The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Lately, we heard of the Mitsubishi data breach. Now, here is another Japanese firm making it to the news forJapanese Firm NEC Electronics Confirm Security Brea…
Following in the footsteps of their West Coast neighbors, Washington state legislators have introduced legislation to regulate consumer data privacy and the go…
LifeLabs, the largest provider of healthcare laboratory testing services in Canada, has suffered a massive data breach that exposed the personal and medical in…
Adding one more to the count of data breaches this year, now joins the cellular firm T-Mobile. Recently, T-Mobile hasT-Mobile Reveals A Security Breach Affecti…
The popular VPN provider, NordVPN, recently announced a server breach at a third-party data center. This breach has led many users to question what the best st…
The popular VPN provider, NordVPN, recently announced a server breach at a third-party data center. This breach has led many users to question what the best st…
ZoneAlarm, an internet security software company owned by Israeli cybersecurity firm Check Point Technologies, has suffered a data breach exposing data of its …
Extending the list of firms suffering a breach, now joins NordVPN. However, they didn't suffer any ‘direct’ security breach, ratherNordVPN Discloses Server Bre…
More deserialization flaws were discovered in jackson-databind relating to the classes in com.zaxxer.hikari.HikariConfig, com.zaxxer.hikari.HikariDataSource, c…
A threat actor used compromised identity and access management (IAM) credentials for a Qubole big data platform's AWS account to access and exfiltrate data fro…
Yonhap News reports: Korea’s state-run Financial Security Institute (FSI) reported a data leak following a hacking attack targeting its security assessment sys…
AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party clou…
Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases an…
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, userna…
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications.…
A vulnerabilitiy was discovered in git-annex, a tool to manage large files with git, without storing the file contents in git, which could result in data exfil…
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer dat…
The state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19.
Multiple Ontario Crime Stoppers organizations have suspended use due to Navigate360’s data breach and unacceptable incident response; U.S. state education depa…
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Th…
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it d…
In today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling personal…