PayPal Security Advisory: Credential Stuffing and Sophisticated Phishing Targeting Users

PayPal has issued a series of security alerts following a wave of "unconventional" cyberattacks designed to compromise user accounts and exfiltrate sensitive financial data. The payments giant has confirmed that a significant credential stuffing campaign, alongside sophisticated phishing operations, has resulted in the exposure of personal information for

Global Tourism Hubs Hit by Ransomware Attack on Vivaticket Platform

A major ransomware attack targeting Vivaticket, one of the world’s leading providers of ticketing and access control systems, has disrupted operations at thousands of high-profile tourist sites, museums, and theme parks across Europe and the Middle East. The breach has left iconic institutions, including the Louvre in Paris and

Fortinet Issues Emergency Patches for Actively Exploited FortiClient EMS Zero-Day

Fortinet has released urgent security updates to address a high-severity zero-day vulnerability in its FortiClient Endpoint Management Server (EMS) that is currently being exploited in the wild. The flaw, identified as CVE-2026-35616, allows unauthenticated attackers to gain unauthorized access and potentially execute arbitrary code on affected systems. Technical Breakdown of

Solana-Based Drift Protocol Hit by $285M Exploit Linked to North Korean Infiltration

Drift Protocol, a prominent decentralized exchange (DEX) operating on the Solana blockchain, has been targeted in a massive exploit resulting in the loss of approximately $285 million. Leading blockchain forensic firms, including Elliptic, TRM Labs, and Chainalysis, have attributed the attack to threat actors associated with the Democratic People’s

Harvard University Issues Urgent Alert Following Sophisticated Campus-Wide Phishing Campaign

Harvard University’s Information Technology (HUIT) department has issued a high-priority security alert following a "brazen" and targeted cyber campaign aimed at students, faculty, and staff. The university, which serves as a global hub for high-value research and intellectual property, is currently navigating a sophisticated social engineering raid

German Political Party Die Linke Targeted by Qilin Ransomware; Threat Actors Threaten Massive Data Leak

Die Linke, a prominent political party in the German Bundestag, has officially confirmed a significant data breach following an attack by the Qilin ransomware group. The breach, which has sent ripples through the German political landscape, involves the unauthorized exfiltration of sensitive internal documents, with the threat actors now threatening

Northern Ireland Education Authority Restores Systems Following School Network Cyberattack

The Education Authority (EA) of Northern Ireland has reported "positive progress" in restoring IT services across the region’s school network following a disruptive cyberattack. The incident, which initially crippled digital infrastructure for thousands of students and teachers, has triggered a large-scale recovery effort led by the EA’

Oklahoma Tax Commission Reports Data Breach Exposing Social Security Numbers and W-2 Data

The Oklahoma Tax Commission (OTC) has issued a formal warning regarding a security incident that may have exposed the sensitive personal information of an undisclosed number of taxpayers. According to reports from The Oklahoman, the breach involved unauthorized access to systems containing Social Security numbers and W-2 tax forms. Unauthorized

Scattered Spider: How This Social Engineering Threat Group Breaches Modern Organizations

Introduction to Scattered Spider Scattered Spider is a highly active hacking group, also known as 0ktapus, UNC3944, or Muddled Libra, that has rapidly evolved into one of the most dangerous threat actors targeting enterprises today. The group focuses its attack efforts on the target organization by conducting reconnaissance, impersonating employees,

FBI Classifies China-Linked Breach of Surveillance Systems as "Major Cyber Incident"

The Federal Bureau of Investigation has officially designated a recent breach of its internal networks as a "major cyber incident," signaling a significant escalation in the assessment of a campaign linked to Chinese state-sponsored actors. The classification, first reported by Politico, follows an intensive forensic review of unauthorized

Cyberattack Hits Uffizi Galleries in Florence; Valuables Moved to Bank of Italy for Protection

The Uffizi Galleries, home to some of the world's most significant Renaissance masterpieces, was targeted by a sophisticated cyberattack early Friday morning. In an extraordinary security maneuver reported by Reuters and Corriere della Sera, Italian authorities took the preemptive step of physically relocating several high-value "jewels"

Nacogdoches Memorial Hospital Confirms Massive Data Breach Affecting 257,000 Patients

Nacogdoches Memorial Hospital (NMH) has begun notifying over 257,000 individuals following a major cybersecurity breach that compromised sensitive personal and medical information. The East Texas healthcare provider confirmed that unauthorized actors gained access to its network, potentially exfiltrating a vast repository of patient data spanning several months of activity.