Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and 
Dentons Senior Analyst, Washington D.C.
Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 13th July and 19th July 2026.19th July
Apple Faces Class-Action Lawsuit Over Alleged Hide My Email Security Flaw
Colombia's energy giant Ecopetrol says hackers stole data from 3,300 accounts, demanding ransom
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution
FortiBleed: 74,000 Admin Credentials Cracked From Devices That Were Already Patched
Hackers abuse ViPNet software to target Russian government agencies
Hackers breach Clover Health employee accounts
Hackers Just Pulled Off Every Food Manufacturer’s Worst Nightmare. Now Coca-Cola’s $4-Billion Dairy Brand Is Shut Down
How ransomware tactics against law firms are changing
Identity Compromise Overtakes Vulnerabilities As Primary Ransomware Attack Vector
JadePuffer: World’s ‘first AI ransomware’ capable of autonomous attacks
Kenya investigates breach of president's website
Mount Royal University continues ransomware attack investigation
Ohio woman charged in phishing scam that cost Southern Door schools nearly $68K
Ohio’s Biggest Senior Care Network Confirmed a Data Breach - and the List of Stolen Information Is Long
Self taught Thai hacker learned the trade to access police data systems and wipe his own arrest warrants
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
UK: Top cyber security expert issues terrifying Russian hacker warning - 'when not if'
WannaCry Ransomware: Infection, Impact, and Prevention
18th July
81% of Ransomware Attacks in India Now Originate from Compromised Identities
AI speeds ransomware, forcing firms to focus on recovery
Coca-Cola suspends production at its Fairlife dairy after a ransomware attack
Coca-Cola Suspends U.S. Fairlife Production Following Ransomware Attack
Colombia's Ecopetrol says cyberattack stole data tied to 3,300 accounts
Cyber Assault on Ecopetrol: Data Breach Shakes Energy Giant
Ecopetrol Faces Cyberattack Impacting 3,300 Accounts
Email Security in the Age of AI-Generated Phishing Attacks
Ernst & Young Data Breach Exposes Social Security Numbers
Ernst & Young (EY) Data Breach - Hackers Access Third-Party IT Support Platform and Steal Client Tax Documents
Finland issues arrest warrant for hacker who extorted thousands of therapy patients
Healthcare data is now more valuable to cybercriminals than credit card details
Instructure Paid the Ransom. ShinyHunters Leaked the Data Anyway. 275 Million Students Exposed
Medical giant Abbott investigates two cyber incidents as ShinyHunters claims breach
Microsoft warns of surge in ACR Stealer attacks on customers
New Spirals Ransomware Uses IIS Web Shell and PsExec to Encrypt IT Firm in Under 24 Hours
Nigerian Bar Association (NBA) presidential election disrupted by cyber attack
Not the first data breach at Kudankulam: Recalling 2019 cyberattack that targeted thorium info
South African company that books flights for agency in R29.6-billion government department hit by ransomware attack
The Gentlemen Ransomware Tops Qilin: June 2026
Two new high severity WordPress vulnerabilities, patch immediately!
Update now: 7-Zip fixes RCE flaw exploitable with malicious archives
WordPress Core "wp2shell" RCE flaws get public exploits, patch now
ZenPatient Discloses Data Breach Spanning from December to February
17th July
23andMe Agrees to $18 Million Settlement With 43 States Over 2023 Data Breach
23andMe Faces New Security Mandates in $18 Million Data Breach Settlement
23andMe will pay $18 Million to settle claims over massive data breach
79% of ransomware attacks start with stolen identities
A ransomware attack hits Coca-Cola where it hurts
Abbott probes two cyber incidents amid extortion claims
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
Alabama: River Bank & Trust investigating cyberattack
All About Women’s Care Data Breach Affects Up to 12,000 Patients
An Alleged Russian FSB Hacker Traveled To Thailand. Now He's Facing 10 Years In A US Prison
Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
Asia, Europe: Phishing campaign targeting manufacturing facilities uncovered
Attackers hide random text in phishing scams by setting font size to zero to confuse AI powered email defenses
Bangladesh: 'Hacker' arrested over National Board of Revenue (NBR), Chattogram Port system breach to facilitate smuggling worth crores
Barracuda warns of AI-era resurgence in ‘text salting’ phishing attacks
Bath Fitter Data Breach Exposes Social Security Numbers
Best Practice not linked to Partnered Health cyber attack
Beware of New Tactics of Digital Extortion in Crypto
'Biggest election data breach ever': Trump accuses China of hacking US voter records
Brazilian Government Sites Hijacked in Sweeping Cyber Attack Targeting Banks
British-Bangladeshi hacker jailed over cyberattack that crippled London transport
British-Bangladeshi hacker, accomplice jailed over cyberattack that brought London to a standstill
Chicago-based Fairlife pauses US production after ransomware cyberattack breaches milk brand systems
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to Known Exploited Vulnerabilities (KEV)
CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities
CISA urges immediate action on actively exploited Fortinet flaws
ClickFix Attacks Drive UAC-0145 Cyber Campaigns, CERT-UA Warns
ClickLock Mac Malware Traps Users in a Three-Day Password Loop
Coca-Cola confirms ransomware attack as Fairlife US production halts
Coca-Cola dairy subsidiary pauses operations following ransomware attack
Coca-Cola discloses ransomware attack disrupting fairlife production in the US
Coca-Cola halts Fairlife production across US after ransomware attack
Coca-Cola pauses production of Fairlife milk and other drinks after cyber attack
Coca-Cola Says Fairlife Halts US Production After Cyber Attack
Coca-Cola says Fairlife unit halts US production after cyber attack
Coca-Cola shuts down Fairlife dairy production lines following ransomware attack
Coca-Cola Suspends Fairlife U.S. Production After Ransomware Attack
Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack
Coca-Cola-owned dairy firm forced to shut down production due to cyber attack
Coca-Cola's $4 billion dairy brand forced offline after data breach
Coca-Cola's dairy company Fairlife hit with a ransomware attack
Coca-Cola's Fairlife dairy is halting U.S. production after a ransomware attack
Coca-Cola’s Fairlife dairy subsidiary hit by ransomware attack, suspending US production
Coca-Cola's Fairlife halts US production following ransomware incident
Coca-Cola's fairlife suspends US dairy production after cyber attack
Critical Notepad++ Bugs Could Lead to Code Execution, Patch Available
Critical Zoom Flaw Could Let Attackers Take Over Windows Accounts
Cyber Crooks Milk Atlanta's Coca-Cola as Fairlife Halts U.S. Output
Cyber Turbulence: Denver’s Frontier Slammed With Twin Data-Breach Suits
Cybercriminals Use Stolen Keys: 81% of India’s Ransomware Attacks Start with Stolen Identities
Dairy company Fairlife suspends production in US after cyber incident
Department of Justice (DOJ) Indicts Three Russians Who Shielded Major Ransomware Groups From Takedowns
Donald Trump accuses China of "the largest cyber attack on electoral data in history" during his speech addressed to the nation
Ecopetrol blocks ransomware attack after unauthorized access to data from 3,300 user accounts
Ernst & Young: data breach via third-party support system
Ernst & Young data breach exposes client tax information
Ernst & Young discloses data breach after support system hack
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets
Ernst & Young LLP (EY) Data Breach - Hackers Gain Access to IT Support System and Download Documents
Ernst & Young vendor exposes sensitive client tax records, company says
Evian, Silk, International Delight maker Danone hit by Qilin ransomware gang
Fairlife Cyberattack Shuts Down U.S. Production: What Dairy Producers Need to Know About Ransomware
Fairlife pauses US production after cyberattack breached milk brand's systems
Fairlife pauses US production of milk after cyber attack
Fairlife Ransomware Attack Stops All US Milk Production
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
Fake TrueType Font (TTF) files deliver stealthy malware in global phishing campaign
FBI arrests man accused of using Steam games to drain victims’ crypto wallets
Fraud Alert: AI Is Turning Anyone into a Hacker - Five Eyes Alliance Warns
Frontier Airlines Sued Twice After Data Breach Hit 11,482 People - Ransomware Gang Claims Credit
Frontier Airlines sued twice for weak cybersecurity after data breaches
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Government Agencies Falling Victim to Ransomware Daily
Hacker puts data of more than 51 million Badoo users up for sale
Hackers Breached an IIS Server and Deployed Ransomware Across the Network the Next Day
HMC Fresh Foods Data Breach: Sensitive Information Exposed
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload
Inc Ransomware Exploits SonicWall SMA Zero-Days
India: Kudankulam Nuclear Plant Data Breach Files Leaked
Inter-Con Security Data Breach Potentially Compromised Sensitive Personal Information
Italy fines WINDTRE €1.7 million over data breaches
Kaspersky has detected a multi-stage phishing attack targeting manufacturing facilities in Europe, Asia and the Middle East
LastPass and Bitwarden users flooded with fake compliance emails
Lawsuit Claims June 2026 Data Breach Leaked Private Information Of 2.4 Billion TikTok Users
Lawyers say Russian tourist detained in Armenia over mistaken identity in ransomware case
Madera Hospital Data Breach Compromises PHI and PII
Massive Data Leak in Kudankulam Nuclear Power Plant: 1.2 TB Data About Plant's Blueprint, Supplier Details Leaked on Dark Web...Is Reliance to Blame?
New ClickLock macOS Stealer Kills Every App to Force Password Entry
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
New Windows LegacyHive zero-day gives hackers admin privileges
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Notorious 1990s hacker held over €100 million-a-month fraud ring
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Phishing: Fake TTF files distribute malware
Prompt injection is becoming the XSS of the web agent era
Qantas Cleared of Formal Privacy Probe After Massive Customer Data Breach
Qantas Escapes 5.67 Million Customer Data Breach Probe - What Others Are Missing About the Airline Cyber Security Decision
Ransomware and Third-Party Risks Drive Record Financial Losses
Ransomware Attack Disrupts Fairlife's US Dairy Production Operations
Ransomware attack forces Coca-Cola to suspend US production at dairy unit
Ransomware attack halts Coca-Cola’s Fairlife US milk production
Ransomware Attack Halts Production at Coca-Cola’s Fairlife Dairies
Ransomware Attack on Coca-Cola-Owned Fairlife Halts Production Across the United States
Ransomware Attacks up 20% Year-Over-Year
Ransomware curdles production at Coca-Cola's Fairlife dairy business
Ransomware Uses AI to Amp Up Negotiations
Rochester-area Fairlife facility pauses production after company impacted by cyberattack
Romania: Data stolen in a cyber attack from the National Cadastre Agency, put up for sale on the internet
Romania: The hacker 'ByteToBreach' breached the National Agency for Cadastre and Real Estate Publicity (ANCPI) servers, causing a massive data leak. He stated that the attack had financial motives and apologized for the problems caused
Russian spies hunt targets via exposed European cameras: 87,000 found vulnerable
Scammers weaponize FaceTime to drain bank accounts
Secureholiday Data Breach Leaves Thousands of Campers Defrauded, Victims Report Major Losses
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Sexual Assault Centre Kingston faces cyber attack
Sophos State of Ransomware Report: A Step Ahead of Attackers
Spirals Attackers Disable Windows Defender and Kill Backup Services Before Encrypting Systems
Spirals ransomware locks down victim systems in under 24 hours
Stolen identities cause 79% of ransomware attacks
The AI Ransomware That Couldn’t Get Paid
The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat
The Gentlemen tops ransomware rankings in Q2 review
The script, not the voice, is what makes AI voice phishing work
TriWest Healthcare confirms data breach affecting 12,000 TRICARE beneficiaries
Trump Accuses China Of Election Data Breach In Televised Address
Trump Accuses China of the "Largest Data Breach of Election Information in History"
“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware
Two Scattered Spider hackers sent to prison over London attack
UK publishes government data breach response framework
UK-Bangladeshi hacker, accomplice jailed over London cyberattack that cost nearly $40 million
US Charges Two Over $43 Million Chinese Money Laundering Operation
US charges two over laundering $43 million from investment fraud
US companies face rise in cyber attacks
Uzbekistan Targeted in xplogs22 Phishing Campaign
White House releases documents alleging Chinese election data breach
Widow loses nearly $1 Million after falling for AI deepfake video of Canadian prime minister
Zoom Patches Critical Windows Flaw Enabling Account Takeover
16th July
23andMe to pay $18 million in new genetics data breach settlement
AI Can Find Bugs, But Human Knowledge Still Proves Them
AssuranceAmerica Data Breach Exposes Driver’s License Numbers and Insurance Data for Nearly 7 Million People
Attackers execute a complete ransomware operation in under 24 hours
Attackers keep using GitHub to distribute malware
Attacks Surge as Two Ransomware-as-a-Surface (RaaS) Groups Battle for Dominance
Australia: Bassendean food supplier caught up in cyber attack
Australia: Cardiff GP Clinic affected by cyber attack
Australia: Information of patients hacked in breach that hit medical company's clinics
Australia: Patient health records exposed in Noosaville data breach
Australian GP network hit in data breach
Australian patients’ medical records could be sold on dark web after clinics’ data breach
Campers exposed in Secureholiday data breach defrauded, thousands of dollars lost
Canadian fugitive wanted in Desjardins data breach investigation arrested in Mexico
Cayman Islands a top target for phishing scams
Chaos Ransomware: BlackSuit-Linked RaaS Resurgence and Detection Opportunities
CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance
CISA orders feds to patch actively exploited Oracle flaw by Saturday
Claude Chrome extension flaw lets malicious extensions trigger AI actions
Claude for Chrome Flaw Puts Gmail at Risk From Rogue Extensions
ClaudeFix Campaign Abuses Shared Claude Chats to Deliver MacSync Stealer
Coca-Cola says Fairlife halts US production after cyber attack
Coca-Cola says Fairlife ransomware attack halts US dairy production
Coca-Cola suspended production at its Fairlife dairy after a ransomware attack
Companies keep getting breached by vulnerabilities they already knew about
Critical NGINX vulnerability discovered: hackers can attempt to crash servers or even gain code execution
Critical Zoom for Windows vulnerability allows hackers to hijack accounts without a password
Cyberattack on Japan's largest cold-chain operator disrupts KFC, supermarket supplies
Dairy company owned by Coca-Cola hit by ransomware attack
Data breach exposes files linked to India's Kudankulam nuclear plant
Data breach reportedly targets India’s Kudankulam nuclear power plant
Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor
Department of Justice (DOJ) Charges Russians Who Ran Hosting Infrastructure for LockBit, Cl0p, Play
Dutch Police Arrest Key Suspect in €100 Million Global Crypto Investment Scam
Electronic Frontier Foundation (EFF) warns that feds can snoop on your smartwatch data, and vendors won’t share where and when
Files relating to India’s largest nuclear power plant exposed in data breach
Files relating to India’s largest nuclear power plant Kudankulam exposed in data breach
Final suspect in Desjardins data breach case arrested in Mexico
Finance phishing works because it sounds boringly normal
Fraudulent Ads Generate 304 Million Impressions Across Europe in Under One Month
Global Special Operations Forces Foundation Data Breach Affects Exposes Medical Information
Google Sues Chinese AI “Phishing Phactory”
Hacker Abused Google Gemini CLI to Run Botnet, Automate C2 Migration and Support Cyber Operations
Hackers who livestreamed £29 million Transport for London cyber attack jailed
How ‘text salting’ confuses AI-powered email defenses
India: Data breach at Kudankulam plant rings alarm bells on cybersecurity of critical infrastructure
India: Kudankulam Nuclear Power Plant Files Exposed In Data Breach
India nuclear power plant data breach exposes blueprints and supplier files
Industrial-Scale Cyber Fraud Expands in the Philippines; Phishing Websites Surge 423%
Industrial-scale phishing and cyber fraud reshape the security landscape in the Philippines
‘Keys to the kingdom’: hackers who gained access to heart of London transport network jailed
Kirbor Homes Data Breach Exposes Social Security Numbers & More
Kratos Phishing-as-a-Service (PhaaS) Attacking Microsoft 365 Users Across the US, Europe to Steal Credentials
Kratos Uses Cloudflare Turnstile, Obfuscated Login Pages, and PHP Endpoints to Exfiltrate Credentials
MacOS users, beware: newly discovered stealthy stealer requires no exploits
Madison Square Garden (MSG) Dodges Data-Breach Suits But Lawyer Warns Privacy Fight Isn’t Over
Mexican authorities arrest Quebec fugitive linked to Desjardins data breach, police say
Modular macOS Stealer Uses Kill Loops to Force Password Entry
Morris Communications Data Breach: 84GB Stolen Exposing Personal Information
Most Cybersecurity Incidents Stem From Known Vulnerabilities
n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
New ClickLock macOS malware traps users into revealing login password
New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password
New IoT Botnet Uses 1,496 Default Passwords and Seven Persistence Mechanisms
New OkoBot framework deploys 20 payloads to steal data, crypto
New Spirals ransomware encrypts victim network in under 24 hours
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
Nichirei Cyberattack Hits KFC Japan, Disrupts Frozen Food Supply
None and done? KittyKatKrew’s short-lived ransomware play
Notorious Israeli hacker suspected in massive investment fraud
Nuclear Power Corporation of India Limited (NPCIL) Clarifies Kudankulam Plant Data Breach Reports, Says 'Core Nuclear Systems Untouched'
Nuclear Power Corporation of India Limited (NPCIL) cyber attack explained: What was leaked in the Kudankulam data breach?
Nuclear Power Corporation of India Limited (NPCIL) denies sensitive data breach at Kudankulam nuclear plant, says leaked files involve only conventional systems
OkoBot malware targets hardware wallet users with recovery phrase phishing
OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data
Once hunted by the FBI, Israeli hacker ‘The Analyzer’ faces major European fraud probe
Partnered Health: Delay in cyber attack notification ‘not acceptable’
Partnered Health confirms dozens of clinics potentially compromised by cyber attack
Partnered Health Cyberattack Exposes Patient Data Across Australia
Phishing Campaign Hides Lua Loader as TrueType Font File
Phishing campaign uses e-cards to trick users into installing remote management software
Phishing Scheme Targets Massachusetts Homeowners With Fake Zoning Fee Demands
Police take down investment fraud network that stole €100 million a month
Qantas data breach started with a fake IT support call
Qantas Did Everything “Right” - And Got Breached Anyway. Regulators Say That’s the Point
Ransom demands are down, email is the top way attackers get in
Ransomware Attack Halts Milk Production at Coca-Cola's Fairlife Brand
Ransomware attacks more likely to start with stolen identity than software flaw
Ransomware attacks on healthcare jump 14%
Ransomware Attacks Surge Amid Growing Qilin-The Gentlemen Competition
Ransomware Breach Exposes India's Nuclear Plant Data: A Security Catastrophe in Waiting
Ransomware Gangs rebrand to avoid detection from Law Enforcement
Ransomware Group Leaks 19,000 Kudankulam Files From Reliance Server, Nuclear Power Corporation of India Limited (NPCIL) Denies 'Sensitive' Breach
Ransomware group leaks data stolen from India’s largest nuclear plant
Ransomware Uses AI To Amp Up Negotiations
Reading between the lines of a cyber insurance policy
Reliance and Kudankulam Nuclear Power Plant data breach: What we found on the dark web
Romania’s land registry hit by cyber attack, data allegedly for sale
Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes
Russian hacker turns Gemini CLI into a hacking agent, creates small-scale botnet
Russian hackers trojanize WebEx, Zoom apps to push Starland malware
Russian Phishing Campaign Targets Messaging App Users to Steal Recovery Keys and Take Over Accounts
RustDuck Malware Makes Case for Security-By-Design
Sandworm hackers have a CAPTCHA trick for Ukrainians
SANS Warns of AI Governance Gap as Use by Security Teams Surges
Scattered Spider hackers sentenced to 5.5 years over £29 million Transport for London hack
Scattered Spider members behind Transport for London (TfL) hack get five years in prison
Scattered Spider members jailed over Transport for London hack that cost £29 million
"Selfish Bravado" Behind Transport for London (TfL) Cyber-Attack, Judge Says as Pair Jailed
Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim
Spirals: New Stealthy Ransomware Deployed Against Asian IT Company
Stealthy Daxin Malware Hijacks Legitimate TCP Connections to Evade C2 Detection
Tech support scam caused massive data breach at Australian airline Qantas
Teen hackers who live streamed cyber-attack on Transport for London (TfL) jailed
Teenagers jailed for £39 million cyber attack on Transport for London
Tech support scam caused massive data breach at Australian airline Qantas
The Biggest Data Breaches of 2026 So Far, Ranked by Impact
Transport for London (TfL) Scattered Spider hackers jailed after cyber attack
Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million Transport for London (TfL) Hack
Two Scattered Spider Hackers Sentenced to Jail in UK
Two Scattered Spider Members Sentenced to 5.6 Years Over Transport for London’s (TfL) Cyberattack
Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide
US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management
US Sanctions First VPN in Crackdown on Ransomware Criminals
Vision Care Providers Settle Data Breach Class Actions
What the World Food Programme (WFP) cyber-attack has in common with visa scandals
White House’s Gold Eagle a Good Start, But the Need is Fixing Vulnerabilities
Who are the young cybercriminals behind the £39 million Transport for London (TfL) hack?
