A software security flaw in PayPal’s loan app leaked customer data for 6 months, forcing the payment giant to issue refunds after unauthorized transactions occurred in some affected accounts.
A long-term Chinese cyber espionage operation that has been active since at least 2017 and has a count of at least 53 victims has been substantially disrupted, according to the Google Threat Intelligence Group (GTIG) and Mandiant.
A security breach at France’s national bank registry has compromised the personal information of 1.2 million people, after a threat actor downloaded a database containing the information of all bank accounts in the country.
An INTERPOL-led law enforcement operation across 16 African countries has nabbed 651 suspects linked to online scams targeting victims across the continent and worldwide.
Microsoft has downplayed the issue in official communications, stating that the summaries of the confidential emails were not exposed to anyone that did not already have access to the messages in question. There is always some concern about exactly where information goes once AI tools have ingested it, however.
A new study from ETH Zurich is causing some serious re-evaluation of the use of cloud-based password managers, as the researchers found an assortment of vulnerabilities in three of the most popular choices. This range of vulnerabilities make a similar range of known attacks possible, up to a dozen with the most readily compromised option.
Figure Technology Solutions, a fintech company specializing in blockchain lending, borrowing, and trading, was hit by a data breach that leaked the PII of nearly a million people.
A data breach at luxury performance outerwear and clothing giant Canada Goose has exposed 600,000 customer records, including personal and partial payment information.
A new report from Google Threat Intelligence Group (GTIG) and Mandiant warns of a zero-day vulnerability present in Dell RecoverPoint for Virtual Machines since 2024, and that has been actively exploited by Chinese hackers for at least that long.
A cyber attack on the largest telecommunications service provider in the Netherlands, Odido, has leaked the personal information of over 6 million customers.
