government social media healthcare service provider fine education law enforcement finance dark web web retail phama app insurance security telecoms charity travel manufacturing operating system legal tech gaming publishing transport
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents hacking financial Trojans RDP inside job breached spear phishing
cyber attack breach notification privacy security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day spyware 3rd parties state hacking employee data remote working

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
Bombay High Court Issues Injunction Prohibiting Hackers From Publishing Allegedly Hacked HDFC Investor Data
PANOS GlobalProtect Authentication Bypass CVE20260257 Under Active Exploitation
Microsofts incident response is getting a failing grade from researchers
23andMe Sued by California Over Massive 2023 Data Breach
Kimsuky Deploys HTTPSpy Expands Arsenal with HelloDoor and VS Code Tunnels
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
What 2000 Exposed VibeCoded Apps Reveal About the Limits of Most Security Stacks
New RussiaLinked GREYVIBE Targets Ukraine with AIPowered Cyberattacks
Attackers Use LLM Agent for PostExploitation After Marimo CVE202639987 Exploit
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
California AG Bonta Sues Chrome Holding Co Formerly Known as 23andMe Over 2023 Data Breach
French Health Payments Breach Exposed ID Data Fuels Fraud Fears
Thousands of Oregon prison files accessed by prison worker
Google worker charged with using internal data to make 12m on bets
California Attorney General sues 23andMe successor for 2023 data breach
JINX0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware
New AI Usage Report Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI Power users
ThreatsDay Bulletin Claude Security Plugin Azure PrivEsc Kali365 MFA Bypass FIFA Scams 15 More
Microsoft Slams Public ZeroDay Disclosures Amid GitHub Researcher Account Removal
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Romanian National Sentenced for Selling Access to Networks of Oregon State Government Office
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
Gitea Vulnerability Exposes Private Container Images without Authentication
3 SOC Steps that Shut Down Incident Risks Early
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users
Lithuania investigates theft of 600000 state registry records
Malware seller known as Venom extradited to France
UK Visa Portal spilled thousands of applicants passports and selfies online and hasnt fixed the leak
Silent Ransom Group Impersonating IT Personnel through Social Engineering
NL Schiphol cargo worker arrested over alleged data leaks to drug networks
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
CERTIn Recommends 12Hour Patching for InternetFacing Flaws Amid AIAssisted Attacks
MFA Prompt Bombing Why Your Second Factor Isnt Saving You
Microsoft Patches SharePoint RCE Flaw CVE202645659 Across Server Versions
THN Webinar New AI DDoS Attacks Are Smarter Learn How to Fight Back