Cyber Security
PEAR Ransomware Breach at MCBS Hits 1.26 Million Patients
SourTrade Malvertising Assembles Malware in Browser Memory
ShinyHunters Breach Data Fuels $2,000 Bitcoin Sextortion Wave
Steam ClickFix Campaign Installs SYSTEM-Level XMRig Miner
GitHub and PyPI Add Time-Based Defenses Against Supply Chain Poisoning
Rockwell Patches Four Arena Code Execution Flaws Across Sectors
Scattered Spider TfL Hackers Sentenced to Five and a Half Years
ClickLock macOS Stealer Uses App-Kill Loop to Coerce Passwords
Elastic Exposes TELEPUZ: C Malware Sold as MaaS via ClickFix Chain
Russian Threat Actor Uses Gemini CLI to Run Dental Clinic Botnet
DragonForce Posts Eighteen Victims Across Eight Countries in 48 Hours
Coca-Cola Files SEC 8-K After Ransomware Hits Fairlife Dairy
CISA Adds SharePoint CVE-2026-58644 to KEV After Zero-Day Confirmed
CISA Issues Sunday Patch Deadline for Fortinet FortiSandbox RCE Flaws
23andMe Pays $18M to 43 State AGs Over Genetic Data Breach
Italy Fines WINDTRE €1.7M for Breaches Exposing 365K Customers
Interlock Hits DC Housing Authority; Play, Nova Post New Victims
Nightmare Eclipse Drops LegacyHive PoC on Fully Patched Windows
Zoom Patches CVE-2026-53412 Critical Unauthenticated Account Takeover
Cursor AI Code Execution Flaw Left Unpatched Seven Months by Developer
ServiceNow Patches CVE-2026-6875 Unauthenticated RCE in AI Platform
Bitdefender Exposes Windows Bind Link Attacks That Bypass EDR Tools
PhantomEnigma Weaponizes 20+ Brazilian Gov Sites for Malware Delivery
Chinese Actors Weaponized Claude Code in Multi-Nation Espionage Op
F5 Patches CVE-2026-42533 Heap Buffer Overflow in NGINX Plus
Unit 42 Exposes TuxBot v3 Iranian-Linked IoT Botnet With DDoS-for-Hire
CoinbaseCartel Hits Panasonic Avionics; Pear Targets US Healthcare
SonicWall SMA1000 CVSS 10.0 Zero-Day Hits Remote Access Gateways
CISA Adds Three SharePoint CVEs to KEV as Auth-to-RCE Chain
DOJ Charges Three Russians Behind LockBit, Play Hosting Network
TalkTalk Customer Data Breached, Hackers Claim Theft of Millions of Customer Records
News
TalkTalk Customer Data Breached, Hackers Claim Theft of Millions of Customer Records
TalkTalk investigates a major customer data breach after a hacker claims to have stolen personal information from millions of subscribers, a claim TalkTalk disputes.
British Museum Hit in IT Attack: Ex-Worker Behind Cyberattack
News
British Museum Hit in IT Attack: Ex-Worker Behind Cyberattack
The British Museum faced a severe IT attack, forcing partial closure. A disgruntled ex-IT contractor caused the British Museum cyberattack, leading to system shutdowns and ...
This Week In Cybersecurity: 20th January to 24th January
News
This Week In Cybersecurity: 20th January to 24th January
This week in cybersecurity, we highlight major breaches, including the PowerSchool incident affecting Canadian schools and a cyberattack on Oregon's Carruth Compliance Consulting. Additionally, the ...
Conduent Confirms Cyberattack Disrupting Services Across Government Agencies
News
Conduent Confirms Cyberattack Disrupting Services Across Government Agencies
Conduent confirms cyberattack impacting government agencies and causing service disruptions across multiple US states. The company confirmed that it “experienced ...
Big Cheese Studio Game Code Compromised in Cyber Attack
News
Big Cheese Studio Game Code Compromised in Cyber Attack
Polish game developer Big Cheese Studio suffered a cyberattack, with hackers demanding a cryptocurrency ransom and threatening data release. The Big Cheese Studio cyber attack ...
Texas Insider Breach: Theft of Benefit Funds Impacts 61,000
News
Texas Insider Breach: Theft of Benefit Funds Impacts 61,000
Texas insider breach at HHSC exposed the personal information of 61,000 individuals and resulted in the theft of benefit funds, leading to seven employee firings ...
Cyber Attack on Consultant Exposes Sensitive Data of Oregon School Employees
News
Cyber Attack on Consultant Exposes Sensitive Data of Oregon School Employees
A cyber attack on Carruth Compliance Consulting, managing retirement plans for Oregon school districts, exposed sensitive employee data including Social Security numbers and financial information. ...
Lessons from Ace Hardware Cyber Attack: A Case Study in Data Security for Enterprise Businesses
News
Lessons from Ace Hardware Cyber Attack: A Case Study in Data Security for Enterprise Businesses
The Ace Hardware cyber attack exposed sensitive data from over 7,000 individuals, resulting in significant financial and reputational damage, highlighting the critical need for robust ...
North Pole Company Data Breach Exposes Sensitive Data of Half a Million Users
News
North Pole Company Data Breach Exposes Sensitive Data of Half a Million Users
The North Pole Company suffered a data breach, exposing sensitive data of 520,599 customers. The breach, revealed on BreachForums, highlights risks of identity theft and ...
PowerSchool Breach Might Have Exposed Decades of Canadian Students and Powerschool Teachers Data
News
PowerSchool Breach Might Have Exposed Decades of Canadian Students and Teachers Data
The PowerSchool CMS cyberattack exposed decades of student and Powerschool Teachers Data . Parents and schools urged to monitor personal information closely.
Dallas ISD PowerSchool Data Breach Exposes Student Information
News
Dallas ISD PowerSchool Data Breach Exposes Student Information
Dallas ISD PowerSchool data breach exposes sensitive student information, including social security numbers. Learn about the cybersecurity incident and the risks.
CMS Powerschool Data Breach Confirmed to Have Compromised Charlotte-Mecklenburg Schools Data
News
CMS Powerschool Data Breach Confirmed to Have Compromised Charlotte-Mecklenburg Schools Data
Charlotte-Mecklenburg Schools (CMS) confirms a data breach affecting its CMS Powerschool system.
List of 15 Networking Certifications by Security Vendors to Supercharge Your Career in 2025
Blog
Top 15 Networking Certifications to Supercharge Your Career in 2025
Safeguarding networks is no longer a luxury; it’s a necessity. Expertise in cybersecurity is in incredibly high demand. So making ...
Windows BitLocker Vulnerability (CVE-2025-21210) Exploited in Randomization Attack
News
Windows BitLocker Vulnerability (CVE-2025-21210) Exploited in Randomization Attack
A critical Windows BitLocker vulnerability (CVE-2025-21210) allows attackers with physical access to bypass AES-XTS encryption, exposing sensitive data through a novel randomization attack.
Nash County Public Schools Data Breach Compromised Student Information
News
Nash County Public Schools Data Breach Compromised Student Information
A data breach at Nash County Public Schools exposed student information via PowerSchool's PowerSource.
Blacon High School Temporarily Closes Due to Ransomware Attack
News
Blacon High School Temporarily Closes Due to Ransomware Attack
Blacon High School temporarily closed due to a ransomware attack. Further closures are possible as investigations continue. The incident highlights the rising threat of ransomware ...
Otelier Data Breach Exposes Millions of Hotel Reservations and Personal Information
News
Otelier Data Breach Exposes Millions of Hotel Reservations and Personal Information
The Otelier data breach affected millions of hotel reservations, exposed personal information from major hotel chains. The breach, originating from compromised employee credentials.
HPE Data Breached by IntelBroker: HPE Data on Sale on Dark Web
News
HPE Data Breached by IntelBroker: HPE Data on Sale on Dark Web
IntelBroker, a notorious threat actor, is selling data stolen from Hewlett-Packard Enterprise (HPE), including source code, private keys, and personal information. The HPE data breach ...
FBI Warns AT&T Data Breach Exposed Agent Call Logs Risking Informants
News
FBI Warns AT&T Data Breach Exposed Agent Call Logs Risking Informants
AT&T data breach exposed six months of FBI agent call logs, potentially revealing confidential informants. The FBI warning highlights vulnerabilities in telecommunications security and the ...
Gateshead Council Cyber-Attack: Personal Data Stolen
News
Gateshead Council Cyber-Attack: Personal Data Stolen
A cyber-attack on Gateshead Council resulted in a data breach affecting an unknown number of residents. The council urges vigilance against phishing emails and advises ...
Application Security
Fastjson CVE-2026-16723 Under Active Attack With No Patch
Cybersecurity
DentaQuest Breach Affects 23.4 Million, PHI and SSNs Exposed
Cybersecurity
PEAR Ransomware Breach at MCBS Hits 1.26 Million Patients
Application Security
SourTrade Malvertising Assembles Malware in Browser Memory

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Cybersecurity
DentaQuest Breach Affects 23.4 Million, PHI and SSNs Exposed
Cybersecurity
PEAR Ransomware Breach at MCBS Hits 1.26 Million Patients
Cybersecurity
Coca-Cola Files SEC 8-K After Ransomware Hits Fairlife Dairy
Application Security
Cursor AI Code Execution Flaw Left Unpatched Seven Months by Developer
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Endor Labs Raises $93M to Cut AppSec Noise and Secure the Software Supply Chain
In this episode, we explore the security challenges of the AI-driven software era and how Endor Labs is reshaping application security for the modern development ...
