Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phishing attack that gave attackers access to its network. [...]
It's unclear why Klue had not revoked the credential after the limited pilot, which hackers then used to breach a system holding keys for accessing customers' data.
The private events group, cofounded by Peter Thiel, says a “criminal” hacker is behind a breach that exposed members’ personal details. WIRED found no evidence a break-in was needed to access the files.
"The timeline is not years, it is months,” the nations of the Five Eyes intelligence alliance said in a joint alert about the cybersecurity concerns of artificial intelligence.
lso Tuesday, the Treasury Department took action against the same Cambodian company, Huione Group, and affiliates.
The post Justice Department seizes infrastructure used by cyber scam and criminal marketplace appeared first on CyberScoop.
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files. [...]
The new post-quantum executive order sets a 2030 migration deadline and establishes a powerful foundation for post-quantum resilience. We look at what it gets right, where it can go further, and our migration playbook for government and industry.
US President Donald Trump on Monday signed a pair of executive orders aimed at accelerating the federal government’s transition to post-quantum cryptography while expanding US investment in quantum technologies, establishing what the administration describes as a coordinated s...
It was discovered that the urllib3 Python HTTP library didn't sanitise some cross-origin redirects, which could result in information disclosure. For the stable distribution (trixie), this problem has been fixed in version 2.3.0-3+deb13u2.
A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesting operation known as FortiBleed that has targeted over 430,000 FortiGate firewalls globally.
The campaign, active since February 2026, involves collecting credential li...
Plus more blasts from the past: NetWare, FTP, and HTTP
The Department of Justice announced the “seizure of a cloud computing account” used by subsidiaries of the Huione Group, a conglomerate severed from the U.S. financial system last year.
Cybercriminals are using a PowerShell script to hijack Telegram sessions and gain access to users’ accounts without a password or verification codes.
Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset.
The post Dragos Unveils AI for OT Security appeared first on SecurityWeek.
An executive order signed Monday aims to accelerate the government's transition to post-quantum cryptography (PQC), a new generation of encryption designed to protect data from the powerful quantum computers expected in the future.
Four flaws in Dify exposed cross-tenant data, documents and AI conversations. Two critical bugs enabled unauthenticated access and data theft. Zafran Labs researchers disclosed four vulnerabilities in Dify, the open-source AI platform used by major companies like Volvo and Maersk to run over a milli...
L'autorité italienne de protection des données (Garante per la protezione dei dati personali - GPDP) a aujourd'hui publié une décision de sanction à l'encontre de la société Action Fit, comprenant le prononcé d'une amende de 3 930 €, pour des manquements liés à l'envoi de communications commerciales...
What did the Proton team learn at Infosecurity Europe 2026? Find out our key observations and takeaways from the conference
L'Office du Commissaire à l'Information (ICO) a annoncé l'entrée en vigueur de nouvelles obligations légales pour toutes les organisations au Royaume-Uni concernant le traitement des réclamations en matière de protection des données.Depuis le 23 juin 2026, toutes les organisations sont tenues de fou...
Le Bureau du Commissaire à l'information (ICO) du Royaume-Uni a sanctionné la société KRA Consultancy Ltd d'une amende de 300 000 £ (environ 354 000 €) pour l'envoi de 5 575 715 messages textes de marketing direct illégaux entre avril 2022 et mai 2025.Ces messages, qui ont généré plus de 60 000 plai...