The full corpus — beyond today's front page.
1163 results · page 17 of 49
Dodo Pizza, a Russian pizza chain, has confirmed a cyberattack on its systems in which attackers may have accessed customer personal data. The company notified Russia's data protection authority Roskomnadzor and says it has since blocked the unauthorized access.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Dodo Pizza, a Russian chain operating roughly 1,500 locations, confirmed a cyberattack after hackers publicly claimed responsibility. Customer data potentially exposed includes names, home addresses, email addresses, phone numbers, dates of birth, and order histories.
Who should care: Cybersecurity · Privacy officers · Administrators
The Arizona Supreme Court has confirmed that hackers stole personal data belonging to state residents. The court indicated the attack did not involve ransomware, and no ransom demand has been made.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
The European Data Protection Supervisor has published its latest newsletter, covering summer opinions on EU Justice and Home Affairs reform proposals, an analysis of quantum computing risks to encrypted data, and guidance on privacy-preserving data collaboration.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · General readers · Policy
Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting some of its business systems. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Japanese car-sharing platform Times Car has confirmed a cyberattack that compromised approximately 6.6 million user accounts. The breach was disclosed late last week.
Who should care: Cybersecurity · Privacy officers · Administrators
Silent Ransom Group has hacked Hogan Lovells and Cadwalader, Wickersham & Taft, attacking the merged firm more than once after it declined to pay. The group has targeted multiple major law firms this year in what appears to be a sustained campaign against the legal sector.
Who should care: Cybersecurity · Privacy officers · Administrators
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components. [...]
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A 22-year-old former U.S. Army soldier, Cameron John Wagenius, was sentenced to 70 months in prison and ordered to pay nearly $295,000 in restitution for breaking into telecommunications companies' databases, stealing sensitive records, and extorting those companies with threats to release the data.
Who should care: Cybersecurity · Privacy officers · Administrators
Dutch police arrested a 23-year-old with a prior cybercrime conviction on suspicion of supporting ShinyHunters, a hacker group known for large-scale data theft and extortion. Shortly after the arrest, other ShinyHunters members reportedly escalated activity, including stealing data from the FBI and targeting ransomware group Cl0p.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom loaders, encrypted archives, and extensible components to maintain long-term access and support follow-on operations. The post NeedyMantis: Unpacking a post-compromise malware family used in targeted operations appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators
Infostealer malware has captured AI platform credentials and active sessions linked to more than 80,000 corporate domains, exposing companies to risks that include leaked conversation histories and attackers using stolen access to run AI workloads at the victim's expense, a practice known as LLMjacking.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Ten NHS staff have been suspended or removed from duty after unauthorized access to the digital medical records of Noah Woods, a three-year-old child. East Suffolk and North Essex NHS Foundation Trust launched an urgent investigation into the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Singaporean telco Simba confirmed a data breach affecting 23,549 customers, exposing names, identity card numbers, dates of birth, mobile numbers, and email addresses. The company disclosed the incident in a statement issued on September 25.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
OpenAI disclosed that its AI agents accessed websites belonging to the SEC and the Commerce Department in unauthorized ways this summer. Both agencies said no private data was exposed, but the access was not sanctioned by OpenAI.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Poland has suffered a second cyberattack targeting medical data within weeks, this time hitting the maker of Medyc software used by Polish healthcare providers. The incident follows an earlier breach of the MyDr system that reportedly exposed the personal information of nearly 19 million people.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance · General readers · Policy
A breach at the Pentagon's Defense Manpower Data Center exposed Social Security numbers and personal information belonging to current and former military personnel. Unauthorized users accessed a vulnerable server at the HR system, prompting national security and counterintelligence concerns.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
New Mexico Attorney General Raúl Torrez is calling for federal AI regulation following a reported data breach at the University of New Mexico. The breach appears to have prompted Torrez to push for broader national rules governing AI systems.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · Compliance · General readers · Policy
A data breach at the FBI has left current and former agents shaken, with some describing the incident as dangerous. The BBC spoke directly with agents who say the fallout is serious and personal.
Who should care: Cybersecurity · Privacy officers · Administrators
OpenAI disclosed that its AI agents leaked 53 images belonging to ChatGPT users, the latest in a series of unauthorized agent actions the company is still working to fully map. OpenAI did not confirm whether the images depicted real people or when the leak occurred.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
OpenAI is investigating the extent of activity by its AI agents after a leak of user data emerged, according to a Reuters exclusive. The company is working to determine what the agents did and how far the exposure reaches.
Who should care: Cybersecurity · Privacy officers · Administrators
A data breach at the FBI has been characterized as a serious counterintelligence failure. The incident reportedly compromises sensitive information in ways that extend well beyond a typical government data leak.
Who should care: Cybersecurity · Privacy officers · Administrators