You Can’t Secure a Ship Like a Laptop
YouLend US Data Breach Exposes Sensitive Personal Information Including SSNs
Young hackers jailed for devastating £39 million Transport for London (TfL) cyber attack
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
15th July
23andMe reaches $18 million settlement with states for massive breach
74% of Organizations Remediate Vulnerabilities Within a Week
858,000 Files and Confidential Blueprints: Inside Data Breach at India's Largest Nuclear Plant in Tamil Nadu's Kudankulam
AI used to help plan the break-in, now it’s doing the break-in
AI-driven bug hunting fuels record Microsoft Patch Tuesday
AI-Powered Phishing Kits Fuel 1,380% Surge in Attacks Targeting Microsoft 365
Amazon Web Services (AWS) retools Security Hub for AI and multicloud threats
Americans are ignoring scam calls, but phishing emails still fool many
An AI overthinking attack can tie a robot up for over a minute
Apple Warns Millions of iPhone Users: FaceTime Scams Are Spreading
AsyncAPI npm packages infected with credential-stealing malware
Australia: Medical records and personal details stolen in GP network cyber attack
Australia: Tax and superannuation data allegedly stolen in data breach
Australia-India Partnership on Cyber, Critical Technologies and Supply Chains (PACTS) to Deepen Cybersecurity and Tech Collaboration
Britons told to stockpile food and water in case of Russian cyberattack
CISA Adds SonicWall SMA1000 Vulnerabilities to KEV Catalog Following Active Exploitation
CISA warns admins to patch actively exploited SharePoint flaws
ClickFix is changing the economics of social engineering
CMMC Assessment Pause Leaves Defense Contractors Facing a New Risk
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks
Critical Data For India’s Largest Nuclear Plant Exposed In Massive Breach
Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
Cyber insurance now covers more than 95% of data breach losses
Data Breach At India's Biggest Nuclear Plant: 19,000 Files Exposed On Dark Web, Anil Ambani’s Reliance Group Confirms 'Leak'
Data Breach Exposes Files Linked to India’s Largest Kudankulam Nuclear Power Plant
Dutch police bust investment fraud ring stealing over €100 million
Dutch police dismantle global crypto investment scam, arrest alleged mastermind
Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass
Engineering The Internet For Resilience
EtherHiding Attack Hides ClickFix Payload Infrastructure Inside Polygon Blockchain
EU sanctions Trickbot boss ‘Stern’ over $300 Million in ransomware payments
Everything we know as Walsall hacker faces jail over Transport for London cyber attack
FaceTime Scams Impersonate Apple Support and Banks to Steal Account Credentials
Fake NVIDIA Software Distributes New LabubaRAT Malware to Hijack Windows PCs
FBI warns Kali365 phishing platform is targeting Microsoft 365 users; Floridians report $12 million in losses
Files Linked to India’s Largest Nuclear Plant Exposed in Data Breach
Files relating to India’s largest nuclear power plant Kudankulam exposed in data breach
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
First VPN administrators sanctioned by US Treasury over ransomware attacks
Fortinet Patches FortiOS Authentication Bypass and FortiSandbox Command Injection Flaws
FreeRDP 3.29.0 security update resolves 22 advisories
Google Gemini CLI abused as a hacking agent, malware botnet operator
Goose Creek data breach exposes 6.6 million customer records
Government Updates UK’s National Risk Register with Cyber Warnings
Hackers Abuse OAuth Device Codes and Entra ID Enrollment for Persistent SaaS Access
Hackers breach TRICARE West, exposing health data of thousands of US military beneficiaries
Hackers data breach patient records from one of Australia’s Largest Healthcare Providers
Hackers leak data from India’s largest nuclear plant
Healthcare ransomware attacks surge 14% amid growing cyberthreats
How Bangladesh can stop the next data breach
Identity Attacks Overtake Exploits as Top Ransomware Cause
Identity Is Now The Leading Ransomware Entry Point
India: Files relating to Kudankulam nuclear power plant exposed in data breach
India: Files relating to Kudankulam nuclear power plant exposed in ransomware data breach
India: Kudankulam nuclear power plant documents exposed in ransomware data breach
India: Kudankulam nuclear power plant’s files exposed in data breach
India: Ransomware Group Reportedly Leaks Kudankulam Nuclear Plant Blueprints
India: Reliance confirms partial data breach after hackers claim Kudankulam nuclear plant files leaked
India's biggest nuclear plant blueprints posted online after contractor refuses ransom
India’s largest nuclear power plant hit by data breach, files exposed
India’s Largest Nuclear Plant Hit by Major Data Leak on the Dark Web
India's largest nuclear plant suffers data breach, blueprints of facility leaked on dark web
India’s nuclear security under scrutiny after data breach
Iowa joins multi-state settlement over 23andMe data breach after company’s bankruptcy
Iran Exploited SS7 Mobile Network Flaws to Track US Troops, Coinciding With Strikes on US Forces
Is this the last of FirstVPN? Law Enforcement Targets Infrastructure’s Role in Cybercrime
Jalisco and OmegaLord Phishing Kits Target Microsoft 365 With MFA Bypass
Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts
LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software
LastPass and Bitwarden Users Targeted by Phishing Campaign
