Cyber Security
23andMe Successor Settles With California for $6M Over Breach
ICO Reprimands Welsh Bodies After ‘Password1’ Account Breach
Mozilla, Google, Apple Block Eight Weak eMudhra CA Keys
Hacker Claims NBCUniversal Production and Tax-Credit Data Theft
Hijacked Account Plants Stealer in Five OVHcloud CLI Releases
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
Public Exploit Released for Critical FortiSIEM Flaw CVE-2026-106173
State Bank of India Confirms Data Leak of 3,897 Customer Records
Conduent Agrees to $80M Settlement Over Breach of 62M People
Public Exploit Chains 37-Year-Old BSD Bug for OpenBSD Root
OpenCode Silently Patched Critical RCE Flaw With No CVE
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Laravel TokenGuard Flaw Lets Attackers Log In as Any User
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
Parkview Health Disables Network After Suspicious Activity
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Trojanized Rank Math SEO PRO 3.0.123 Backdoors WordPress Sites
Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection
CISA Flags dcm4chee Archive Flaws and Unpatched EseeCloud Cameras
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
California Student Records Exposed in ETS SFTP Breach
Texas Tech University Data Breach Exposes Data of 1.4 Million Patients
News
Texas Tech University Data Breach Exposes Data of 1.4 Million Patients
A cyberattack on the Texas Tech University Health Sciences Center exposed the sensitive data of 1.4 million patients, including names, addresses, Social Security numbers, and ...
Nebraska AG Files Change Healthcare Lawsuit Following Devastating Data Breach
News
Nebraska AG Files Change Healthcare Lawsuit Following Devastating Data Breach
Nebraska Attorney General Mike Hilgers filed a lawsuit against Change Healthcare, alleging failures after a data breach exposed sensitive information of hundreds of thousands of ...
Cleo Data Theft: Clop Ransomware Gang Takes Credit for Attack
News
Cleo Data Theft: Clop Ransomware Gang Takes Credit for Attack
Clop ransomware group has confirmed its role in the recent Cleo data theft attacks, leveraging zero-day exploits in Cleo's file transfer platforms to steal sensitive ...
Rhode Island RIBridges Data Breach: Ransomware Attack Poses Imminent Data Leak Threat
News
Rhode Island RIBridges Data Breach: Ransomware Attack Poses Imminent Data Leak Threat
Rhode Island RIBridges data breach: Hackers threaten to release sensitive data IMMINENTLY.
390,000 WordPress Accounts Hacked by MUT-1244 in Supply Chain Attack
News
390,000 WordPress Accounts Hacked by MUT-1244 in Supply Chain Attack
Over 390,000 WordPress credentials were stolen in a year-long supply chain attack by MUT-1244, compromising security researchers, penetration testers, and even other malicious actors. The ...
This Week In Cybersecurity: 9th December to 13th December
Cybersecurity
This Week In Cybersecurity: 9th December to 13th December
Krispy Kreme Cyberattack Disrupts Online Orders, Impacts US Operations Krispy Kreme confirmed a cyberattack on November 29, 2024, disrupting its ...
New IOCONTROL Malware Threatens Critical Infrastructure in Israel and the US
News
New IOCONTROL Malware Threatens Critical Infrastructure in Israel and the US
Iranian-linked hackers are using the newly discovered IOCONTROL malware to target critical infrastructure in Israel and the US, compromising IoT devices and SCADA systems. The ...
Byte Federal Data Breach Exposes Sensitive Information of 58,000 Users
News
Byte Federal Data Breach Exposes Sensitive Information of 58,000 Users
A major Byte Federal data breach exposed the personal data of 58,000 users due to a GitLab vulnerability. The breach included sensitive information like names, ...
AWS Cyberattack Exposes Sensitive Data of Customers: Stolen Credentials Found in Plain Sight
News
AWS Cyberattack Exposes Sensitive Data of Customers: Stolen Credentials Found in Plain Sight
A significant cyberattack exploited misconfigured AWS cloud instances, resulting in the theft of sensitive customer data, including credentials and API keys. The stolen information was ...
EagleMsgSpy Spyware Used by Chinese Police
News
EagleMsgSpy Spyware Used by Chinese Police
Researchers uncover EagleMsgSpy, a sophisticated Android spyware developed by Wuhan Chinasoft and used by Chinese law enforcement to steal sensitive data from mobile devices, including ...
