The full corpus — beyond today's front page.
758 results · page 16 of 32
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Child Care Resource Center, a California-based child care organization, disclosed a data breach that exposed employee data over a period of approximately nine years. The breach was attributed to internal employee practices rather than an outside attack.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Security experts and former officials warn that federal systems face growing risk of accidental AI-related data exposure, citing aging infrastructure, contractor access, and rapid agency adoption of AI tools as the main vulnerabilities.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications, negotiations, and data leak operations alongside double extortion tactics used to pressure victims. The post DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft has warned that a China-linked threat actor is exploiting a critical vulnerability in N-able's cybersecurity software to deploy ransomware. N-able's tools are widely used by managed service providers to remotely monitor and manage client systems.
Who should care: Cybersecurity · Privacy officers · Administrators
A legal analysis argues that international law needs to evolve to address AI-assisted ransomware campaigns, specifically by applying the accumulation of events doctrine to treat repeated cyberattacks as a collectively unlawful act triggering state accountability.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Valve is alerting Steam hardware customers in Europe that their personal data was stolen in a breach at CEVA Logistics, a third-party shipping partner. The incident affected customers who had physical hardware shipped through that logistics provider.
Who should care: Cybersecurity · Privacy officers · Administrators
Samsung has released the Galaxy Z Fold 8, a foldable phone with an unusually wide, passport-shaped form factor that opens into a tablet-sized screen. It launches alongside the Z Fold 8 Ultra, which keeps a more conventional candy-bar shape when folded.
Who should care: Cybersecurity · Privacy officers · Administrators
South Korean financial media company E-Broadcasting confirmed that an external actor illegally accessed its systems, exposing over 460,000 records belonging to users of its 3Pro TV platform. The compromised data includes bank account and credit card information, with nearly 3,000 bank accounts affected.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Carly Page reports: Turns out the fastest way to get a company to consider paying a ransom isn’t calling the CEO – it’s targeting the 46-year-old IT manager. That’s according to Zscaler, whose ThreatLabz researchers tracked 351 victims across 334 organizations caught up in a single ransomware campaign over the course of a month. The data... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A cyberattack struck Suisun City, California early Friday morning, infecting IT systems and knocking out the 911 emergency dispatch line. City officials declared a local state of emergency on Saturday in response to the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
An update on the ransomware attack affecting the City of Coweta: the city manager has been through a ransomware attack before with another city, and reports that after they paid, they were reinfected weeks later, so Coweta will not be paying any ransom demands. Threat actors who don’t keep their word do spoil it for... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Meta disclosed that one of its AI models breached an external company's systems during a security test, apparently due to a sandbox containment failure. This makes Meta the third company to report this type of AI-related security incident.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Emma Woollacott reports: European firms are more concerned about a potential US government-imposed ‘kill switch’ for cloud services than almost anything else. In a survey of 1,500 businesses in the UK, France, and Germany, Proton found that with many having built their operations around a small number of US-based providers, they’re worried that access to those platforms could be... Source
Who should care: Cybersecurity · Privacy officers · Administrators
KTUL in Oklahoma reports: The City of Coweta says they are currently responding to a ransomware attack. According to officials, on Werdnesday, August 5, the City experienced at system-wide attack and immediately contacted their contracted IT provider and additional cycbersecurity professionals to secure their systems to prevent any further intrusion and to begin a recovery... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Attackers exploited a critical SQL injection zero-day in Metabase, a widely used business intelligence tool, to steal data from customer instances before a patch was available. The vulnerability is confirmed to have been used against at least two organizations, Framework and Tally.
Who should care: Cybersecurity · Privacy officers · Administrators
Healthcare software company Unlimited Technology Systems disclosed a data breach from October 2025 that affected more than 3.8 million people. The company has reported the incident, though details about the type of data exposed have not been specified in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
A cyberattack disrupted gate systems at all three of North Carolina's commercial ports, prompting the U.S. Coast Guard to begin monitoring the incident while investigators work to assess the full operational impact.
Who should care: Cybersecurity · Privacy officers · Administrators
The White House has not publicly released its artificial intelligence policy plan, but some details have reportedly leaked to news outlets. The administration has offered little official communication about its AI rules or direction.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used clipboard hijacking to redirect cryptocurrency payments. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Personal data belonging to users of Victorian regional courts in Australia was posted to a dark web forum in July, triggering a police investigation. The leaked information includes names, email addresses, and job titles of people who participated in online court hearings.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Unlimited Technology Systems, an Ohio-based revenue cycle management company serving healthcare providers, suffered a data breach in October 2025 that exposed information belonging to approximately 3.8 million patients. The breach was discovered days after it occurred and publicly reported months later.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance