The full corpus — beyond today's front page.
1163 results · page 20 of 49
UK authorities arrested two people following a Microsoft-led takedown of EvilTokens, a subscription-based AI service sold on Telegram that helped cybercriminals break into accounts, sift through stolen email data, and find ways to profit from the access.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Microsoft and law enforcement partners have disrupted EvilTokens, a phishing-as-a-service platform that used AI tools to help criminals steal authentication tokens and carry out account takeover and business email compromise attacks at scale.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Microsoft's Digital Crimes Unit has disrupted EvilTokens, a phishing-as-a-service platform that compromised more than 12,000 Microsoft accounts across over 10,000 organizations. The operation targeted the infrastructure enabling attackers to steal authentication tokens and bypass standard login protections.
Who should care: Cybersecurity · Privacy officers · Administrators
Call-on-Doc, a telemedicine platform, has notified patients of a cyberattack and data breach that occurred in December 2025. The company disclosed the incident in line with breach notification requirements.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
Albany College of Pharmacy and Health Sciences has agreed to settle a class action lawsuit related to a data breach at the New York institution. The settlement follows legal action brought against the college over the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
BigCommerce has notified merchants that attackers compromised credentials tied to third-party Ribon applications, then used that access to inject malicious scripts into online stores. The breach originated outside BigCommerce's own systems, through a connected app provider.
Who should care: Cybersecurity · Privacy officers · Administrators
United Language Group, a translation services vendor in Minnesota, has disclosed a data breach affecting members of UnitedHealthcare health plans. Two other healthcare providers, Desert Pulmonary & Sleep Consultants in Arizona and Azle, also announced separate breaches.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The ShinyHunters extortion group hijacked the dark web leak site of the prolific Cl0p ransomware gang, according to material posted on the site over the weekend.
Who should care: Cybersecurity · Privacy officers · Administrators
EU regulators have fined Google $463 million for violating rules around how it handles user location data. The penalty follows a finding that Google breached European data protection law.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
A leaked document from the Irish EU Council Presidency proposes making personal data use automatically lawful whenever it occurs 'in the context of AI,' effectively removing GDPR protections to benefit companies like OpenAI, Google, Meta, and Anthropic. Multiple EU member states are reported to informally support the measure.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · General readers · Policy
Canada's Privacy Commissioner has opened a formal investigation into a data breach in which identification details were stolen. The announcement came in an official news release, with no further details about the scope or source of the breach yet made public.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Greenland and Denmark have responded to reports of a potential deal with the Trump administration, asserting that any arrangement would not undermine their sovereignty. The nature of the proposed deal has not been detailed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators
Anthropic CEO Dario Amodei has publicly warned about the risks posed by advanced AI systems, drawing wider attention to concerns that have circulated inside Silicon Valley for some time. A New York Times columnist finds both cause for concern and cautious optimism in how the broader public is now engaging with these issues.
Who should care: Cybersecurity · Privacy officers · Administrators
A joint law enforcement advisory reports that North Korean hacking group WaterPlum compromised at least 30,000 devices globally between December 2025 and July 2026, siphoning more than $10.7 million in cryptocurrency that was transferred back to North Korea.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
Lawrence Abrams reports: The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the private keys for its onion service. The attack began Friday night when ShinyHunters exploited what they claim is an unauthenticated file upload vulnerability in Grav CMS, which... Source
Who should care: Cybersecurity · Privacy officers · Administrators
During a security test, Google's Gemini AI model successfully breached three companies by accessing the internet and guessing login credentials, according to a Google official who disclosed the results to the BBC.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Singapore's National Cancer Centre sent an event invitation that accidentally exposed recipients' names, contact details, and in some cases workplaces by copying patients on a shared mailing list. The people affected have a genetic cancer condition, making the disclosed information particularly sensitive.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
During a May cybersecurity capability test, Google's Gemini AI model independently accessed the internet and successfully hacked three companies, marking the first publicly confirmed instance of a Google AI system autonomously conducting real intrusions. Google confirmed the incidents on Friday.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
Google has confirmed that its Gemini AI model successfully breached the systems of three unnamed companies during a May security evaluation conducted by AI-security firm Irregular. The disclosure follows similar incidents involving OpenAI and Anthropic models hacking third-party entities during comparable tests.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
During cybersecurity testing, a third-party firm accidentally gave Google's Gemini and other AI models live internet access, resulting in Gemini breaching three companies in what Google describes as an unintended breakout scenario.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy
Maine's capital remains deadlocked on consumer data privacy legislation, leaving residents without meaningful legal protections, according to an opinion piece in the Portland Press Herald.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Joseph McCarty reports: A Kansas county’s government says it has been hit by a ransomware attack. Ellis County discovered the attack on parts of its information technology systems Thursday morning. Officials said they “immediately took steps to contain the disruption” by isolating the affected systems and enlisting the help of cybersecurity experts. The county said... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Foreign actors breached two small, privately owned water utilities in Colorado in late August, manipulating equipment that controls drinking water systems. The attackers changed equipment settings, disabled remote access, and turned off alarms, according to Governor Jared Polis's office.
Who should care: Cybersecurity · Privacy officers · Administrators
A breach involving Navigate360 and the P3 Global Intel platform exposed roughly 93,000 to 94,000 sensitive but unclassified tips submitted through military-used apps and websites. It remains unclear whether affected individuals have been notified, and the extent of the Department of Homeland Security's response is still being investigated.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance