Cyber Security
Cybersecurity
This Week In Cybersecurity: 9th December to 13th December
Krispy Kreme Cyberattack Disrupts Online Orders, Impacts US Operations Krispy Kreme confirmed a cyberattack on November 29, 2024, disrupting its ...
News
New IOCONTROL Malware Threatens Critical Infrastructure in Israel and the US
Iranian-linked hackers are using the newly discovered IOCONTROL malware to target critical infrastructure in Israel and the US, compromising IoT devices and SCADA systems. The ...
News
Byte Federal Data Breach Exposes Sensitive Information of 58,000 Users
A major Byte Federal data breach exposed the personal data of 58,000 users due to a GitLab vulnerability. The breach included sensitive information like names, ...
News
AWS Cyberattack Exposes Sensitive Data of Customers: Stolen Credentials Found in Plain Sight
A significant cyberattack exploited misconfigured AWS cloud instances, resulting in the theft of sensitive customer data, including credentials and API keys. The stolen information was ...
News
EagleMsgSpy Spyware Used by Chinese Police
Researchers uncover EagleMsgSpy, a sophisticated Android spyware developed by Wuhan Chinasoft and used by Chinese law enforcement to steal sensitive data from mobile devices, including ...
News
Data Breach Exposes 765,000 Senior Dating Website Users
A significant data breach at Senior Dating, a platform for users aged 40+, exposed the personal details of 765,517 individuals. The exposed data included email ...
Cybersecurity
Krispy Kreme Cyberattack Disrupts Online Orders, Impacts US Operations
Krispy Kreme Cyberattack: A Detailed Look at the Incident On November 29th, 2024, Krispy Kreme, Inc., the renowned American multinational ...
News
Artivion, Leading US Heart Surgery Device Maker, Crippled by Ransomware Attack
Artivion, a prominent heart surgery device manufacturer, suffered a ransomware attack on November 21st, causing operational disruptions and data theft. The incident involved file encryption ...
News
Equifax Data Breach Settlement Update Payments, Eligibility, and Identity Theft Recovery
The Equifax data breach settlement offers compensation and identity theft recovery services to affected individuals. Payments are expected in December 2024, with identity theft services ...
News
Children’s Hospital Colorado Hit with $500,000 Fine for HIPAA Violation Following Data Breach
Children's Hospital Colorado was fined $500,000 by HHS for HIPAA violations related to two data breaches in 2017 and 2020, impacting over 10,000 patients' protected ...
News
Amergis Healthcare Staffing Data Breach: Compromised Email Accounts Expose Sensitive Consumer Information
Amergis Healthcare Staffing, Inc. announced a data breach stemming from compromised email accounts, potentially exposing sensitive consumer information. The breach led to data breach notification ...
News
Electrica Cyberattack: Romanian Energy Giant Faces Ransomware Attack, Assures Customers of Safety
Romanian energy provider Electrica is battling a ransomware cyberattack, disrupting customer interactions but assuring critical systems remain unaffected. Authorities are investigating.
News
Data Breach Exposes 17,000 Hong Kong Residents’ Data; EMSD Violates Privacy Ordinance
The Office of the Privacy Commissioner for Personal Data uncovered a data breach by the Electrical and Mechanical Services Department (EMSD), exposing sensitive information of ...
News
Atrium Health Data Breach Impacts 585,000 Patients
Atrium Health, a major healthcare provider, has disclosed a data security incident affecting 585,000 individuals. The cyberattack compromised sensitive personal information, raising concerns about patient ...
News
Anna Jaques Hospital Ransomware Breach Exposes Data of 300K Patients
Anna Jaques Hospital, a Massachusetts-based healthcare provider, suffered a ransomware attack in December 2023, resulting in the exposure of sensitive data for over 316,000 patients. ...
News
This Week In Cybersecurity: 2nd December to 06th December
Alder Hey Cyber Attack: Two More Hospitals Fall Victim A significant cyberattack has disrupted Alder Hey Children’s Hospital and two ...
News
Chemonics 2023 Data Breach: 263,000 Individuals Affected
Major USAID contractor Chemonics suffered a 2023 data breach exposing the personal information of over 263,000 individuals, including Social Security numbers and biometric data.
News
Black Basta Ransomware Breaches BT Conferencing
BT Conferencing division was hit by a Black Basta ransomware attack, resulting in the immediate shutdown of affected servers. The attackers claim to have stolen ...
News
Deloitte Hacked: Over 1TB Stolen in Cyberattack
Deloitte UK faces a major alleged cyber incident, with the Brain Cipher ransomware gang claiming to have stolen over 1TB of data. The attack follows ...