UK Retailer Co-op Discloses Data Theft After DragonForce Ransomware Compromise
UK retailer Co-op has confirmed a data breach impacting millions, following a ransomware attack by DragonForce. Personal details were stolen, but no financial data.
U.S. Indicts Black Kingdom Ransomware Developer Behind 1,500 Microsoft Exchange Attacks
The U.S. has indicted a Yemeni national for operating Black Kingdom ransomware, targeting Microsoft Exchange servers in 1,500 global attacks demanding $10,000 in Bitcoin.
CVE-2025-3928: How One Vulnerability Breached Commvault’s Azure Stack
In this episode, we take a deep dive into CVE-2025-3928—a critical vulnerability in the Commvault Web Server that enables remote attackers to deploy and execute ...
Sodinokibi/REvil Ransomware: The Evasive Threat
Overview Sodinokibi, also known as REvil, is a highly prolific and sophisticated ransomware-as-a-service (RaaS) operation active since at least April 2019. Initially observed primarily in ...
beWanted Exposes Personal Data of 1.1 Million Job Seekers Across Europe and Latin America
Employment platform beWanted leaked over 1.1 million CVs containing names, ID numbers, contact details, and employment history.
Nova Scotia Power, a Canadian Utility, Breached: A Global Warning for Critical Infrastructure
On April 25, 2025, Nova Scotia Power, the province’s primary electricity provider, confirmed what many suspected: a cyber incident involving unauthorized access had compromised customer ...
SentinelOne Discloses Ongoing Attacks by Nation-State Hackers and Ransomware Gangs
In a rare move, SentinelOne has publicly confirmed that it is under persistent attack from nation-state threat actors and ransomware gangs. This episode breaks down ...
Nova Scotia Power Confirms Customer Data Compromised in Cyberattack
Nova Scotia Power confirms personal customer data was stolen in a cyberattack on April 25, though electricity services remain unaffected as the investigation continues.
OpenEoX and the Future of End-of-Life Standardization in IT
In this episode, we unpack the evolving landscape of Product Lifecycle Management (PLM) and why it’s become a strategic cornerstone in modern IT environments. From ...
Malicious PyPI Packages Exploit Gmail and WebSockets to Hijack Systems
Seven malicious PyPI packages exploited Gmail and WebSockets for remote command execution and data theft, with some packages downloaded over 18,000 times.
iHeartMedia Breach Exposes Personal Data Including SSNs and Passport Numbers
iHeartMedia confirmed a December data breach exposing names, Social Security, and passport numbers from local station systems. The company is offering identity theft protection.
Ascension Discloses Data Breach Affecting 5.6 Million Individuals
Ascension, a major U.S. healthcare provider, confirmed a ransomware breach affecting 5.6 million individuals, compromising medical, financial, and personal data.
Harrods Confirms Cyberattack Amid Growing Wave Targeting UK Retail Sector
Harrods joins M&S and Co-op as the latest UK retailer targeted in a cyberattack, prompting immediate security measures amid a surge in retail-focused intrusions.
LayerX Secures $45M Total to Battle Data Leaks, One Browser at a Time
LayerX just raised another $11 million — and it’s not to build another antivirus. With $45 million in total funding, the company is betting that ...
AirBorne: How a Zero-Click Bug Threatens Millions of Apple and Third-Party Devices
In this episode, we dive deep into AirBorne — a critical set of vulnerabilities in Apple’s AirPlay protocol and SDK, recently uncovered by security researchers ...
$10.5M to Fight AI-Phishing: The Rise of Pistachio’s Cybersecurity Training Platform
In this episode, we dive into the story of Pistachio, the Norwegian cybersecurity startup that just raised $7 million in new funding—bringing its total to ...
Hitachi Vantara Takes Servers Offline Following Akira Ransomware Attack
Hitachi Vantara shut down servers to contain an Akira ransomware attack that disrupted systems and led to stolen data across corporate and government-related operations.
Vulnerability Alert – 30th April, 2025
Staying ahead of emerging cyber threats requires continuous monitoring of newly disclosed vulnerabilities, exploitation trends, and post-compromise behaviors. This page provides a detailed breakdown of ...
Fighting AI with AI: Using Artificial Intelligence to Strengthen Enterprise Cybersecurity
The rise of AI-driven cyberattacks necessitates a proactive approach. This blog explores how AI can combat AI cybersecurity threats, highlighting its benefits and risks ...