The full corpus — beyond today's front page.
1154 results · page 9 of 49
A class action lawsuit has been filed against the Pentagon following a data breach that reportedly affected millions of military members. The suit targets the Department of Defense over its handling of the incident.
Who should care: Cybersecurity · Privacy officers · Administrators
U.S. federal agencies including CISA, the FBI, and the Secret Service have issued a joint advisory warning about the SafePay ransomware group. The advisory, which also involves international cybersecurity partners, signals that SafePay is considered a significant and active threat.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
CISA, FBI and Partners Warn Organizations of SafePay Ransomware Actors Targeting Multiple Critical Infrastructure Sectors CISA (.gov)
Who should care: Cybersecurity · Privacy officers · Administrators
The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
Certificate authority eMudhra revoked eight intermediate certificates after researchers discovered their private keys were weak enough to be cracked almost instantly, potentially allowing anyone to forge certificates for legitimate websites. Mozilla, Google, and Apple moved to block the compromised certificates in their browsers and platforms.
Who should care: Cybersecurity · Privacy officers · Administrators
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.
Who should care: Cybersecurity · Privacy officers · Administrators
A Nigerian national, Chukwuemeka Victor Amachukwu, has been sentenced to eight years in prison for hacking tax preparation businesses, filing fraudulent tax returns, and running investment fraud schemes that lured victims into sending him money.
Who should care: Cybersecurity · Privacy officers · Administrators
Zeabur, a development platform, suffered a second security breach within two months after an attacker accessed internal credentials stored in plaintext, exposing over 3.2 million environment variable records and data from more than 321,000 accounts. The company is shutting down following the incident.
Who should care: Cybersecurity · Privacy officers · Administrators
California's Department of Education has warned public school students statewide that Educational Testing Service, a contractor that handles student assessments, experienced a data breach lasting several months. The department issued multiple statements over the past week notifying students that their information was affected.
Who should care: Cybersecurity · Privacy officers · Administrators
California's attorney general reached a $6 million settlement with 23andMe's successor company over claims that 23andMe failed to adequately secure customer data before a breach in 2023. The settlement resolves state allegations tied to the company's cybersecurity practices at the time of the incident.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
California has reached a $6 million settlement with 23andMe over a data breach, separate from an $18 million multistate settlement that 42 attorneys general agreed to earlier. The agreements resolve legal claims stemming from the breach of the genetic testing company's customer data.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Hundreds of ConnectWise customers have been caught up in a supply-chain attack after a compromised API secret gave attackers a path into connected Microsoft 365 environments. The stolen credential allowed the intrusion to proceed without triggering normal access controls.
Who should care: Cybersecurity · Privacy officers · Administrators
Ravie Lakshmanan reports: Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Central Ohio Primary Care Physicians, one of the largest independent primary care groups in the country, has disclosed a data breach affecting approximately 1.4 million patients. The breach is significant in scale, touching a large share of the patient population served by the physician-owned group.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A proposed $80 million settlement has been put forward to resolve a consolidated class action lawsuit against Conduent Business Services over a data breach. The case was covered by The HIPAA Journal, suggesting the breach involved protected health or personal information handled by the business services company.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals
Two Welsh organizations, Ogi Networks Limited and Data Cymru, were reprimanded by the UK's Information Commissioner's Office after a ransomware attack exposed personal data on roughly 3,300 people, most of them children. Weak passwords were identified as a key failure that allowed the breach to occur.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance · General readers · Policy
Connecticut Attorney General William Tong settled with Frontier Communications for $625,000 following an investigation into an April 2024 data breach carried out by ransomware group RansomHub, which exposed sensitive personal information belonging to Frontier customers.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · General readers · Policy
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
A leaked internal Cellebrite document describes a new product called Advanced Unlocks, apparently set for release in 2026, that reportedly can access iPhones wirelessly from about eight meters away and works even when Apple's Stolen Device Protection is active.
Who should care: Cybersecurity · Privacy officers · Administrators
Researchers say APT28, the Russian hacking group also known as Fancy Bear, used a newly documented backdoor to breach the networks of defense contractors and a law enforcement agency in two NATO member countries. The group maintained persistent access inside the targeted organizations before being detected.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance
The UK's Information Commissioner's Office reprimanded two Welsh organisations after a cyber-attack exposed personal information belonging to children. Weak passwords, including 'Password1,' were cited as a contributing factor in the security failure.
Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · AI governance
A bill connected to Anthropic was reportedly leaked, drawing attention from The Washington Post. Details of the bill's contents and the circumstances of the leak have not been disclosed in available reporting.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy