The full corpus — beyond today's front page.
761 results · page 18 of 32
A flaw in Apple's Private Relay feature can expose users' real IP addresses to the websites they visit, undermining the core privacy protection the feature is supposed to provide. Private Relay is built into Apple's iCloud+ subscription and is marketed as a way to prevent sites from tracking users by their IP address.
Who should care: Cybersecurity · Privacy officers · Administrators
Dutch luxury retailer De Bijenkorf has notified customers that their personal data may have been compromised following a cyber incident at a third-party logistics provider. The Amsterdam-based chain has not disclosed the scope of the breach or which provider was involved.
Who should care: Cybersecurity · Privacy officers · Administrators
Updoc, an Australian 24/7 telehealth platform, has notified patients of a security breach involving unauthorised access to a third-party system. Personal information including names, email addresses, and postal addresses may have been stolen.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Omni Healthcare Financial Holdings and Western Montana Clinic have each agreed to settle class action lawsuits stemming from separate data breaches. The settlements resolve claims brought by individuals whose personal or medical information was exposed.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A self-propagating worm embedded in over 400 malicious npm packages spread through software supply chains by automatically republishing infected updates, stealing credentials along the way. Microsoft's security team has published a detailed breakdown of how the attack worked and how to detect or remediate it.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could be chained with previously disclosed flaws to achieve remote code execution (RCE). [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Researchers from multiple security firms observed a variant of Mini Shai-Hulud, self-replicating malware linked to TeamPCP, in all the affected packages. The post Massive supply-chain attack compromises 440 packages under four hours appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Iranian actors have been tentatively linked to cyberattacks on water systems across at least seven U.S. states, including Minnesota, though attribution remains preliminary and no significant damage has been confirmed. The Trump administration has publicly rejected the Iran attribution, with the president suggesting Minnesota's own government is responsible.
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft Defender automatically isolated a compromised QNET endpoint in 128 seconds, stopping a multi-stage attack before the payload could persist or spread. The post 128 Seconds to disruption: Microsoft Defender stops ransomware at QNET appeared first on Microsoft Security Blog.
Who should care: Cybersecurity · Privacy officers · Administrators
Polish convenience store chain Żabka confirmed that attackers breached its systems in late July, apparently by compromising a third-party account to access its Jira project management environment and other sensitive data.
Who should care: Cybersecurity · Privacy officers · Administrators
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The INC ransomware group has been identified as the most aggressive actor exploiting two SonicWall zero-day vulnerabilities, chaining them together to steal and encrypt victim data for extortion. While INC was not the first group to use these flaws, it has been the most effective.
Who should care: Cybersecurity · Privacy officers · Administrators
Federal lawmakers are pushing to extend identity theft protection services for victims of the 2015 Office of Personnel Management data breach before those services expire next month. Senator Mark Warner and Delegate Eleanor Holmes Norton are seeking to make the protections permanent for the millions of current and former federal employees affected.
Who should care: Cybersecurity · Privacy officers · Administrators
Brown Health Medical Group-MA, operating under Lifespan Physicians Group of Massachusetts, has confirmed a data breach involving the protected health information of approximately 312,000 individuals. The incident falls under HIPAA reporting requirements, indicating that sensitive patient data was exposed or compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Switzerland's Federal Office for Information Technology and Communications disclosed a breach of its systems, with around 200 accounts compromised. The agency detected anomalies in on-premises Microsoft servers and suspects SharePoint vulnerabilities may have been the entry point, though the exact method has not been confirmed.
Who should care: Cybersecurity · Privacy officers · Administrators
Fifteen Republican attorneys general have written to OpenAI CEO Sam Altman requesting that the company preserve records related to a breach involving Hugging Face, suggesting OpenAI's conduct in the incident may have run afoul of state or federal law.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Switzerland's Federal Office of Information Technology, Systems and Telecommunication reported a cyberattack on its SharePoint servers, resulting in roughly 200 compromised accounts and the blocking of external internet access to those systems. Authorities said there is currently no evidence of broader data exfiltration beyond the affected accounts.
Who should care: Cybersecurity · Privacy officers · Administrators
Private conversations from Claude, Anthropic's AI assistant, are appearing in Google search results. The exposed content reportedly includes sensitive personal data such as cryptocurrency wallet keys, home addresses, medical billing details, and therapy-related notes — apparently because a user-level data-sharing setting made those chats public.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A US House committee has requested a briefing from OpenAI following a reported security breach involving its AI agent systems. The congressional inquiry signals growing legislative attention to vulnerabilities in agentic AI products.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
A cyberattack on Liechtenstein exposed roughly 31,000 records tied to companies, foundations, and trusts registered in the country, revealing the identities of people behind those entities. The government has formed a crisis unit in response to the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
A hacking group called ExfilSquad breached the UK's Police National Legal Database, exposing contact information belonging to more than 100,000 police officers and criminal justice staff. The attack targeted a database used across UK law enforcement.
Who should care: Cybersecurity · Privacy officers · Administrators