Law firm WilmerHale sued in class action after data breach
Lidl Warns Customers Over Third-party Data Breach
Loan scam phishing surges in South Korea as attackers favor messengers
Los Angeles Police Department (LAPD) sidelines relationship with license-plate reader company Flock Safety
Louisiana to get $258,668 in 23andMe data breach settlement
Loyalist College: Cyber attack confirmed
Major Cyber Attack Targets Network of GP Practices and Skin Cancer Clinics, Stolen Medical Records Confirmed
Major German bank says a third party may have been hit following claims of ransomware attack
Massive data breach at India's largest nuclear plant: Kudankulam blueprints, supplier details among 19,000 leaked files on dark web
Microsoft Fixes Record 570 Security Flaws in Biggest Patch Tuesday Ever
Microsoft July Patch Tuesday Fixes Record 570 Vulnerabilities and Three Exploited Zero-Days
Microsoft Patches 570 CVEs in Record Patch Tuesday
Microsoft patches record 570 Windows security bugs with two exploited zero days - update now
Microsoft patches record number of security vulnerabilities, citing its use of AI
Microsoft smashes Patch Tuesday record for second successive month
Microsoft Urges Windows 11 Users to Install Updates Within Three Days
Microsoft's largest Patch Tuesday ever: 570 flaws, Kerberos encryption overhaul
Microsoft’s Largest Patch Tuesday Fixes 622 Vulnerabilities, Two Under Active Attack
Minnesota Included in Major 23andMe Data-Breach Settlement
Multistate settlement reached with 23andMe for 2023 data breach
New 'Jalisco' and 'OmegaLord' Phishing Kits Advance Attack Methods, Can Bypass Microsoft 365 MFA
New Jersey to receive nearly $410K in 23andMe genetic data breach settlement
New Mac malware masquerades as Apple's crash reporter: 3 ways to dodge the threat
New phishing campaign hits LastPass, Bitwarden users - password manager customers warned not to fall for this scam
Nightmare Eclipse drops 9th Windows security issue amid ongoing personal vendetta against Microsoft
North Carolina to receive $666K in 23andMe settlement over 2023 data breach
Notepad++ Security Update Patches Buffer Overflow and Updater Code Execution Flaws
OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
Pakistan’s National CERT warns organizations over Fortinet firewall cyber intrusion campaign
Partnered Health cyber attack exposes patient medical records across clinic network
Partnered Health Data Breach Exposes Patient Records at Family Clinics
Partnered Health hack: Major health network hit in cyber attack, impacted centres named
Partnered Health hit by major cyber attack, impacted centres named
Patient records stolen in cyber-attack on Australian healthcare provider
Pennsylvania Receiving Nearly $492,000 in 23andMe National Data Breach Deal
Phishing Campaign Abuses eCards to Deploy RMM Tools
Phishing toolkits target Microsoft 365 MFA in surge
Physicians Primary Care of Southwest Florida Agrees to Data Breach Settlement
Progress Restores ShareFile Storage Zones Access After Vulnerability Exploit Concerns
PromptFiction Flaw Auto-Submitted Hidden Prompts in Claude Desktop
Protecting Manufacturers from 'Kiss of Death' Ransomware Threats
Proton VPN in its Transparency Report Says It Has Rejected All 458 Swiss Court-Approved Data Requests Since 2017
Ransomware attacks rose 20% in the first half of 2026
Ransomware Breach: Reliance's Nuclear Files Exposed
Ransomware gang posts 19,000 files allegedly linked to India's largest nuclear plant in Tamil Nadu
Ransomware group claims breach of chip design firm Synopsys, alleges access to Bosch data
Ransomware Group Claims Leak Of Files Linked To India's Largest Nuclear Plant, Kudankulam
Ransomware Hackers Dump Kudankulam Nuclear Plant Blueprints Online After Reliance Group Server Breach
Ransomware Storm: Reliance Group Data Breach at India's Largest Nuclear Plant
Researcher Drops New Windows Zero-Day Proof-of-Concept (PoC) Hours After Microsoft Patch Tuesday
Russian Hackers Are Turning Doorbell and Security Cameras Into Spy Tools to Track NATO Military Logistics, Dutch Intelligence Warns
Secure Access Service Edge (SASE) Has An AI Blind Spot. Inspecting Packets Is No Longer Enough
'Serious risk' to India's largest nuclear plant after sensitive files leaked on dark web
Singapore data breach highlights supply chain vulnerability as IBM-managed test system leaks sensitive records
Singapore SMB ransomware rate rises despite regional low
South Korea: Loan Phishing Texts Surge 162% in Q2
Spanish police dismantle €140 million cybercrime network
Suspected Chinese Hackers Use Claude Code and DeepSeek to Breach Government Systems in Three Countries
Synopsys denies data breach allegations
Sysdig Details First Fully Agentic AI Ransomware Operation JadePuffer
Teen hackers to be sentenced for massive Transport for London (TfL) cyber attack
The Agentic Insider: Why AI Tech Stacks Are the Ultimate Insider Threat
The Managed Detection and Response (MDR) renewal question: What changes when AI can handle the alerts
The State of Ransomware 2026: Payments are dropping but encryption is climbing
Threat actor impersonated hundreds of brands on GitHub to push infostealer malware
Three Russians charged with attacks on US infrastructure - $62 million in losses
Three Russians Indicted in $62 Million Cybercrime Scheme Targeting U.S. Infrastructure
Trump administration unveils AI-supported clearinghouse for cyber vulnerabilities
Trump's new AI-powered Gold Eagle will find cyber flaws at unprecedented pace - but can defenders keep up?
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
U.S. Cracks Down on Russian Ransomware Trio
U.S. Hits Ransomware Supply Chain With New Sanctions
U.S. sanctions VPN provider and cryptor seller for aiding ransomware gangs
UK: How Walsall 'bedroom hacker with no friends' caused £29 million chaos in online cyber attack
UK Households Told to Stockpile Food, Water and Medicines as Russia Cyber Attack Threat Grows
US charges alleged operators of Russian bulletproof hosting service
US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62 Million from cybercrime victims
US Indicts Russian Bulletproof Hosting Provider Media Land and Three Operators
US sanctions First VPN and its administrator for supporting ransomware attacks
US Treasury sanctions a VPN provider and its administrator for the first time
US Treasury Targets VPN Provider That Shielded Ransomware Groups for 12 Years
Vermont, New Hampshire, New York part of multistate settlement over 23andMe data breach
Washington DC: Housing Authority says systems still recovering weeks after cyber attack
Why AI Phishing Gets Four Times More Clicks
Zoom warns of critical account takeover vulnerability
14th July
5 charged in UK investigation into Russian Coms scam platform
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
23andMe customers in dozens of states will get paid after $150M data breach settlement
23andMe settlement: Georgia joins 42-state alliance over data breach
23andMe Settles with 42 States for 2023 Data Breach
140+ Malicious npm Packages Turned Web Proxies for Students Into a DDoS Botnet
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
8,400 Phishing Domains Targeted Turkish Banks
A Ransomware Sanction Accidentally Took Down Telegram's Domain
A U.S. Sanctions Entry for a Ransomware VPN Appears to Have Accidentally Broken Telegram Links Worldwide
Alleged Russian cybercriminals indicted in Ohio helped conceal ransomware gangs
American Express “Sign-In Alert” phishing email leads to fake multi‑step credential harvesting pages
Apple Accuses Ex-Engineer of Exploiting ‘Rare’ Zero-Day to Steal Trade Secrets for OpenAI
Arizona receives slice of 42-state, $18 Million settlement over 23andMe genetic data breach
Australia: Lifeline confirms data breach
Australian Enterprises At Risk as Anthropic Finds Hackers In Claude Code
Canada: Cyber attack at Loyalist College
China opposes spreading false cybersecurity information for political purposes, Foreign Ministry on US, Paraguay’s claims of so-called ‘hacker threat’ from China
China rejects US-Paraguay ‘hacker threat’ allegation
CISA Shares Lessons Learned from Own Data Breach
CISA Warns 18-Year-Old Cisco IOS Vulnerability Exploited for Arbitrary Command Execution
Clinical Care Resilience Goes Beyond Having the Right Security Tools
Comcast to pay $117.5 million in class-action settlement over 2023 data breach affecting Xfinity customers
“Context bombs” can frustrate AI-driven attacks, researchers found
Cybercriminals Exploit AI Hallucinations To Launch Advanced Phishing Campaigns
Cybercriminals Target Turkish Banks With 8,400 Phishing Domains and 6,600 Scam Ads
Cybersecurity Researchers Identify First Fully Autonomous AI-Driven Ransomware Attack
Data Breach Hits AssuranceAmerica Exposing Personal Information of Nearly 7 Million People
Delaware Reach Settlement in 23andMe Data Breach Case
Delaware settles 23andMe data breach lawsuit, 16K+ residents affected
Department of Justice charges three Russians in $63 Million cybercrime scheme tied to ransomware infrastructure
EU Blacklists Russian Hackers and Firms Over Cyberattacks on Europe and Ukraine
EU sanctions Russian hackers and firms over cyberattacks
EU sanctions Russian surveillance firms behind state-controlled tracking app
EU, UK Attribute Russia Cyberattack to FSB, Announce Sanctions
EU, UK Sanction VKontakte Over FSB-Linked MaxApp Surveillance Tool, Lumma Stealer Operators, GRU Members
Every cybersecurity team needs a hacker mindset
Fiesta Insurance Data Breach Compromises Social Security Numbers
Finland issues wanted notice for hacker behind massive psychotherapy data breach
Five Charged in “Russian Coms” Fraud Platform Case
Forescout Uncovers AI Assisted Phishing Campaign Using Fake eCards
Forg365: New phishing platform targets Microsoft 365 accounts
Forg365 industrializes Microsoft 365 phishing with AI-generated lures
FortiSandbox Flaw Lets Unauthenticated Attackers Access VNC Server on Scanning VMs
Georgia Medical Firm Paying $4,000,000 In Data Breach Settlement Affecting Thousands
German Foreign Ministry Calls Russian Ambassador Regarding Cyber Attack Operation
Germany Among the Top Three Countries for Ransomware
Giant Telegram user database just hit hacker forums: here's why that's bad news
Global cyber attacks rise 17% as ransomware activity accelerates
Google Follows Microsoft to Remove ModHeader Extension from Store Following Reports of Covert Exfiltration Capability
Hacked DNA: 23andMe Strikes $18 Million Settlement Over Massive Genetic Data Breach
Hackers Abuse Fake OAuth Client IDs to Validate Microsoft Entra Accounts and Passwords
Hackers steal Lidl customer data from external service provider
He negotiated with ransomware gangs - Then joined them. Now he's headed to prison
How Post-Quantum Cryptography is Gaining Adoption
Immutable backup: Why it matters for ransomware recovery
Iran abused mobile networks’ vulnerabilities to locate US military in the Middle East, report says
JADEPUFFER: The emergence of Agentic AI in ransomware operations
Japan's largest taxi company knocked offline by cyberattack as dispatch systems go dark
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
LastPass, Bitwarden users targeted with fake security alerts
Lidl Confirms Customer Data Breach at IT Service Provider
Lidl Confirms Data Breach After Third-Party IT Provider Hack
Lidl data breach: Supermarket chain warns customers after third-party 'IT incident' exposes customer information - here's what we know so far
Lidl Data Breach Exposes Customer Details in Germany, Belgium, and the Netherlands
Lidl Notifies Customers of Third-Party Data Breach
Lifeline Australia confirms staff data compromised following hacking claims
Lucent Health Solutions to Pay Up to 1.95 Million to Settle Data Breach Litigation
Major data breach at Tata Electronics exposes Apple’s confidential files, raising global supply chain security concerns
Match Group Breach: ShinyHunters Claim 10 Million Records
May 2026 Healthcare Data Breach Report
Michigan settles bankruptcy claims against 23andMe over data breach
Microsoft ditches SMS and voice authentication for Entra ID, passkeys rolling out as default
Microsoft Entra ID authentication overhaul to start in September 2026
Microsoft Entra ID gets passkeys default authentication starting September
Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft Saw 18.7 Million QR Phishing Attacks in March Alone - Here’s Why Defenders Keep Missing Them
Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns
Minnesota, North Dakota among 42 states in settlement with 23andMe over 2023 genetic data breach
Moody Bible Institute Data Breach: What 2.3 Million Donors Must Do Right Now
Mountain View warns of phishing scam targeting planning project applicants
NATO logistics, Ukrainian troops are top subjects of Russian camera hacks, advisory says
Nearly 300 GitHub repos pose as legit software to push malware
Nearly 12,000 TRICARE Beneficiaries Warned of Data Breach
