Data Breaches
Major Dutch e-commerce platform bol.com is investigating unverified claims that a database containing approximately 400,000 customer records was offered for sale online, though the company currently reports no evidence of a security incident. UTRECHT, NETHERLANDS — Leading Dutch retailer bol.com addressed a series of unverified allegations between April
Data Breaches
Agoda has issued a formal denial following unverified claims on a dark web forum that a dataset containing 82 million customer records was stolen from its systems. SINGAPORE — Digital travel platform Agoda denied unverified claims on April 22, 2026, that a threat actor exfiltrated a database containing 82 million user
Vulnerability Management
A reported Broken Object Level Authorization (BOLA) flaw on the Lovable AI platform allegedly exposed thousands of private coding projects, prompts, and credentials, sparking a debate over "vibe coding" security standards. Stockholm, Sweden — Lovable, the rapidly growing AI "app builder" platform, has found itself at the
Application Security
In a landmark moment for automated defense, Mozilla has patched 271 vulnerabilities in the latest version of Firefox — all identified by Anthropic’s specialized security model, Mythos. Mountain View, CA — Mozilla has released Firefox 150, an update that may represent the single largest leap in automated browser hardening to date.
Enterprise Infrastructure
A routine update to the Microsoft Graph API has inadvertently disrupted Universal Print services, highlighting the fragility of interconnected cloud ecosystems. Redmond, WA — Microsoft has officially identified the root cause of a series of persistent outages affecting its Universal Print service. According to technical bulletins from Microsoft Learn and reports
Artificial Intelligence (A.I.)
Security researchers have raised alarms regarding the background behavior of the Claude Desktop application for macOS, claiming the software installs persistent monitoring components that mirror spyware-like activity. San Francisco, CA — Anthropic, the AI safety and research company, has come under intense scrutiny following claims from independent security researchers that its
M&A (Mergers & Acquisitions)
In the largest acquisition in its history, Alphabet has completed its $32 billion takeover of cloud security leader Wiz, signaling an aggressive pivot toward autonomous, AI-driven defense systems. Mountain View, CA — Google has officially crossed the Rubicon in the cybersecurity arms race. By finalizing the $32 billion acquisition of Wiz,
Vulnerabilities
Oracle has released its massive April 2026 Critical Patch Update (CPU), addressing 450 security flaws across its global product suite, including critical vulnerabilities that allow for unauthorized remote code execution. Austin, TX — Oracle Corporation has issued its quarterly security offensive, releasing a comprehensive set of patches to address hundreds of
Cyber Attacks
A newly discovered and highly destructive wiper malware, dubbed "Lotus," has been deployed against Venezuela’s energy and utility sectors, timed strategically alongside periods of significant geopolitical friction. Caracas, Venezuela — Cybersecurity researchers have identified a sophisticated new strain of data-destroying malware, known as Lotus, targeting critical infrastructure within
Data Breaches
Citizens Financial Group has confirmed it is managing a data security incident involving a third-party vendor, following claims by the Everest ransomware group that they exfiltrated sensitive corporate and customer data. Providence, RI — Citizens Financial Group (CFG) has become the latest major financial institution to grapple with the fallout of
Data Breaches
International cosmetics giant Rituals has notified members of its "MyRituals" program that their personal information was unlawfully downloaded following a targeted breach of its customer systems. Amsterdam, Netherlands — Rituals Cosmetics, the Amsterdam-founded wellness and beauty brand, has become the latest high-profile victim in a wave of cyberattacks targeting
Data Breaches
Canada Life has confirmed a significant data breach after hackers successfully exploited a single employee account to access a high-value Salesforce environment, exposing the sensitive personal information of thousands. Winnipeg, MB — Canada Life, one of the nation's largest insurance and financial services providers, has begun notifying approximately 70,