Cyber Security
News
Alder Hey Cyber Attack: Two More Hospitals Fall Victim
A major cyberattack has crippled Alder Hey Children's Hospital and two other NHS trusts, disrupting services and raising serious concerns about patient data security. The ...
News
Cloudflare Cyber Attacks Surge: Developer Domains Exploited for Phishing and DDoS
Cybercriminals are increasingly abusing Cloudflare's 'pages.dev' and 'workers.dev' domains for malicious activities, leading to a significant surge in phishing and DDoS attacks. The abuse has ...
News
Costa Rica Ransomware Attack Cripples State Energy Company RECOPE
A ransomware attack targeting Costa Rica's state-owned energy provider, RECOPE, forced manual operations and prompted the urgent deployment of US cybersecurity experts to restore critical ...
News
Vodka Maker Stoli Files for Bankruptcy After Ransomware Attack
Vodka maker Stoli Group's US operations filed for bankruptcy after a devastating August ransomware attack crippled its systems and Russian authorities seized its remaining distilleries.
News
Rogers and Yahoo Data Breach Settlement: $20 Million Class Action – Are You Eligible?
Canadian Yahoo and Rogers Yahoo email users affected by data breaches between 2013 and 2016 can claim a share of a $20 million settlement. The ...
News
Bologna FC Data Breached as Serie A Club Confirms RansomHub Ransomware Attack
Serie A club Bologna FC confirmed a ransomware attack resulting in a major data breach, exposing sensitive player information, financial records, and strategic documents. The ...
News
ENGlobal Cyberattack: Major Energy Contractor Hit by Ransomware
ENGlobal Corporation, a major energy industry contractor, suffered a ransomware attack on November 25th, 2024, encrypting data and limiting access to IT systems. The impact ...
Cybersecurity
Colonial Behavioral Health Files Data Breach Notice: October 2024 Incident Impacts Consumer Data
Colonial Behavioral Health's October 2024 data breach exposed sensitive consumer information, including Social Security numbers and medical records. The ransomware attack, discovered in late October, ...
News
Veterans Health Administration Cyberattack Compromises Thousands of Veterans’ Records
Veterans Health Administration cyberattack exposed personal information for 2,302 veterans, including medical records and social security numbers. The VHA is taking steps to mitigate the ...
News
Alder Hey Children’s Hospital Data Breach: INC Ransomware Leaks Sensitive Patient Data
Alder Hey Children's Hospital suffered a major data breach, with ransomware gang INC leaking patient data. The NCA and NCSC are investigating, while Alder Hey ...
Cybersecurity
This Week In Cybersecurity: 25th November to 29th November
Andrew Tate’s Real World Hacked: 800,000 Users Exposed in Andrew Tate leaks The Real World platform, previously Hustler’s University, faced ...
News
OnePoint Patient Care Breach: 800,000 Patients Affected, Law Firm Launches Investigation
nePoint Patient Care (OPPC) experienced a data breach affecting nearly 800,000 customers. Sensitive personal and protected health information was compromised, prompting an investigation by Levi ...
News
WUTH Cyberattack Forces UK Hospital Network to Postpone Procedures
The cyberattack on Wirral University Teaching Hospital (WUTH), part of the NHS, has resulted in the postponement of numerous procedures and widespread service disruption across ...
News
HDFC Life Insurance Data Breach: HDFC Life Insurance Confirms Data Leak, Launches Investigation
HDFC Life Insurance confirms a data breach involving customer information. An investigation is underway to determine the extent of the breach and implement remedial ...
News
GoodSmile Data Breach: Customers Report Credit Card Theft After Security Compromise
Good Smile Company's US store suffered a data breach, resulting in customer credit card theft. The company remains silent, prompting concern and calls for immediate ...
News
Andrew Tate’s Real World Hacked: 800,000 Users Exposed in Data Breach
Andrew Tate's Real World, formerly Hustler's University, suffered a major data breach exposing nearly 800,000 users. Learn about the hack, the leaked data, and how ...
News
RansomHub Cyberattack: Coppell, Texas, and Minneapolis Agency Targeted
RansomHub's ransomware attacks crippled Coppell, Texas, and the Minneapolis Park and Recreation Board, causing widespread system outages and potential data breaches.
News
Starbucks Cyberattack Leaves Workers Facing Pay Issues and Frustration
A ransomware attack on a Starbucks software vendor has caused widespread payroll problems for Starbucks employees, leaving many baristas struggling with delayed and potentially inaccurate ...
Cybersecurity
LifeLabs Data Breach Report Finally Public After Four-Year Legal Battle
After a four-year legal battle, the report on the 2019 LifeLabs data breach, affecting millions of Canadians, has been released, detailing security failures and the ...
News
Microsoft 365 Outage: Service Disruption Impacts Exchange Online, Teams, and SharePoint
Microsoft 365 outage severely impacted Exchange Online, Teams, and SharePoint, causing widespread disruption for users globally. Microsoft acknowledged the issue and deployed a fix, but ...