New Hampshire Attorney General (AG) announces multistate settlement of bankruptcy claims against 23andMe over genetic data breach
New Jersey to Receive $410K in 23andMe data breach
New MacOS Malware Exploits Legitimate Developer ID to Pose as Apple Crash Reporter
New macOS malware steals passwords by posing as Apple’s crash-reporting tool
New phishing kits target Microsoft 365 accounts, evade MFA
New Qilin Ransomware Attack Uses DCSync Technique to Abuse AD Replication Protocol
New tutorials on underground hacking forums have roughly doubled
New York: 23andMe hit with $18 million penalty after massive DNA data breach
Nigeria Data Protection Commission (NDPC) Claims It Acts on Every Data Breach Complaint, Yet There’s No Outcome in 3 Major Cases
Nihon Kotsu Cyberattack Disrupts Japan’s Largest Taxi Operator
No-one knows how many old shims can still bypass UEFI Secure Boot
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
Oklahoma: Mystery deepens over data breach of inmate info
Oregon to get half a million in settlement for 23andMe data breach
Pennsylvania and New Jersey each receive over $400,000 in 23andMe settlement
Phishing for dummies: Forg365 lowers barrier to M365 account takeovers
Phishing Toolkits Harvest Entra Tokens in Real Time
Phishing, UPI Scams and Remote Access Fraud on the Rise, Experts Warn
Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
RabbitMQ Vulnerability Exposes OAuth Secrets to Attackers
Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Russia slams EU's cyber-attack accusations
Russian hackers are targeting routers to infiltrate critical infrastructure, CISA warns
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data
SAP warns of critical flaws in NetWeaver and Commerce Cloud
Scammers Use 8,400 Phishing Domains to Target Turkish Banking Customers
SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)
SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now
South Africa records over 2,000 weekly cyber attacks
South Dakota to receive nearly $150K in 23andMe bankruptcy settlement following 2023 data breach
Spanish Police take down €140 million cyber fraud ring, arrest four
Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks
Surplus Line Association of California Data Breach Exposes SSNs
Suvida Healthcare Data Breach Affects 2,109: Medical Info Exposed
Synopsys denies data breach claims by new ransomware group D1R
Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims
Tennessee to receive $348K in 23andMe data breach settlement
The best defense against AI attacks turns out to be a skeptical human
The inside job that cost ransomware victims millions
The negotiator was the leak: insider who betrayed ransomware victims gets 70 months
Turkish Banks Targeted by 8,400 Phishing Domains and 6,600 Social Media Scam Ads
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
U.S. Treasury Just Hit Ransomware’s Supply Chain Where It Hurts
U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware Losses
U.S., Allies: Russia Abusing Network Devices to Attack Critical Infrastructure
UK: Public to be told how to prepare for cyber-attack and weather emergencies
UK: Public to be told to stockpile food in case of cyber attack from Russia
UK charges five persons linked to fraud platform behind more than a million scam calls
Uninstall this Chrome extension now: it contains surveillance code
Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages
US: Government healthcare administrator offers free credit monitoring after data breach
US: Pentagon Suspends Cybersecurity Maturity Model Certification (CMMC) Phase II Requirements for Defense Contractors
US police now armed with Israeli spy vans simulating mobile phone towers
US Sanctions VPN Provider 1VPNS Over Alleged Role in Supporting Hospital Ransomware Attacks
US sanctions VPN, malware providers for enabling ransomware attacks
US Treasury sanctions First VPN Service, others for abetting ransomware gangs
US Treasury sanctions VPN and cryptor operators linked to ransomware
US Treasury Sanctions VPN Provider Linked to Ransomware
US unseals indictment against alleged operators of Russian bulletproof hosting service
What the Transport for London Data Breach Reveals About Cyber Risk
Woman charged in $68,000 phishing scam against Southern Door Schools
World Cup scams are a glimpse of the cybersecurity future
World War 3 (WW3) warning as Britons will be told to stockpile food ready for Russian cyber attack
Your phishing defense was built for 2016, but attackers are operating in 2026
13th July
65% of Organisations Think a Serious Cyber Attack Could Threaten their Survival
99.9% of fixable AI vulnerabilities remain unpatched
A ransomware negotiator who colluded with attackers to scam victims was sentenced to 70 months in prison
A zeroed signature let a hacker drain nine million dollars from Hedera's biggest lender
After years on the run, alleged Ryuk ransomware operator pleads guilty
Agentic Ransomware Is Real and Getting Cheaper: What Comes After JadePuffer
AI & Service Management Company, Serviceaide Inc, Agrees to Pay $1.8 Million For Data Breach of 400,000 Health Patients’ Information
AI Phishing Surge Forces New Zealand Casinos to Fight Back
ApolloMD agrees to multi-million-dollar settlement over 2025 data breach
Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
Australian Cyber Agency Warns of Global CMS Exploitation Campaign
California: State can’t seek damages from 23andMe successor over data breach
California Gay & Lesbian Services Center Data Breach Affects 75,500 Individuals
Cambodian Voice Phishing Ringleader Sentenced to 14 Years for $44.3 Billion Fraud
Carle Health Data Breach Exposes Sensitive PHI and PII
Centers Laboratory Data Breach Affects 540,000 Individuals
Centers Laboratory New Jersey discloses data breach incident impacting 542,000 people
CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities
CISA warns of actively exploited RCE flaws in Joomla extensions
Columbia Orthopaedic Group Data Breach Exposes PHI
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Cyber Attack at Mount Royal University Disrupts Operations, Cybercrime Gang Demands $1.9 Million Ransom
Cyber incidents - a 'litmus test' of a company’s management capability
Cybersecurity gaps leave small businesses vulnerable
Dark Web Profile: Krybit Ransomware
Data Breach at Aflac Japan Impacts 4.38 Million Customers and Sales Agents
Data breach at Lidl: online store customer data stolen
Difficult to detect: Phishing campaign uses Microsoft infrastructure
Doing Its Job: Large Majority of Cyber Losses Covered by Insurance, Says Willis
Estée Lauder Data Breach Exposes Health Information and SSNs
EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe
EU imposes new sanctions against Russian cyber espionage
EU sanctions Russian GRU military hackers over cyberattacks
European Parliament Revives Controversial Chat Scanning Law
Evilginx: Three phishing operations revealed by mistake
Ex-ransomware negotiator gets 70 months for betraying clients to hackers
Exposed Server Unmasks Evilginx Operators Stealing Microsoft 365 Sessions and OAuth Tokens
Fake Bank Apps Let Scammers Control Android Phones in Southeast Asia
Fake OAuth client IDs are helping attackers slip past sign-in logs
Fake ‘Vote for Me’ links on X target users in new phishing campaign
Feds Slam Ransomware Supply Chain: US And Allies Cut Off Cybercriminals’ Digital Lifelines
Fiji: Phishing attack surge
Finland: Police issue wanted notice for Vastaamo hacker Aleksanteri Kivimäki
