Cyber Security
23andMe Successor Settles With California for $6M Over Breach
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
State Bank of India Confirms Data Leak of 3,897 Customer Records
Conduent Agrees to $80M Settlement Over Breach of 62M People
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
OpenCode Silently Patched Critical RCE Flaw With No CVE
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Laravel TokenGuard Flaw Lets Attackers Log In as Any User
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
Parkview Health Disables Network After Suspicious Activity
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Trojanized Rank Math SEO PRO 3.0.123 Backdoors WordPress Sites
Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection
CISA Flags dcm4chee Archive Flaws and Unpatched EseeCloud Cameras
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
California Student Records Exposed in ETS SFTP Breach
Critical Security Flaw in Asus AiCloud Routers Prompts Urgent Firmware Update
News
Critical Security Flaw in Asus AiCloud Routers Prompts Urgent Firmware Update
Asus urges immediate firmware updates after a critical security flaw in AiCloud routers is discovered, allowing unauthorized function execution via crafted remote requests.
This Week In Cybersecurity: 14th April to 18th April
Cybersecurity Newsletter
This Week In Cybersecurity: 14th April to 18th April
Sure! Here's a 25-word excerpt summarizing the entire newsletter: **Widespread service outages, ransomware attacks, zero-day exploits, and data breaches impacted major platforms including Jira, Binance, ...
Ahold Delhaize Data Breach Confirmed After INC Ransomware Claims Responsibility
News
Ahold Delhaize Data Breach Confirmed After INC Ransomware Claims Responsibility
Ahold Delhaize confirms data theft from U.S. systems after INC Ransom's cyberattack. Investigation continues as stolen files appear on a dark web extortion site.
Legends International Confirms Data Breach Following Cyberattack in November 2024
News
Legends International Confirms Data Breach Following Cyberattack in November 2024
Legends International disclosed a data breach affecting venue visitors and employees after a November 2024 cyberattack. The breach involved unauthorized access and data exfiltration.
Google Faces £5 Billion UK Antitrust Lawsuit Over Search Advertising Practices
Cybersecurity
Google Faces £5 Billion UK Antitrust Lawsuit Over Search Advertising Practices
Google has been hit with a £5 billion antitrust lawsuit in the UK, alleging it used its dominance to inflate search advertising prices for British ...
Jira Down, Atlassian Users Face Widespread Service Disruption
News
Jira Down, Atlassian Users Face Widespread Service Disruption
Atlassian's Jira platform is experiencing a global outage, affecting multiple products and causing significant disruptions for enterprise users.
UK Law Firm Fined £60,000 Over Ransomware Data Breach That Exposed Sensitive Case Files
News
UK Law Firm Fined £60,000 Over Ransomware Data Breach That Exposed Sensitive Case Files
DPP Law was fined £60,000 after a ransomware data breach exposed sensitive client data, due to outdated systems, delayed reporting, and lack of cybersecurity controls. ...
Over 16,000 Fortinet Devices Compromised via Symlink Backdoor Exploit
News
Over 16,000 Fortinet Devices Compromised via Symlink Backdoor Exploit
Over 16,000 Fortinet devices have been compromised via a symlink backdoor, allowing persistent read-only access to sensitive files despite applied patches.
Fake Binance Installers Spreading Malware in New Crypto-Themed Malvertising Campaign
News
Fake Binance Installers Spreading Malware in New Crypto -Themed Malvertising Campaign
Cybercriminals are using fake Binance and TradingView installers to deliver stealthy malware that steals browser credentials and disables system security settings.
Pennsylvania State Education Association Data Breach Exposes Over 500,000 Individuals
News
Pennsylvania State Education Association Data Breach Exposes Over 500,000 Individuals
Class Action Lawsuit Filed Over Delayed Response to Pennsylvania State Education Association Data Breach
MedEx Ambulance Data Breach: 118,000 Patient Records Exposed
News
MedEx Ambulance Data Breach: 118,000 Patient Records Exposed
MedEx ambulance service confirms a breach impacting 118,418 patients. Sensitive personal, medical, and financial data was exposed, adding to the expanding Landmark Admin data breach ...
