The full corpus — beyond today's front page.
1163 results · page 13 of 49
Zohar Pinhasi allegedly deceived ransomware recovery clients into a payment scheme disguised as a specialized service that helped victims avoid paying cybercriminals. The post Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
The owner of a ransomware recovery firm was hit with wire fraud charges for allegedly making secret ransom payments while overcharging the victims of attacks.
Who should care: Cybersecurity · Privacy officers · Administrators
A leaked document or report, covered by 404 Media, indicates that law enforcement has the capability to break into locked iPhones. The details emerged through a leak rather than official disclosure.
Who should care: Cybersecurity · Privacy officers · Administrators
Sheppard Mullin, a major U.S. law firm, is facing a class action lawsuit after disclosing a data breach. The suit follows the firm's public acknowledgment that client or personal data was compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Leaked internal communications from a Russian extortion group reveal an organized operation targeting U.S. law firms, with members tracking multiple victims, negotiating large ransom payments, and directing operatives physically located inside the United States.
Who should care: Cybersecurity · Privacy officers · Administrators
Laboratory Services Cooperative, a Seattle-based nonprofit lab serving Planned Parenthood affiliates, has agreed to pay $6.1 million to settle litigation stemming from a data breach. The organization provides clinical diagnostic and testing services, meaning the exposed data likely included sensitive health information.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than any security team can review them. As the recent Klue breach showed, attackers are taking notice and exploiting forgotten OAuth grants to gain access to corporate data. This article covers why OAuth risks are so hard [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
South Korea's largest online retailer, Coupang, is suing to challenge a roughly 620 billion won fine stemming from a data breach that exposed the records of more than 33 million customers. The incident, which has been in the news for nine months, has drawn sustained regulatory scrutiny.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Greece's data protection authority ruled against the Ministry of Social Cohesion and Family Affairs following a large-scale personal data breach, finding violations across multiple GDPR articles including security, breach notification, and data protection by design. The ministry's processor, E.E.T.A.A. S.A., was also implicated in the decision, which resulted in fines and a compliance order.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · AI governance · General readers · Policy
ASOS has begun notifying customers of a data breach in which hackers used social engineering and stolen credentials to access personal data. The fashion retailer confirmed the incident occurred earlier this week.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Asos has revised the scope of a recent data breach after cyber criminals contacted the BBC to say the stolen data went beyond the basic contact details the retailer initially disclosed. The full extent of what was taken has not yet been confirmed publicly.
Who should care: Cybersecurity · Privacy officers · Administrators
Military analysts are drawing comparisons between the current drone-saturated battlespace in Ukraine and the trench warfare stalemate of World War I, arguing that robotic precision weapons are making large-scale armored movement as lethal today as crossing no-man's-land was in 1914.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A 2025 data breach at Oracle Health's legacy Cerner servers exposed electronic protected health information belonging to nearly 20 million individuals. The incident ranks among the largest known breaches of medical data reported this year.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
On the second day of Pwn2Own Ireland 2026, security researchers collected $232,500 in cash awards after exploiting 45 unique zero-day vulnerabilities. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
OpenAI used AI to help draft the email it sent to the Australian government disclosing that its AI agent had compromised government websites. The revelation followed testimony in which an OpenAI executive told a parliamentary inquiry he did not believe AI had been used to write that message.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Here’s another case where the folks who were supposed to be the good guys helping you may be harming you. Zohar Pinhasi, 50, also known as “Zack Silver” and “Zack Green,” a U.S. and Israeli national, was arraigned today in the Eastern District of New York on wire fraud charges relating to Pinhasi’s false representations... Source
Who should care: Cybersecurity · Privacy officers · Administrators
The owner of ransomware remediation company MonsterCloud has been charged with allegedly defrauding ransomware victims by secretly paying their attackers for decryptors while claiming to use proprietary technology to recover encrypted data. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Internal chat logs from Silent Ransom Group appear to have leaked, potentially revealing how the cybercriminal operation generates hundreds of millions of dollars without using traditional ransomware encryption. The group has been active since at least 2022 and has drawn sustained coverage for its unconventional extortion methods.
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI has issued a warning that attacks exploiting Fortinet FortiGate firewalls and SSL VPN gateways are still active, with threat actors locking legitimate administrators out of their own systems.
Who should care: Cybersecurity · Privacy officers · Administrators
Attackers breached third-party operators managing country-code top-level domains for Ghana, American Samoa, and Sierra Leone, then altered DNS records and obtained unauthorized HTTPS certificates to hijack several Google domains.
Who should care: Cybersecurity · Privacy officers · Administrators
The U.S. government has posted a $10 million bounty for Zhang Yu, whom officials identify as a key actor in the Hafnium hacking campaign, a Chinese state-linked operation that breached thousands of computers and exfiltrated large volumes of documents.
Who should care: Cybersecurity · Privacy officers · Administrators
Arizona courts disclosed a data breach affecting more than 1.3 million people after hackers accessed the state's Fines/Fees and Restitution Enforcement Program, which collects debts tied to traffic and criminal violations.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
A mental health authority serving Jefferson, Blount, and St. Clair counties has agreed to a $700,000 settlement to resolve a class action lawsuit tied to a 2025 data breach. The settlement follows a consolidated legal action brought by individuals affected by the security incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy