Germany's data protection authority has determined that Zoom's data transfers to the U.S. are in violation of the terms of the GDPR in light of the Schrems II ruling, and has issued a formal warning.
MiCODUS MV720 vehicle GPS tracker has sold some 1.5 million units across 169 countries and used in military vehicles, government cars, etc. Of the six serious vulnerabilities, one is a hard-coded password that allows anyone to send commands to the GPS units.
Crypto wallet Legder was hit by a third-party data breach stemming from an external payment processor, Global-e, exposing the personal information of some customers.
UK retailer Harrods is the most recent victim of a cyber attack, hot on the heels of similar cybersecurity incidents affecting Marks & Spencer and the Co-op, prompting an NSCS advisory.
Harvard University and Envoy, an American Airlines subsidiary, have confirmed data breaches linked to a zero-day vulnerability CVE-2025-61882 in Oracle’s E-Business Suite software.
Have I Been Pwned? (HIPB) has added 244 million freshly stolen passwords compromised via infostealer malware to an already existing list of 199 million, impacting 284 million unique user accounts.
Hackers compromised streaming giant HBO’s Reddit account to deliver ClickFix malware targeting both Windows and macOS in PasteSwitch social engineering campaign.
A hacker has stolen the patient info records of at least 11 million individuals in a massive HCA Healthcare data breach and leaked samples on an underground hacking forum.
A health data breach appears to have exposed the sensitive personal information of members of Congress and their employees. DC Health Link is used by many (but not all) members and their assorted staff.
A major data breach at health insurance giant Blue Shield of California appears to be a case of misconfiguring advertising analytics tools. Between April 2021 and January 2024, Google Analytics was misconfigured causing some personal information and potentially sensitive health data related to claims and searches to be available to Google’s ad network.