Endue Software Data Breach Exposes Health Information of Over 118,000 Patients Across U.S. Infusion Centers
News
Endue Software Data Breach Exposes Health Information of Over 118,000 Patients Across U.S. Infusion Centers
Endue Software confirms a breach impacting 118,000 individuals, with sensitive healthcare data compromised. The incident adds to ongoing threats across the U.S. healthcare sector.
4chan Offline After Cyberattack: Hackers Claim Full Admin Access and Leak Internal Data
News
4chan Offline After Cyberattack: Hackers Claim Full Admin Access and Leak Internal Data
4chan suffered a major cyberattack on April 14, 2025, with hackers leaking admin tools, emails, and source code while the site remains intermittently offline.
DaVita Confirms Ransomware Attack, Activates Containment Measures
News
DaVita Confirms Ransomware Attack, Activates Containment Measures
DaVita, a major dialysis provider, confirmed a ransomware attack impacting operations. Patient care continues as investigations progress and potential links to the Landmark Admin data ...
Skyward Specialty Insurance Data Breach Exposes Sensitive Information
Cybersecurity
Skyward Specialty Insurance Data Breach Exposes Sensitive Information
Skyward Specialty Insurance Group reports a data breach involving unauthorized access to sensitive personal information, prompting investigations and notifications to affected individuals.
Landmark Admin Data Breach: 1.6 Million Affected Individuals
News
Landmark Admin Data Breach: 1.6 Million Affected Individuals
Landmark Admin's data breach has expanded to affect over 1.6 million individuals, compromising sensitive personal information and prompting enhanced security measures.​
Hertz Data Breach: Customer Information and Driver's Licenses Compromised in Cleo Zero-Day Attack
News
Hertz Data Breach: Customer Information and Driver’s Licenses Compromised in Cleo Zero-Day Attack
Hertz confirms a data breach exposing customer data due to Cleo zero-day exploits. Clop ransomware gang leaked some of the stolen information on their site. ...
B.C. Healthcare Data Breach Exposes 28,000 SINs; Leads to CRA Account Hacks and Identity Theft
News
B.C. Healthcare Data Breach Exposes 28,000 SINs; Leads to CRA Account Hacks and Identity Theft
A massive Interior Health data breach in B.C. exposed 28,000 Social Insurance Numbers, leading to hacked CRA accounts, identity theft, and fraudulent tax filings.
Conduent Confirms Client Data Breach from January 2025 Cyberattack
News
Conduent Confirms Client Data Breach from January 2025 Cyberattack
Conduent confirms that client data was stolen during a January 2025 cyberattack, involving personal information of end-users. The company is notifying affected clients accordingly.
Planned Parenthood Data Breach Exposes Sensitive Information of 1.6 Million Patients Across 30 States
News
Planned Parenthood Data Breach Exposes Sensitive Information of 1.6 Million Patients Across 30 States
A data breach at a Planned Parenthood lab vendor exposed personal, financial, and health information of 1.6 million people across 30 states in October 2024.
Application Security
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
CVE Vulnerability Alerts
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
Cybersecurity
Conduent Agrees to $80M Settlement Over Breach of 62M People
Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Application Security
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
170K-Record Database Exposes Unencrypted PII from Real Estate Sector
A misconfigured database tied to a U.S. real estate firm exposed 170,000 records of sensitive personal and internal data, including Social Security numbers and employment ...
NeuralTrust’s Echo Chamber: The AI Jailbreak That Slipped Through the Cracks
This podcast dives deep into one of the most pressing vulnerabilities in modern AI — the rise of sophisticated “jailbreaking” attacks against large language models ...
AT&T, Verizon, and Beyond: How Salt Typhoon Targets Global Telcos
In this episode, we dive deep into the alarming revelations about Salt Typhoon—a Chinese state-sponsored advanced persistent threat (APT) actor, also known as RedMike, Earth ...
Anubis Ransomware: A Destructive, Cross-Platform Threat
Anubis ransomware combines encryption and file-wiping capabilities, targeting Windows, Linux, and NAS systems with stealthy command-line execution and affiliate-driven campaigns across multiple industries.
Fake Microsoft, Netflix, & Apple Support: The Scam Lurking in Google Search
In this eye-opening episode, we break down a sophisticated new trend in tech support scams (TSS) that’s catching even the most cautious users off guard. ...
Steel Giant Nucor Confirms Data Theft in Recent Cybersecurity Breach
Nucor, North America’s largest steel producer, has confirmed data theft following a cybersecurity breach that temporarily disrupted operations and forced system shutdowns.
Chinese APT Group ‘Salt Typhoon’ Breaches Canadian Telecom Firm Using Cisco IOS XE Vulnerability
Canada confirms a state-sponsored breach in its telecom sector, where Salt Typhoon exploited an unpatched Cisco vulnerability to compromise devices and reroute sensitive network traffic. ...
Russia-Linked Hackers Deploy Sophisticated Social Engineering Attack and Evade MFA
Russian state-sponsored hackers targeted a critic of the Kremlin using a novel social engineering tactic that tricked the victim into bypassing multi-factor authentication protections.
16 Billion Passwords Exposed in Record-Breaking Breach: A Deep Dive into the Data Leak That Affects Everyone
A massive breach has exposed 16 billion login credentials, potentially affecting services like Facebook, Google, and Apple. This fresh infostealer data opens the door to ...
APT28 Hackers Use Signal to Target Ukraine with New Malware Families BeardShell and SlimAgent
Russian threat group APT28 is using Signal messages to deliver new malware—BeardShell and SlimAgent—targeting Ukrainian government entities through sophisticated phishing and loader tactics.
Anubis Ransomware Gang Claims 64GB Disneyland Paris Leak in Alleged Construction Data Breach
Anubis ransomware group claims to hold 64GB of Disneyland Paris data, including engineering plans and behind-the-scenes content, though the source and sensitivity remain unclear.
Oxford City Council Cyberattack Exposes Two Decades of Election Worker Data
Oxford City Council has confirmed a cybersecurity breach involving legacy systems, exposing election worker data from 2001 to 2022 after detecting unauthorized access to its ...
McLaren Health Care Data Breach Exposes Personal Information of 743,000 Individuals
McLaren Health Care has suffered a major data breach, exposing sensitive personal and medical data of 743,000 individuals, following a history of ransomware incidents.
Aflac Confirms Data Breach Amid Rising Wave of Scattered Spider Attacks on U.S. Insurance Industry
Insurance giant Aflac has confirmed a breach involving sensitive personal and health data, part of a broader wave of attacks linked to the Scattered Spider ...
BitoPro Exchange Ties $11 Million Crypto Theft to North Korea’s Lazarus Group
Taiwan-based crypto exchange BitoPro has linked the $11 million theft from its platform to the North Korean Lazarus Group, citing attack similarities and forensic evidence. ...
From Malware to Court: Qilin Ransomware’s ‘Call a Lawyer’ Tactic
In this episode, we take a deep dive into the Qilin ransomware group — now regarded as the world’s leading ransomware-as-a-service (RaaS) operation — and ...
Zero-Click, Zero-Warning: The FreeType Flaw Behind a Spyware Surge
In this episode, we dive deep into the story behind CVE-2025-27363, a critical zero-click vulnerability in the widely used FreeType font rendering library. Initially discovered ...
The Insurance Industry Under Fire: Anatomy of the Aflac Cyber Incident
In this episode, we take a deep dive into the June 2025 cyberattack on Aflac, one of the latest strikes in a growing wave of ...
The Nucor Cyberattack: How Ransomware Threatens American Steel
In May 2025, a ransomware attack forced Nucor — one of America’s largest steel producers — to halt its metal production operations. This wasn’t just ...
Inside the $225M Crypto Seizure: How Law Enforcement Traced Illicit Funds Across Borders
A staggering $225 million in illicit cryptocurrency was recently seized by U.S. authorities in what has become the largest digital asset recovery in Secret Service ...