A data breach affecting Pennsylvania’s largest workers and teachers’ union, the Pennsylvania State Education Association (PSEA), has exposed the personal...
The new recipients of 23andMe’s data would not necessarily have to offer consumers the ability to opt out once they take possession of it. And it remains unclear which (or how many) hands the data would wind up in, raising additional security as well as privacy concerns.
The Oracle Cloud attack is on pace to be one of 2025's biggest data breaches, possibly on the scale of the MOVEit breach if enough clients turn out to be impacted. However, Oracle has yet to publicly acknowledge it.
State-sponsored hackers from Russia, China, Iran, and North Korea are exploiting Windows shortcut files to execute malicious commands for cyber espionage.
The malware that the researchers were able to coax out of DeepSeek was rudimentary and required some manual code editing to make it functional. But the incident demonstrates that the guardrails preventing malicious behavior in generative AI systems remain thin.
Japanese telecom giant NTT Communications Corporation, the world’s fourth-largest telecoms company, has suffered a data breach that exposed nearly 18,000 corporate customers.
The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory on the Medusa ransomware attacks impacting over 300 critical infrastructure organizations.
The "day-to-day" of organized crimes is increasingly being moved online and optimized with AI-powered tools: things like communication, payments to partners, and recruitment of new operatives.
New York Attorney General Letitia James has sued insurance giant Allstate over two data breaches that exposed the driver’s license numbers of nearly 200,000 people.
A compromise of the popular GitHub Actions tool turned into a massive supply chain attack, at this point thought to be responsible for the follow-on exposure of over 23,000 GitHub repositories.
