Hackers injected malicious code into nearly a dozen 20 NPM packages with billions of weekly downloads in a software supply chain attack after phishing a maintainer’s account.
Meta warns that a WhatsApp vulnerability on Apple devices allowed hackers to target some users with zero-click spyware. WhatsApp describes the zero-day vulnerability as “incomplete authorization of linked device synchronization messages.
Qantas has announced a new compensation policy that reduces executive bonuses for the CEO and their team when damaging cybersecurity incidents take place. The recent data breach will cost Qantas CEO Vanessa Hudson AUD 250,000 of her expected total annual compensation of AUD 6.3 million.
A cyber attack has caused severe operational disruptions across Jaguar Land Rover facilities, affecting production, sales, parts supplies, and auto repair workshops.
Disney has settled accusations of violating federal children’s privacy rules preventing the collection of personal data of internet users under the age of 13, and the outcome builds on the terms of a prior 2019 FTC settlement involving Google that set new requirements for parental consent on YouTube.
Popular "fast fashion" app Shein has landed in some regulatory trouble in the EU, as France's data regulator CNIL has issued a €150 million GDPR fine due to failure to obtain cookie consent.
Google is facing a €325 million fine from French data regulator CNIL for its placement of cookies that may not have been noticed by those signing up for new accounts and its use of ads in Gmail.
SK Telecom was hit with a record $97.2 million (KRW 134.8 billion) data breach fine for failing to stop the April 2025 cyber attack that leaked the sensitive SIM-related information of 23.2 million people.
An as-of-yet undiagnosed compromise of the Salesloft Drift AI-driven platform has led to a rash of stolen OAuth tokens, in turn creating downstream breaches at some of the biggest names in the cybersecurity industry.
Credit monitoring giant TransUnion has suffered an apparent Salesforce data breach, affecting over 4.4 million people, with ShinyHunters claiming responsibility.