Data Breach Exposes 765,000 Senior Dating Website Users
News
Data Breach Exposes 765,000 Senior Dating Website Users
A significant data breach at Senior Dating, a platform for users aged 40+, exposed the personal details of 765,517 individuals. The exposed data included email ...
Krispy Kreme Cyberattack Disrupts Online Orders, Impacts US Operations
Cybersecurity
Krispy Kreme Cyberattack Disrupts Online Orders, Impacts US Operations
Krispy Kreme Cyberattack: A Detailed Look at the Incident On November 29th, 2024, Krispy Kreme, Inc., the renowned American multinational ...
Ransomware Attack Cripples Leading Heart Surgery Device Maker, Artivion
News
Artivion, Leading US Heart Surgery Device Maker, Crippled by Ransomware Attack
Artivion, a prominent heart surgery device manufacturer, suffered a ransomware attack on November 21st, causing operational disruptions and data theft. The incident involved file encryption ...
Equifax Data Breach Settlement Update Payments, Eligibility, and Identity Theft Recovery
News
Equifax Data Breach Settlement Update Payments, Eligibility, and Identity Theft Recovery
The Equifax data breach settlement offers compensation and identity theft recovery services to affected individuals. Payments are expected in December 2024, with identity theft services ...
Children's Hospital Colorado Hit with $500,000 Fine for HIPAA Violation Following Data Breach
News
Children’s Hospital Colorado Hit with $500,000 Fine for HIPAA Violation Following Data Breach
Children's Hospital Colorado was fined $500,000 by HHS for HIPAA violations related to two data breaches in 2017 and 2020, impacting over 10,000 patients' protected ...
Amergis Healthcare Staffing Data Breach: Compromised Email Accounts Expose Sensitive Consumer Information
News
Amergis Healthcare Staffing Data Breach: Compromised Email Accounts Expose Sensitive Consumer Information
Amergis Healthcare Staffing, Inc. announced a data breach stemming from compromised email accounts, potentially exposing sensitive consumer information. The breach led to data breach notification ...
Electrica Cyberattack: Romanian Energy Giant Faces Ransomware Attack, Assures Customers of Safety
News
Electrica Cyberattack: Romanian Energy Giant Faces Ransomware Attack, Assures Customers of Safety
Romanian energy provider Electrica is battling a ransomware cyberattack, disrupting customer interactions but assuring critical systems remain unaffected. Authorities are investigating.
Data Breach Exposes 17,000 Hong Kong Residents' Data; EMSD Violates Privacy Ordinance
News
Data Breach Exposes 17,000 Hong Kong Residents’ Data; EMSD Violates Privacy Ordinance
The Office of the Privacy Commissioner for Personal Data uncovered a data breach by the Electrical and Mechanical Services Department (EMSD), exposing sensitive information of ...
Atrium Health Data Breach Impacts 585,000 Patients
News
Atrium Health Data Breach Impacts 585,000 Patients
Atrium Health, a major healthcare provider, has disclosed a data security incident affecting 585,000 individuals. The cyberattack compromised sensitive personal information, raising concerns about patient ...
Anna Jaques Hospital Ransomware Breach Exposes Data of 300K Patients
News
Anna Jaques Hospital Ransomware Breach Exposes Data of 300K Patients
Anna Jaques Hospital, a Massachusetts-based healthcare provider, suffered a ransomware attack in December 2023, resulting in the exposure of sensitive data for over 316,000 patients. ...
Application Security
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
CVE Vulnerability Alerts
Qilin, INC Ransomware Exploit PAN-OS Flaw, Then Pivot to VMware

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Cybersecurity
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
Cybersecurity
Conduent Agrees to $80M Settlement Over Breach of 62M People
Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Application Security
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Over 16,000 Fortinet Devices Compromised via Symlink Backdoor Exploit
Over 16,000 Fortinet devices have been compromised via a symlink backdoor, allowing persistent read-only access to sensitive files despite applied patches.
Fake Binance Installers Spreading Malware in New Crypto -Themed Malvertising Campaign
Cybercriminals are using fake Binance and TradingView installers to deliver stealthy malware that steals browser credentials and disables system security settings.
