A Texas man who admitted to being a member of the notorious cybercrime group Scattered Spider has been sentenced to serve nearly three years in U.S. federal prison.

Cyber extortion group ShinyHunters claims to have breached FBI systems and stolen employees' personal data, threatening its release unless. DataBreachToday

Migrating to post-quantum cryptography might sound fine in theory, but can organizations procure the new hardware they need, and from a trusted supplier? Answering

President Donald Trump says he is forming an "AI Force" modeled on Space Force and will soon name an AI czar. The announcement came with no mission,

When hackers triggered cascading disruptions to European air travel in fall 2025, none of the affected countries - including Germany, Belgium and Ireland -

Russian cyber extortion group Cl0p appears to be under fire from Western rival ShinyHunters, which defaced Cl0p's data-leak site, dropped names of the group's alleged members, and demanded a large ran...

The Coast Guard and FBI boarded two foreign oil tankers bound toward Texas after signs their networks were compromised, inspecting IT and operational systems as

Two previously unknown vulnerabilities in TP-Link's best-selling home security camera could open the door to attacker exploitation and compromise other network

Iranian state hackers are steering dissidents, activists and journalists away from corporate devices and onto personal computers to plant spyware that can capture

Discourse about the potential of unchecked AI systems and frontier labs' ability to control rogue AI agents culminated in several AI executives calling for slower

Personally identifiable information for multiple cryptocurrency industry figures was targeted and stolen by the threat actor who hacked payments platform Revolut,

British lawmakers are calling for new legislation to address the threat AI may pose to human rights, including demands that the riskiest systems clear regulatory

Attackers are actively targeting a recently patched vulnerability in the popular DevSecOps platform GitLab that they can exploit to steal data and credentials from

Digital financial platform Revolut is notifying customers that it suffered a data breach exposing their personal details after it fell for an official-looking

Finnish authorities issued a European Arrest Warrant for convicted Vastaamo hacker Aleksanteri Kivimäki after he failed to return to prison, widening the search

A U.S. court sentenced Ukrainian national Oleksii Lytvynenko to four years in prison after he admitted developing malware and stealing data for Conti, the

Cyber extortion group FulcrumSec continues to find hardcoded credentials in public-facing IT infrastructure and exploit them as part of what it's dubbed a

Latvian router-maker MikroTik has issued emergency patches in the face of in-the-wild "MikroTrick" attacks that chain together exploits for two zero-day

This week: a massive breach of U.S. driver's licenses, Dropbox accounts breached, a BGP hijack, Artifactory flaw, Russian national indicted, Aesto health breach, a

Rotting "old mental health" records stored on paper "contaminated by animal droppings" and left in abandoned psychiatric hospitals in Ireland

Open-source framework Langflow, designed to build artificial intelligence agents and workflows, is under fire again, with attackers now wielding exploit code for a

Print management software vendor PaperCut published two emergency patches as it battles attackers actively exploiting zero-day vulnerabilities in widely used

The U.S. Department of the Treasury launched a public-private Quantum-Readiness Task Force to move banks, market infrastructures and their vendors toward

The U.S. Department of the Treasury launched a public-private Quantum-Readiness Task Force to move banks, market infrastructures and their vendors toward

A cyberattack this week that disrupted medical technology maker Boston Scientific's global operations is disrupting remote monitoring capabilities of some of its

DaVita, which operates more than 3,000 kidney dialysis centers in the United States and 14 other countries, has agreed to pay $15 million to settle proposed class

The U.S. federal judge told the Department of Defense to cancel the supply chain designation it levied against Anthropic in a decision giving the artificial

Attackers' operational security fails reveal they're increasingly wielding artificial intelligence tools in semi-autonomous ways to help them conduct reconnaissance

Eight U.S. senators are demanding answers from the U.S. State Department about why the government is requiring that American officials have direct access to the

A 14-count superseding indictment unsealed Tuesday charges 17 members of the Mabna Institute with stealing more than 31 terabytes of research and intellectual

More than three weeks after a wave of likely Iranian cyberattacks struck dozens of rural and small town water and wastewater utilities in at least 12 states,

OpenAI announced it slowed model development, including starting a two-week pause in reinforcement learning training for its frontier models, as it reassesses its

Russia-linked Clop claims it stole databases, engineering files, backups and other sensitive corporate data from more than 40 organizations in a breach wave tied to

Seven Ukrainian civilians have asked a court in New York to order a US manufacturer to pay them more than $75 million, claiming the company has not done enough to prevent its technology from being…

Hacked websites and internet-connected devices in Europe are serving as cyberespionage launchpads for Russia's ongoing war against Ukraine, security experts warn.

Security researchers reproduced ShieldBreak, a claimed Windows Defender zero-day that manipulates cloud hydration and privileged Windows processes to place

Extortion gang Fulcrumsec has leaked on its dark web site a second large cache of data it allegedly stole in a June attack on Novo Nordisk. The latest data dump

This week, Harmony and BTCPay hacked, violent crypto thefts surged, the U.S. CFTC filed a $48 million fraud case, an NFT founder charged, North Koreans used

A Canadian hospital is dealing with a ransomware attack on its facility management systems that has reportedly affected its doors and heating, ventilation, and air

This week: An evil twin attack on a Delta flight, the LiteLLM attack exposed 430,000 pipelines, Russian hackers targeted Ukrainian IT workers with fake job

The White House, in a major expansion of how it works with the private sector, has launched a program to engage private cybersecurity firms to conduct cyber

Boston-based Rapid7 will cut roughly 314 jobs, or 12% of its workforce, as new CEO Wael Mohamed restructures the managed cybersecurity operations vendor to raise

French AI company Mistral is expanding its sovereign AI strategy in Europe with regional inference, access to third-party open-weight models and plans to add 1

Critical infrastructure organizations running unpatched firewalls and VPN gateways - including Fortinet gear not updated since early 2025 - and getting hit hard by

A federal court last week approved stringent security requirements on how plaintiffs' attorneys and experts must safeguard a copy of stolen data that Change

Microsoft says China-linked Storm-1175 is exploiting N-able N-central authentication bypass CVE-2026-18577 to gain administrative RMM access, pivot into managed

A fresh cybercrime group called ExfilSquad, which recently debuted with a data-leak site listing over a dozen victims, has begun leaking large quantities of stolen

Software developer N-able issued a second hotfix this week after more zero-day exploits against its remote management and monitoring tool. Successful attacks