Hacking Group

KPMG Confirms Optus Data Breach Amid Scrutiny

Madison Square Garden (MSG) Entertainment Faces Lawsuit Over Alleged Data Breach

Major GNU software repository Savannah fixes 2-year flaw that left the platform exposed

Massive security flaw discovered in popular SSH library libssh2

Microsoft Attributes Mastra AI Supply Chain Attack to North Korea

Microsoft fixes AutoGen Studio flaw that enabled code execution

National Association of Insurance Commissioners (NAIC) Data Breach: 3.1TB of Data Compromised

National Cyber Security Centre (NCSC) Urges Fortinet Customers to Tackle FortiBleed Fallout

New Apple Exploit Exposes Millions of iPhones Worldwide, No Software Fix Available

New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

New Prinz Eugen ransomware targets recent files, avoids ransom notes

New York Knicks owner sued following biometric data breach

OXLOADER: New Windows Loader Drops CASTLESTEALER via Google Ads

Pair Admit Role in Cyber Attack That Cost Transport for London (TfL) £39 Million and Disrupted Millions of Journeys

Phishing Attacks Targeting Government Up 50% Amid Overall Decline

Phishing the agent: Why AI guardrails aren’t enough

Prinz Eugen Ransomware: A Deep Dive into a New Go-Based Encryptor

Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes

Prinz Eugen ransomware encrypts the most recent files

Prinz Eugen Ransomware targets recently Modified Files

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Salesforce Disables Klue Integration After OAuth Token Theft Hits Customer Data

Scammers Use Fake GitHub Stars, VirusTotal Reviews to Spread Crypto Clipper

Security shops among the 'hundreds' of Klue hack victims

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

ShinyHunters Again? Council of Europe Probing Theft of Payroll, HR and Other Sensitive Data

Singapore: Land Transport Authority (LTA) impersonation phishing scams on the rise again, with at least $74,000 lost in 3 weeks

Solventum Data Breach Affects Exposes PHI and PII of Patients

South Korea: Government's Information Security Lapses Highlighted by Data Breach

South Korea: TVING Fails to Announce Data Breach Scale

Suspected cyberattack triggers false emergency alerts across parts of Brazil

Tata Electronics Data Breach Linked to Apple and Tesla

Tata Electronics hit by cyber-attack; Hackers claim leak of Apple, Tesla secrets

Tata Electronics suffers massive data breach, leaked files allegedly include Apple and Tesla documents

Tata Electronics, a major tech supplier to Apple and Tesla, confirms data breach

Teens convicted of multi-million pound Transport for London (TfL) cyber attack

Texas Cyber Command detects data breach affecting more than 3 million hunting, fishing license customers

Texas Hunting and Fishing License Holders Hit by Data Breach

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals

Texas Parks and Wildlife Data Breach Affects Over 3 Million License Customers

Texas Parks & Wildlife (TPWD) Data Breach impacts 3 Million People

Texas Parks and Wildlife vendor breach exposed data of 3 million hunters and anglers

Texas Parks and Wildlife warns 3 million hunting, fishing license customers about data breach

Texas vendor breach exposes personal data of more than 3 million people

There are 3 obvious signs someone is stealing your Wi-Fi - and several ways to stop them

Third-party data breach may affect some former Mayo Clinic patients

TVING Data Breach Affects 19.53 Million...Up 6.5 Million from Initial Estimate

TVING data breach estimated at around 19 million users...Concerns grow over impact on CJ ENM earnings

Two Britons plead guilty to £39 million 2024 cyber-attack on Transport for London

Two men including one from Walsall admit carrying out cyber attack on Transport for London

Two men plead guilty over £39 million Transport for London (TfL) cyber attack

Two young men admit carrying out cyber attack on Transport for London

Two young men carried out £39 million cyber attack on Transport for London (TfL)

UK: Black Country teenager to stand trial for London transport cyber attack

Understand ‘phishing’? Think again: why cybersecurity language is failing us

Unpatchable BootROM Flaw Impacts Apple A12, A13 Chips

WhatsApp phishing attack uses fake business docs to hack PCs

Will your small business be fined for reporting a data breach?

Wills Point Chevrolet Data Breach Exposes Social Security Numbers and Health Information

Wright-Ryan Data Breach: Social Security Numbers and Driver's Licenses Compromised