Finland: Vastaamo hacker wanted after appeal rejected
Foreign National Admits Guilt in $15,000,000 Bitcoin Ransomware Attacks on U.S. Firms
Forg365 Phishing-as-a-Service (PhaaS) Targets Microsoft 365 with Device Code and Adversary-in-the-Middle (AitM) Session Theft
GhostCommit Attack Hides Prompt Injection in PNG to Steal Developer Secrets
Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges
Hackers backdoor Jscrambler npm package with infostealer malware
Hackers blackmail Bosch as secret engineering files surface on the dark web
Hackers breach Lidl’s IT service provider, steal customer data
Healthcare ransomware attacks rose 14% in first half of 2026
Healthcare Services Group Agrees to $3 Million Settlement Over 2024 Data Breach
Hong Kong: Securities and Futures Commission (SFC) Mandates Phishing-Resistant Authentication Methods for Internet Brokers and Virtual Asset Trading Platforms (VATPs) to Protect Client Accounts
How small businesses get hacked through employees
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
India: Government Confirms No Critical Data Loss In Tata Electronics Cyber Attack, Vows Continued Vigilance Amid Rising Digital Threats
India: Government examining alleged Tata Electronics data breach
Is that QR code a trap? How to spot quishing scams before it's too late
It’s a First: An AI Agent Carries Out a Ransomware Attack on AI App Builder
Japan's largest taxi operator shuts systems after cyberattack
Jscrambler npm Supply Chain Attack Steals Developer and Cloud Credentials
Lake Region Healthcare Alerts Patients of Data Breach
Law Firms Launch Investigations Into Frontier Airlines Following Data Breach Tied to Ransomware Group
Lawyers Investigate Frontier Airlines Over Data Breach That May Have Exposed ‘Sensitive’ Personal Information
LIA Insurance Data Breach Exposes Financial Account Info
Lidl Confirms Data Breach at Third-Party IT Provider
Lidl customers across Europe hit in suspected data breach - here's what we know
Lidl customers' bank details at risk after third-party security failure
Lidl discloses online shop breach after service provider hack
Lidl Notified Online Shop Customers in Germany, Belgium, and the Netherlands of a Data Breach
Lidl reports data breach affecting online customers in Germany, Belgium, and the Netherlands
Lidl Warns of Phishing Risk After Customer Data Theft
Los Angeles Police Department (LAPD) lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy
Marlboro-Chesterfield Pathology Agrees to Settle Lawsuit Over 2025 Ransomware Attack
Meridian Health Plan of Illinois Data Breach Affects 21,027
Meta Removes Muse Image Instagram Feature After Consent Backlash
Microsoft Patches Zero-Day RoguePlanet Defender Flaw that Allows SYSTEM-Level Access
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
Nearly 12,000 military Tricare beneficiaries warned of data breach
New CrashStealer malware poses as Apple crash reporting tool
New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
New ransomware leader emerges as global cyberattacks rise in June 2026
Nigeria: Zenith Bank, Others To Be Arraigned Over Alleged Data Breach
Nihon Kotsu Confirms Malware Infection, Taxi Dispatch Systems Disrupted
Novel OAuth Client ID Spoofing Technique Targets Cloud Environments
Office of Foreign Assets Control (OFAC) Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans
One Misconfigured Python HTTP Server Exposed Three Active Campaigns from Attackers
Open Directory Exposes Three Evilginx Phishing Operators
Pakistan: International Hacker accused of stealing 5 Million Bank Records arrested in Karachi
Pakistan: Karachi hacker arrested for alleged theft of millions of foreign citizens’ financial data
Pakistan: National Cyber Crime Investigation Agency (NCCIA) Busts International Hacker in Major Data Breach Case
Pakistani Police Systems Hit by Chinese and Indian Espionage
PennyMac Data Breach Affects 3k Individuals: PHI Exposed
Progress Software Warns of "External Security Threat" to ShareFile
Progress warns ShareFile Users: shut down on-premises servers immediately
Prolific hacker 2019 selling alleged HotToner Australia customer data online
Public Key Infrastructure (PKI) Under Pressure: AI, PQC and Shorter Lifecycles Drive New Security Challenges
Ransomware ecosystem grows, but ‘four-headed monster’ dominates
Ransomware Groups Change Identities to Evade Cybercops
Ransomware negotiator jailed for 70 months after he just helped infect victims with malware
Ransomware negotiator who betrayed clients sentenced to 70 months in prison
Ransomware Targets 2.74% Of Malaysian Firms In 1Q26
RokRAT Malware Hides Behind Academic Event PDFs and Cloud Storage Links
Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions
Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach
Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns
Ryuk ransomware operator pleads guilty in $15 Million bitcoin extortion
Samsung Health users who refuse AI training get their data deleted
Security Leaders Discuss Exposure of 24 Billion Credentials
Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers
ShinyHunters' PeopleSoft Zero-Day Rampage: 100+ Organizations Breached Before Oracle Even Published an Advisory
Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects
Social Media Users Warned Against Phishing Campaign on X
South Korea Military Faces Highest Cyberattack Volume Since 2021
Spear-Phishing Campaign Uses Proton Drive Links and LNK Files to Deliver SpyGlace
St. Paul, Minnesota, Notifies People Affected by 2025 Cyber Attack
Sturdy Health Data Breach Affects 1k Individuals
Supply Chain Attack: jscrambler npm Package Compromised, Targeting Wallets, AI Tools, Cloud Credentials
The Decision Burden Behind SOC Alert Fatigue and How Experts Would Reduce It
The ransomware negotiator who was working for the other side
The Rising Tide of AI-Enabled Social Engineering Scams: What Organizations Need to Know
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June
TriWest Healthcare Alliance Notifies 11,844 Beneficiaries of Data Breach Affecting Health Information
U.S. sanctions First VPN Service over ransomware support
U.S. Treasury sanctions cybercrime enablers tied to ransomware attacks
UK charges suspects linked to Russian Coms call spoofing platform
UK Cyber Attacks Climb 34% as Ransomware Leadership Shifts
Ukraine: OPORA has been targeted by a coordinated phishing attack. Attackers are attempting to gain access to Gmail accounts via OAuth
United States: Sanctioning Ransomware Enablers In Coordinated International Action
US: Millions of Drivers in 12 States May Have Had Their Driver’s License Info Exposed in a Data Breach - Were You One of Them?
US and allies warn of Russian critical infrastructure attacks
US Imposes Sanctions on Belarusian Man in Ransomware Case
US Treasury Sanctions Malware and Infrastructure Providers Supporting Ransomware Attacks Against Americans
US Treasury sanctions malware providers tied to cyberattacks
Vermont: Funds recovered in recycling-related phishing scam
Vishing Call Becomes Key Lead in Massive Odido Cyberattack
VPN service favored by ransomware groups is sanctioned by US
Why cybercrime is becoming everyone’s problem in Ghana
Why Software Bill of Materials (SBOMs), signing, and provenance still don’t tell you if software is safe
Wildwood Surgical Data Breach Exposes Social Security Numbers
Year-Long Microsoft Device Code Phishing Campaign Bypasses MFA and Claims 218 Victims
YKK AP Data Breach Highlights Ongoing Cyber Risks Facing Glass Industry
