The CyberSignal delivers breaking cybersecurity news, data breach reports, vulnerability alerts, and threat intelligence for CISOs, IT leaders, and security professionals.
Data Breaches
International cosmetics giant Rituals has notified members of its "MyRituals" program that their personal information was unlawfully downloaded following a targeted breach of its customer systems. Amsterdam, Netherlands — Rituals Cosmetics, the Amsterdam-founded wellness and beauty brand, has become the latest high-profile victim in a wave of cyberattacks targeting
Data Breaches
Canada Life has confirmed a significant data breach after hackers successfully exploited a single employee account to access a high-value Salesforce environment, exposing the sensitive personal information of thousands. Winnipeg, MB — Canada Life, one of the nation's largest insurance and financial services providers, has begun notifying approximately 70,
Vulnerabilities
The European Commission’s flagship age-verification tool, touted as a secure solution for protecting minors online, has faced a disastrous rollout after independent researchers bypassed its core security features in under 120 seconds. Brussels, Belgium — The European Union’s ambition to set a global standard for online safety has been
Data Breaches
Insurance giant Humana has begun notifying customers across Texas and five other states of a significant data breach, marking the second time in 60 days that the company has confirmed the exposure of sensitive patient information. LOUISVILLE, KY — Humana Inc., one of the largest health insurance providers in the United
Threat Intelligence
A sophisticated ad-fraud and scareware campaign dubbed "Pushpaganda" is successfully exploiting Google Discover’s recommendation algorithm, using AI-generated fake news to trick millions into enabling malicious push notifications. MOUNTAIN VIEW, UNITED STATES — Security researchers have uncovered a novel exploitation of the Google Discover ecosystem, where threat actors are
Cyber Crime
Tyler Robert Buchanan, a Scottish national and pivotal figure in the ‘Scattered Spider’ cybercrime syndicate, has entered a guilty plea in U.S. federal court, marking a significant victory against the world's most notorious social engineering group. WASHINGTON, UNITED STATES — The U.S. Department of Justice has secured
Cyber Attacks
Mastodon.social, the primary gateway to the decentralized Fediverse, has successfully restored services following a sustained Distributed Denial of Service (DDoS) attack that disrupted access for millions of users. JENA, GERMANY — The resilience of decentralized social media was put to the test this week as Mastodon.social, the platform'
Vulnerabilities
A widespread misconfiguration in Perforce Helix Core servers has left the proprietary source code and sensitive internal data of major global organizations accessible to the public internet. MINNEAPOLIS, MN — Security researchers have issued a stark warning regarding Perforce Helix Core, the industry-standard version control system used by gaming giants, automotive
Data Breaches
New forensic details reveal that the massive data exfiltration at Vercel began with a single employee downloading a compromised Roblox game cheat, highlighting the catastrophic intersection of personal device use and enterprise SaaS permissions. SAN FRANCISCO, CA — The security community is processing the full scope of the breach involving Vercel
Threat Intelligence
A joint forensic investigation has unmasked "The Gentlemen," a rapidly expanding ransomware operation that has successfully leveraged the SystemBC malware to automate enterprise-scale intrusions across 1,500 victims. TEL AVIV, ISR — Security researchers have exposed the inner workings of a high-volume ransomware-as-a-Service (RaaS) affiliate known as The Gentlemen.
Crypto-Crime & Laundering
Blockchain security researchers and protocol developers have identified the North Korean state-sponsored Lazarus Group as the primary suspect in the staggering $290 million theft from Kelp DAO. SEOUL, KOR — The decentralized finance (DeFi) ecosystem is reeling after a sophisticated exploit targeted Kelp DAO, a leading liquid restaking protocol. Early on
Policy & Government
As the fallout from systemic attacks on healthcare providers continues to mount, federal lawmakers and former intelligence officials are pushing for a radical reclassification of ransomware: treating digital extortion as a capital crime. WASHINGTON, D.C. — The legal immunity traditionally enjoyed by cybercriminals — often shielded by international borders and the