TOP CYBERSECURITY HEADLINES
SECURITYWEEK INDUSTRY EXPERTS
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
Sorry, we couldn't find any posts. Please try a different search.
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Detection Tools
- Uncategorized
Qilin/Agenda Ransomware: The Credential Stealers
Overview The Qilin ransomware group, also known as Agenda, is a Russia-based ransomware-as-a-service (RaaS) operation active since at least July 2022. Initially operating under the ...
MegaRAC CVE-2024-54085 Vulnerability: Critical BMC Flaw Threatening Data Centers
A newly discovered critical vulnerability (CVE-2024-54085) in AMI’s MegaRAC Baseboard Management Controller (BMC) software puts thousands of servers at risk—including those from HPE, Asus, and ...
California Cryobank Data Breach Exposes Sensitive Customer Information
California Cryobank, a major US sperm bank, suffered a data breach exposing customer names, bank details, Social Security numbers, and more. The company is offering ...
GitHub Action Hack May Cause Another Supply Chain Attack
A cascading supply chain attack, starting with a GitHub Action hack, exposed CI/CD secrets across 23,000 repositories, highlighting vulnerabilities in third-party code reliance.
Western Alliance Bank Data Breach Impacts 21,899 Customers
Western Alliance Bank suffered a data breach impacting 21,899 customers, exposing sensitive personal and financial information due to a third-party vendor's software vulnerability exploited by ...
11 State-Sponsored Hacking Groups Exploit Windows Zero-Day Exploit
A critical Windows zero-day exploit, ZDI-CAN-25373, has been exploited by 11 state-sponsored hacking groups since 2017, enabling data theft and espionage. Microsoft initially declined to ...
Microsoft Windows March Update Wipes Out Copilot
Microsoft’s latest Windows 10 and 11 updates (KB5053598 and KB5053606) have accidentally uninstalled Copilot, the AI assistant, from some users’ systems—leaving many relieved rather than ...
$6.1 Million Crypto Stolen in WEMIX Hack
WEMIX, a blockchain gaming platform, suffered a $6.1 million crypto theft. Hackers stole authentication keys, planning the attack for two months before executing 13 successful ...
The Mirai Botnet: The Infamous DDoS Weapon
The Mirai botnet, a notorious piece of malware, launched devastating DDoS attacks in 2016. This blog post delves into its origins, spread, impact, and the ...
StilachiRAT Malware Steals Crypto Using Advanced Reconnaissance
Microsoft discovered StilachiRAT, a new RAT malware using sophisticated techniques to steal cryptocurrency and perform reconnaissance. Its advanced evasion capabilities make proactive defense crucial.
GitHub Action Supply Chain Attack Exposes CI/CD Secrets
A supply chain attack on the popular tj-actions/changed-files GitHub Action exposed CI/CD secrets. Attackers compromised a PAT, impacting 23,000 repositories. GitHub has since removed the ...
Critical Apache Tomcat Flaw Actively Exploited in Attacks
Critical Apache Tomcat RCE vulnerability (CVE-2025-24813) is actively exploited, allowing attackers to take control of servers via simple PUT requests. Immediate patching is crucial.
Fake “Security Alert” on GitHub Used to Hijack OAuth App Accounts
A massive GitHub phishing campaign uses fake "Security Alert" issues and a malicious OAuth app to hijack accounts, granting attackers full control. Immediate action is ...
Lingnan University Suffers Cybersecurity Breach: Sensitive Data Exposed
Lingnan University in Hong Kong suffered a data breach exposing thousands of records, including sensitive personal data. The university is taking steps to enhance security.
Hackers Flip the Script: How a Fake Coinbase Email Could Empty Your Wallet
A new and incredibly deceptive phishing campaign is targeting Coinbase users—but this isn’t your typical scam. Instead of stealing your recovery phrase, attackers are handing ...
Florida Hospital Data Breach Impacts Over 120,000 Patients
A Florida hospital, CDH, suffered a data breach impacting over 120,000 patients. Sensitive data, including Social Security numbers and health information, was compromised. The BianLian ...
Brute-Force on Autopilot: Black Basta’s ‘BRUTED’ VPN Tool for Ransomware Expansion
Black Basta, one of the most notorious ransomware gangs, has taken brute-force attacks to the next level with BRUTED—an automated framework designed to breach VPNs, ...
GitHub Action Hijacked: The Supply Chain Attack That Exposed 23,000 Repositories
In this episode, we unpack a major supply chain attack that compromised the widely used GitHub Action ‘tj-actions/changed-files’, affecting over 23,000 repositories. Attackers injected malicious ...
BlackBasta Ransomware Uses Automated Tool ‘BRUTED’ to Brute-Force VPNs
The BlackBasta ransomware group uses an automated tool, BRUTED, to brute-force VPNs and firewalls, highlighting the need for robust multi-factor authentication.