Advertisement
Xandr Fined Record €8.6M for Relaying Grindr Data
Norwegian DPA fines Microsoft-owned Xandr a record €8.6 million for illegally relaying Grindr users' sensitive sexual orientation data.
Ransomware Disrupts Japan's IDCF Cloud, Affecting Gov't Clients
IDC Frontier's IDCF Cloud suffered a ransomware attack impacting its East Japan Region 1, disrupting services for 495 companies and local governments.
MonsterCloud CEO Charged in Secret Ransomware Payment Scheme
MonsterCloud CEO Zohar Pinhasi was indicted for allegedly defrauding ransomware victims by secretly paying cybercriminals for decryptor keys.
Georgia Power, Alabama Power Data Breach: 400,000 Accounts Hit
Southern Company's Georgia Power and Alabama Power data breach exposed names, addresses, emails, and partial SSNs of 400,000 customers.
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Details on the arrest of suspected ShinyHunters leader 'Rey' in Jordan following extortion attempts against a Boeing spin-off.
Arizona Court System Breach: 1.3 Million Records Stolen via Phishing
A phishing attack led to the theft of personal data for over 1.3 million individuals from Arizona's court system, including sensitive protection orders.
Advertisement
FBI Data Breach: Missed Patch on PeopleSoft Exposes Employee Data
A critical patch failure on an Accenture-managed Oracle PeopleSoft system led to a data breach, exposing FBI employee information to ShinyHunters.
Denmark Population Registry Data Breach: 8.8M Records Exposed
Denmark's Central Population Register reports a data breach affecting 8.8 million individuals, exposing names, addresses, and CPR numbers.
ShinyHunters Hacker Detained in Jordan, Cooperating With FBI
A suspected ShinyHunters hacker known as Rey was detained in Jordan and is cooperating with the FBI, impacting the extortion group's infrastructure.
DTU Data Breach Exposes 200,000 User Records via IAM Compromise
The Technical University of Denmark (DTU) reports a data breach affecting up to 200,000 users, exposing sensitive data including CPR numbers.
Frontline Education Data Breach: School Employee SSNs Exposed
Frontline Education confirms a data breach exposed school district employee Social Security numbers, emails, and addresses via a third-party software vulnerability.
OpenAI Safety Researchers Fired Over Confidential Data Leak
OpenAI fires three safety researchers for leaking confidential infrastructure details to an outside group amid growing scrutiny of AI agent safety.
Cisco Talos Newsletter: Frustrating Adversaries and Security Updates
Read the latest Threat Source newsletter by Cisco Talos, featuring adversary frustration tactics and weekly cybersecurity news summaries.
Mathspace Breach: Over 1 Million Impacted by Metabase Zero-Day
Mathspace disclosed a data breach affecting over 1 million students, staff, and parents due to a Metabase vulnerability.
CVE-2026-63077: JetBrains Cadence Breach Exposes Credentials
JetBrains Cadence suffered a data breach via unpatched TeamCity (CVE-2026-63077), exposing AWS credentials, source code, and user data. Immediate action required.
IDScan Sued Over Alleged Breach Impacting 153 Million Drivers
IDScan faces lawsuits after a dark-web service allegedly offered to sell 153 million driver's licenses and millions of other identity documents.
ShinyHunters: Dark Reading on Potential ReliaQuest Breach
Dark Reading editors discuss the latest activities of the ShinyHunters threat group, including inquiries into a potential breach affecting ReliaQuest.
French Hospital Fined €500K for GDPR Data Breach
France's CNIL fined Hôpital privé de la Loire €500,000 after a data breach exposed sensitive medical data of 727,000 patients.
Manchester Airports Group Data Leak Exposed by FulcrumSec Extortion
FulcrumSec leaks 550GB of data on 8.8 million individuals after Manchester Airports Group refused to pay a ransom demand following a breach.
Philippines Nuclear Agency Breached via Unpatched ownCloud Flaws
Threat actors exploit unpatched ownCloud vulnerabilities to breach the Philippines nuclear agency, stealing sensitive databases and credentials.
Dark Web Service Nexus Sells 153M+ Driver Licenses
A new dark web service, Nexus, is selling over 153 million drivers' licenses from North America, likely sourced from an identity verification company.
Nutex Health Suffers Data Breach, Sensitive Data Exfiltrated
Nutex Health experienced a data breach exposing patient, employee, and operational data. The company is assessing the full impact.
Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
Researchers discover cryptographic context injection, a novel technique bypassing AI safety filters in xAI Grok and Google Gemini using encryption.
Hundreds of Leaked AWS Keys Expose Corporate Cloud Accounts
Research reveals over 9,000 publicly exposed Amazon Web Services access keys remain active, including hundreds of root and administrator credentials.