The sensitive personal and financial information of 672,075 people was compromised during the August 2025 Marquis cyberattack, which was previously misattributed to a Russian ransomware gang.
A security flaw at the U.K.’s business registry, Companies House, exposed the personal information of business executives and allowed unauthorized alteration.
DarkSword packs both a complete iOS exploit chain and infostealer into one package. The chain initiates when Safari opens a malicious webpage with a hidden iframe that springs the malware from the WebContent sandbox. It then works its way into deploying a number of custom payloads designed to tap into various vital and privileged iOS services.
A massive data breach has affected business process outsourcing giant TELUS Digital, leaking nearly a petabyte of data, with the hacking group ShinyHunters taking credit.
Starbucks has confirmed a data breach that leaked the personally identifiable information of its employees after a threat actor breached its business partner’s portal.
A whistleblower said that Solly asked them for help in transferring purloined social security data from a thumb drive to a personal computer and "sanitizing" it before uploading it to Leidos.
A joint operation by Meta and law enforcement authorities from 10 countries has taken down 150,000 scam accounts and nabbed 21 suspected masterminds of online fraud.
A cyber attack that continues to impact the Stryker medtech group's business operations as of this writing has been linked to a pro-Palestine hacking group thought to be supported by the Iranian government.
Government officials and employees, military members, and journalists the world over are being advised by the Dutch Ministry of Defence that Russian state-backed hackers are engaged in a broad campaign targeting their WhatsApp and Signal accounts.
The Trump Cyber Strategy is broken into six policy pillars meant to guide development of more specific measures and their future implementation. Each of these outlines consists of only one to two paragraphs without a large amount of specifics, making it a shorter and somewhat vaguer document than similar cyber policies laid out by prior administrations.
