Google Threat Intelligence Group is now reporting "multiple intrusions" at US-based insurance firms by Scattered Spider, which in some cases has caused outages and business disruptions.
A new set of 16 billion login credentials is not an intentional public leak or data breach. It was accidentally exposed to the internet via improperly secured Elasticsearch and object storage instances for a short period, but long enough for security researchers to hit upon it.
Car-sharing giant Zoomcar has disclosed a data breach that impacted approximately 8.4 million people after a threat actor contacted the company claiming to have accessed its data.
Users of Meta AI may have been ambushed by the fact that no other chatbot offers anything quite like its chat-sharing Discover feed, and that it seems such a privacy-invasive idea that it is baffling a major company would actually include it at all let alone as a standard opted-in feature.
Amazon’s Whole Foods distributor, United Natural Foods Inc. (UNFI), suffered a cyber attack that forced the company to shut down some IT systems, disrupting operations, including ordering and distribution.
A new and wide-ranging cybersecurity executive order from the Trump administration rolls back some Biden- and Obama-era directives and looks to steer government cyber defense efforts to "identifying and managing vulnerabilities, rather than censorship."
Android user web browsing data may have been provided to Meta and/or Yandex due to a "loophole" in the operating system's loopback interface, regardless of the use of "incognito mode" or any other common privacy protections that would otherwise thwart user tracking.
The UK data adequacy decision was slated to expire this month, but recently received a six-month extension approval from the EDPB. The civil society groups are calling for withdrawal of this extension if the UK government does not ensure an equivalent level of data protection.
The CISA 2026 budget cuts would be accompanied by a reduction of 1,083 CISA positions, a cut of almost a third of its present count of 3,292 employees. The Cyber Defense Education and Training program would also be gutted, with the budget proposal suggesting that it could be replaced by free resources.
Google warns Salesforce customers about vishing attacks by hackers impersonating IT support to lure employees into connecting a rogue app, exfiltrate data, and demand ransom.
