The U.K.’s Information Commissioner’s Office (ICO) has fined outsourcing firm Capita £14 million ($18.8M) for its alleged failure to prevent a data breach that compromised the personal information of millions of people.
Spanish multinational fashion retailer MANGO has recently experienced a third-party data breach that exposed customer information from a marketing partner.
F5 has disclosed that an August breach exposed source code and customer data to what it calls "nation-state hackers." The company has not made an official attribution, but third-party security researcher sources are linking the attack to China's UNC5221.
A data breach affecting American medical imaging provider SimonMed Imaging has leaked the personal information of 1.2 million people. SimonMed learned of the data breach on January 7 after a third-party vendor reported malicious activity on its network.
The 2025 UK report is composed of 1,727 tips on cyber incidents over the course of the year that developed into a total of 429 cases that involved intervention by the NCSC IM team. The share of incidents ranked as "nationally significant" jumped from 89 in the prior year to 204 in the current one.
Microsoft warns of social engineering attacks dubbed “payroll pirates” resulting in lost wages after hackers divert employees’ earnings to threat actor-controlled bank accounts.
A third-party data breach has leaked personal information, including government IDs, from the messaging app Discord after threat actors breached a customer support vendor.
The endgame for AI chatbots was always integration of targeted ads, but Meta plans to do more than make Meta AI just another arm of its internet-spanning data collection network. The plan is for the chatbot to eventually function as a shopping assistant that can search for products and put them into shopping carts.
Daily fantasy sports and gambling platform DraftKings has confirmed that numerous user accounts were compromised following a series of credential stuffing attacks.
Security researchers at Wiz Research have discovered a critical vulnerability in the Redis in-memory database that could allow an attacker to gain remote code execution (RCE) capabilities and take over the host.
