The full corpus — beyond today's front page.
764 results · page 27 of 32
Western governments have issued warnings that Russian hackers are exploiting weak router security to target critical infrastructure, as the UK and EU attributed a Russian intelligence unit with an attempted attack on Poland's power grid in the past year.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The U.S. Treasury Department announced sanctions against First VPN Service (1VPNS) and its Ukrainian administrator for aiding ransomware groups. Separately, a Belarusian man was sanctioned for malware "cryptors."
Who should care: Cybersecurity · Privacy officers · Administrators
A Nigerian Federal High Court has scheduled the arraignment of Zenith Bank and three individual defendants for July 21, 2026, on allegations that they illegally accessed and disclosed confidential financial records belonging to Makers Island Company Limited.
Who should care: Cybersecurity · Privacy officers · Administrators
Russian journalist Ksenia Sobchak says hackers gained access to her Telegram channels through an email breach, after screenshots of her private correspondence with political figures were published online. Sobchak has denied the authenticity of the leaked messages, calling them fabricated.
Who should care: Cybersecurity · Privacy officers · Administrators
The Justice Department and Pentagon have established a joint task force focused on identifying and prosecuting government leaks to news organizations, according to Defense Secretary Pete Hegseth. The move marks a formal, coordinated escalation of the federal government's effort to pursue unauthorized disclosures to journalists.
Who should care: Cybersecurity · Privacy officers · Administrators
Suspicious network activity on a Department of Homeland Security system supporting U.S. World Cup operations was initially flagged twice as a false positive before investigators confirmed an actual intrusion had occurred. The breach involved the Homeland Security Information Network, a platform used to coordinate security efforts around the event.
Who should care: Cybersecurity · Privacy officers · Administrators
CISA released a postmortem after a contractor accidentally published dozens of internal credentials, including AWS GovCloud keys, to a public GitHub repository, where they sat exposed for nearly six months before journalist Brian Krebs alerted the agency. Security experts say the incident reveals gaps in how CISA detected and responded to the exposure.
Who should care: Cybersecurity · Privacy officers · Administrators
Lidl has notified customers in Germany, Belgium, and the Netherlands that their personal data was stolen through a breach at a third-party service provider. The discount supermarket chain disclosed the incident after attackers compromised the external vendor rather than Lidl's own systems.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Varonis has released a free, hands-on Capture the Flag challenge designed to teach security practitioners how attackers exploit Microsoft Entra ID, using realistic scenarios to simulate common identity-based attack techniques.
Who should care: Cybersecurity · Privacy officers · Administrators
Marlboro-Chesterfield Pathology, a molecular, cytology, and pathology lab based in Pinehurst, North Carolina, has agreed to settle a class action lawsuit stemming from a ransomware attack that occurred in 2025. The settlement resolves claims brought by patients whose data was potentially exposed in the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
The Gay & Lesbian Community Services Center of Orange County, California, has disclosed a data breach affecting approximately 75,500 individuals. The organization provides mental health services, HIV testing, education, and outreach to its community.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
PORTLAND, Ore.— An Armenian national extradited from Ukraine to the United States pleaded guilty yesterday for his role in Ryuk ransomware attacks and an extortion conspiracy targeting companies throughout the United States, including a technology company operating in Oregon. Karen Serobovich Vardanyan, 34, pleaded guilty to conspiracy and computer fraud. According to court documents, between... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Jon Brodkin reports that a third co-conspirator who helped BlackCat attackers by giving them inside information on victims’ defense strategies has now been sentenced. A former ransomware negotiator was sentenced to 70 months in prison yesterday after colluding with BlackCat scammers to extort the victims he was hired to protect. As a ransomware negotiator for the company DigitalMint,... Source
Who should care: Cybersecurity · Privacy officers · Administrators
A California resident filed a federal class action lawsuit against TikTok on June 11, 2026, alleging a data breach exposed the personal information of more than 2.4 billion users. The complaint claims TikTok stored user data without encryption and failed to implement basic security measures.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
Dutch police investigating a cyberattack on telecom provider Odido, which exposed personal data of over 6 million customers, have identified a suspected local accomplice. Authorities say a Dutch-speaking man impersonated an Odido IT employee in what appears to have been a social engineering step linked to the breach.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy
Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy firmware attacks that compromise security protections and install persistent malware. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
In a rare combined cybersecurity/squid post, a twenty-nine-year-old squid proxy bug can leak HTTP requests. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Who should care: Cybersecurity · Privacy officers · Administrators
Karen Vardanyan faces up to 15 years in federal prison and agreed to pay nearly $1.2 million in restitution. The post Armenian national pleads guilty to Ryuk ransomware attacks appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Six years in prison for man who "sold out the very victims he was hired to represent."
Who should care: Cybersecurity · Privacy officers · Administrators
A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive materials, improve how researchers can report agency vulnerabilities and develop plans for similar incidents, the agency said in a forensic report released Thursday. The blog post outlines CISA’s response to the leak that the researcher who discovered it […] The post CISA looks to remedy ailments from big May credential leak appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
A 34-year-old Armenian man has pleaded guilty to hacking U.S. companies and deploying the infamous Ryuk ransomware to encrypt their systems. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
One man accused of deploying Ryuk ransomware pleaded guilty Wednesday in an Oregon federal court to conspiracy and computer fraud, while another man received a 70-month federal prison sentence in a Florida court for helping the Blackcat/AlphV gang extort multiple victims.
Who should care: Cybersecurity · Privacy officers · Administrators
Dutch police say they have found strong indications that Dutch nationals were behind a February cyberattack on telecom provider Odido. The investigation is ongoing, but authorities have pointed to domestic actors rather than foreign groups.
Who should care: Cybersecurity · Privacy officers · Administrators
Automated content moderation systems used by major platforms have a documented record of disproportionate errors, including a case where Meta's own internal data showed its algorithms incorrectly removed nonviolent Arabic-language content at very high rates while missing actual policy violations.
Who should care: Cybersecurity · Privacy officers · Administrators · AI governance · Lawyers · General readers · Policy