Pennsylvania State Education Association Data Breach Exposes Over 500,000 Individuals
Class Action Lawsuit Filed Over Delayed Response to Pennsylvania State Education Association Data Breach
Inside the Breach: What Recent Cyberattacks Reveal About Your Data Security
Cyberattacks are no longer rare shocks—they’re a constant drumbeat in the background of our digital lives. In this episode, we take you on a deep ...
MedEx Ambulance Data Breach: 118,000 Patient Records Exposed
MedEx ambulance service confirms a breach impacting 118,418 patients. Sensitive personal, medical, and financial data was exposed, adding to the expanding Landmark Admin data breach ...
Endue Software Data Breach Exposes Health Information of Over 118,000 Patients Across U.S. Infusion Centers
Endue Software confirms a breach impacting 118,000 individuals, with sensitive healthcare data compromised. The incident adds to ongoing threats across the U.S. healthcare sector.
4chan Offline After Cyberattack: Hackers Claim Full Admin Access and Leak Internal Data
4chan suffered a major cyberattack on April 14, 2025, with hackers leaking admin tools, emails, and source code while the site remains intermittently offline.
Skyward Specialty Insurance Data Breach Exposes Sensitive Information
Skyward Specialty Insurance Group reports a data breach involving unauthorized access to sensitive personal information, prompting investigations and notifications to affected individuals.
DaVita Confirms Ransomware Attack, Activates Containment Measures
DaVita, a major dialysis provider, confirmed a ransomware attack impacting operations. Patient care continues as investigations progress and potential links to the Landmark Admin data ...
Landmark Admin Data Breach: 1.6 Million Affected Individuals
Landmark Admin's data breach has expanded to affect over 1.6 million individuals, compromising sensitive personal information and prompting enhanced security measures.​
Inside Security News : GitHub Supply Chain Attacks, Ransomware Defense, and the Future of Cloud Security
In this deep-dive episode, we untangle some of today’s most critical cybersecurity threats—from GitHub’s complex quadruple supply chain attack to the rising concerns over Kubernetes ...
Hertz Data Breach: Customer Information and Driver’s Licenses Compromised in Cleo Zero-Day Attack
Hertz confirms a data breach exposing customer data due to Cleo zero-day exploits. Clop ransomware gang leaked some of the stolen information on their site. ...
B.C. Healthcare Data Breach Exposes 28,000 SINs; Leads to CRA Account Hacks and Identity Theft
A massive Interior Health data breach in B.C. exposed 28,000 Social Insurance Numbers, leading to hacked CRA accounts, identity theft, and fraudulent tax filings.
Planned Parenthood Data Breach Exposes Sensitive Information of 1.6 Million Patients Across 30 States
A data breach at a Planned Parenthood lab vendor exposed personal, financial, and health information of 1.6 million people across 30 states in October 2024.
Conduent Confirms Client Data Breach from January 2025 Cyberattack
Conduent confirms that client data was stolen during a January 2025 cyberattack, involving personal information of end-users. The company is notifying affected clients accordingly.
Qilin Ransomware Gang Claims Attack on SK Group, Steals 1TB of Corporate Data
Qilin ransomware gang claims responsibility for cyberattack on SK Group, stealing 1TB of data from the South Korean conglomerate with deep investments in U.S. industries. ...
Next.js Security Vulnerability: Middleware Bypass (CVE-2025-29927)
Is your web app truly secure? In this episode, we break down a critical NextJS vulnerability (CVE-2025-29927) that could allow attackers to bypass authentication and ...
Mercury Corp. Data Breach Exposes Personal Information of Thousands in Aerospace Manufacturing Sector
A cyberattack targeting Mercury Corp. exposed sensitive personal information of over 3,000 individuals, including Social Security and driver’s license numbers, in a one-day breach.
Hacker Forum ‘Cracked’ Resurfaces Online After FBI Seizure in Global Cybercrime Operation
Hacker forum Cracked is back online after an FBI takedown, reactivating its services under a new domain with a fresh admin and millions of users.
Wolters Kluwer Data Breach Claim Raises Alarms Across Fortune 500 Network
A hacker claims to have breached Wolters Kluwer, leaking sensitive contact data linked to Fortune 500 firms and global enterprises. The company is investigating.