Cybersecurity
Salt Typhoon: Chinese Hacking Group Behind Metadata Theft Targets US Telecoms
The US blames the Chinese hacking group, Salt Typhoon, for a massive metadata theft impacting US telecoms and government officials, prompting China's denial and accusations ...
TOP CYBERSECURITY HEADLINES
SECURITYWEEK INDUSTRY EXPERTS
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
Sorry, we couldn't find any posts. Please try a different search.
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Detection Tools
- Uncategorized
GitHub Supply Chain Attack Exposes Secrets in 218 Repositories
A GitHub Action supply chain attack exposed secrets from 218 repositories due to malicious code in tj-actions/changed-files, impacting popular projects and potentially causing further supply ...
WordPress Plugin WP Ghost Vulnerable to Critical Remote Code Execution Bug
Critical remote code execution vulnerability in WordPress plugin WP Ghost allows attackers to hijack servers. Urgent updates are required.
Network Security in a Digital World: Understanding and Mitigating Risks
The digital landscape is riddled with threats in modern networks. From malware and phishing to DDoS attacks and physical sabotage, the challenges are multifaceted. This ...
Critical Cisco Smart Licensing Utility Flaws Exploited in Attacks
Cisco's Smart Licensing Utility vulnerabilities CVE-2024-20439 and CVE-2024-20440 are now exploited, allowing unauthorized access through a backdoor admin account.
HellCat Hacking Spree Targets Jira Servers Worldwide
HellCat hackers are exploiting compromised Jira credentials in a worldwide hacking spree, targeting companies like Ascom and Jaguar Land Rover, stealing sensitive data including source ...
RansomHub Ransomware Leverages New Betruger Backdoor for Enhanced Attacks
RansomHub ransomware uses a new multi-function backdoor, Betruger, for enhanced attacks, streamlining the deployment process and minimizing detection.
Critical MegaRAC Bug Lets Attackers Hijack and Brick Servers
MI MegaRAC BMC vulnerability (CVE-2024-54085) lets attackers remotely hijack and brick servers, impacting numerous vendors and potentially causing significant damage.
No More Warnings? The Risks of Losing CIPAC’s Cyber Threat Coordination
The Department of Homeland Security (DHS) has abruptly shut down the Critical Infrastructure Partnership Advisory Council (CIPAC), the central hub for cybersecurity collaboration between the ...
517,000 Victims: How a Ransomware Gang Targeted Pennsylvania’s Largest Educators’ Union
Over 517,000 individuals are now at risk after the Pennsylvania State Education Association (PSEA) suffered a massive data breach in July 2024—claimed by the Rhysida ...
Veeam Backup & Replication Flaw Allows Remote Execution of Malicious Code
A critical vulnerability in Veeam Backup & Replication allows remote code execution, affecting various versions and posing significant security risks.
DollyWay: The 8-Year WordPress Malware Campaign Infecting 20,000 Sites
For nearly a decade, a malware campaign dubbed DollyWay has silently compromised over 20,000 WordPress websites, evolving from a ransomware and banking trojan distributor to ...
Microsoft Exchange Online Outage Impacts Outlook Web Users
A Microsoft Exchange Online outage severely impacted Outlook on the web users globally, causing login and access issues. Microsoft attributed the problem to a code ...
DollyWay Malware Campaign Compromises 20,000 WordPress Sites
The DollyWay malware campaign, active since 2016, has compromised over 20,000 WordPress sites, redirecting users to malicious sites and generating millions of fraudulent impressions monthly.
WhatsApp Patches Zero-Day Flaw Exploited by Paragon Spyware
WhatsApp has patched a zero-click vulnerability exploited by Paragon spyware, affecting journalists and activists globally, highlighting ongoing cybersecurity challenges.
Ukrainian Military Targeted in New Signal Spear-Phishing Attacks
krainian military personnel are facing sophisticated spear-phishing attacks using compromised Signal accounts to deliver Dark Crystal RAT malware. Urgent security updates are needed.
Arcane Infostealer Infects YouTube and Discord Users Through Game Cheats
The Arcane infostealer, a new malware, is stealing data from YouTube and Discord users via game cheats, targeting VPNs, messengers, and cryptocurrency wallets. Its sophisticated ...
Pennsylvania Education Union Data Breach Impacts 500,000 Individuals
he Pennsylvania State Education Association (PSEA) suffered a data breach exposing the personal information of over 500,000 individuals, including financial and health records. Rhysida ransomware ...
Ransomware Victims on Dark Web – 12th March, 2025
This report summarizes recent ransomware attacks across various sectors, detailing the victims, threat actors, and available information on the incidents. Due to the nature of ...
Ransomware Victims on Dark Web – 3rd March, 2025
This report summarizes recent ransomware attacks across various sectors, detailing the victims, threat actors, and available information on the incidents. Due to the nature of ...