Recent disclosure reveals the EU parliament suffered a major data breach exposing sensitive data of over 1,200 elected members of the European Parliament alongside 15,000 other accounts of EU affairs professionals.
A credential stuffing attack on biotechnology firm 23andMe has resulted in a data theft incident exposing millions of genetic profiles and personal data records.
OpenAI is promising enhanced security safeguards and a pause on development for a period of "reinforcement" after internal findings indicate its upcoming model Astra has crossed "critical cybersecurity capability" thresholds.
New report from DataVisor reveals cybercriminals are increasingly targeting mobile channels to commit fraud, with 90% of mobile fraud originating from Android devices.
The case began with a probe opened by an assortment of state attorneys general in 2018 in response to consumer complaints. The investigation found that Google had been misleading about its use of location tracking dating back to at least 2014.
Hackers injected malicious code into nearly a dozen 20 NPM packages with billions of weekly downloads in a software supply chain attack after phishing a maintainer’s account.
GitHub says that the OAuth tokens were not stolen via a breach of its own systems, but that dozens of private repositories were accessed. OAuth tokens that were issued to two third-party integrators, Heroku and Travis-CI.
A massive data breach has affected business process outsourcing giant TELUS Digital, leaking nearly a petabyte of data, with the hacking group ShinyHunters taking credit.
Leading data breach cross-checking service Have I Been Pwned has added about 71 million email addresses from "Naz.API," a new dataset circulating on the dark web that contains a massive collection of leaked credentials and plaintext passwords.
The fitness tracking app Strava may have inadvertently compromised not only classified locations, but the movement of personnel over extended periods of time. Surveillance campaign on Israel's military uncovered.
