Supply Chain Attack
A breach at the cloud-cost monitoring firm Anodot has emerged as the "patient zero" for a series of high-profile data thefts, highlighting the extreme risk of third-party integrations with elevated cloud permissions. RA'ANANA, Israel — Anodot, a prominent SaaS platform specializing in AI-driven cloud cost monitoring and
Trending
Threat actors are increasingly leveraging the inherent trust of major SaaS platforms to deliver phishing lures directly through legitimate system-generated alerts. SAN FRANCISCO, CA — Security researchers have identified a sophisticated shift in phishing tactics, where attackers are bypassing traditional email gateways by abusing the automated notification systems of GitHub and
Data Breaches
Europe’s largest fitness chain has disclosed a major security incident affecting approximately one million members across multiple countries, including a significant leak of IBAN and bank information. HOOFDDORP, Netherlands — Basic-Fit has officially confirmed a large-scale data breach that has compromised the personal and financial information of nearly one million
Data Breaches
The world’s largest travel platform has issued an urgent warning to customers after an unauthorized third party accessed sensitive booking information, triggering a massive wave of targeted phishing attacks. AMSTERDAM, Netherlands — Booking.com has confirmed a significant data security incident that has exposed the personal details and travel itineraries
Artificial Intelligence (A.I.)
OpenAI has taken the drastic step of rotating its developer signing certificates for macOS, forcing a mandatory update for all desktop users after a critical third-party library was linked to state-sponsored malware. SAN FRANCISCO, CA — OpenAI has confirmed it is rotating the digital certificates used to sign its macOS applications
Trending
Rockstar Games has broken its silence following a ransom ultimatum from the ShinyHunters threat group, asserting that its core infrastructure and player data remain secure. NEW YORK, NY — Rockstar Games has officially responded to recent claims of a significant network intrusion, characterizing the breach as a "non-material" incident.
Trending
Adobe has issued an emergency out-of-band update to address a critical memory corruption vulnerability that allowed threat actors to exfiltrate data from targeted workstations for months. SAN JOSE, CA — Adobe has released emergency security updates for Acrobat and Acrobat Reader to patch a critical zero-day vulnerability, tracked as CVE-2026-34621, which
Trending
A joint investigation by Citizen Lab and several news outlets has pulled back the curtain on WebLoc, an Israeli-developed geo-surveillance tool that transforms the global real-time bidding (RTB) ad ecosystem into a high-resolution tracking network for law enforcement. BUDAPEST, HU — While the cybersecurity world has been focused on high-profile spyware
National Security
In a staggering display of poor digital hygiene, nearly 800 Hungarian government email accounts — including those belonging to national security and counter-terrorism experts — were found circulating online due to the use of easily guessable passwords. BUDAPEST, HU — Ahead of Hungary's high-stakes parliamentary elections scheduled for April 12, an
Trending
In one of the largest coordinated crackdowns on decentralized finance (DeFi) crime to date, the NCA, U.S. Secret Service, and Canadian authorities have identified 20,000 victims and halted a massive multi-national "drainer" scheme. LONDON, UK — A massive international law enforcement effort dubbed Operation Atlantic has successfully
Data Breaches
The studio behind Grand Theft Auto has confirmed a security incident involving the unauthorized access of corporate data, with the notorious ShinyHunters group claiming responsibility and threatening a massive leak if a ransom is not paid by April 14. NEW YORK, NY — Rockstar Games has confirmed it is investigating a
Trending
In a significant blow to the infostealer ecosystem, Google has officially integrated Device Bound Session Credentials (DBSC) into Chrome 146, fundamentally changing how authentication cookies are protected on Windows and macOS. MOUNTAIN VIEW, CA — For over a decade, session hijacking has been the "skeleton key" for cybercriminals. By