Nation-State Cyber Threats
ESET discovers a new espionage group abusing legitimate cloud services for command-and-control against strategically sensitive Mongolian targets. ULAN BATOR, MN — Researchers at ESET have uncovered a sophisticated, China-aligned espionage campaign targeting the Mongolian government. The threat actor, dubbed GopherWhisper, has successfully infected at least 12 government systems
Security Research
MIVD annual assessment warns Moscow is using artificial intelligence to target critical infrastructure across the continent as part of a broader "great power" pressure campaign. THE HAGUE, NL — The Dutch Military Intelligence and Security Service (MIVD) has issued a strategic warning regarding the escalation of Russian cyber operations,
Data Breaches
UK Biobank's complete dataset exposed via three Chinese research institutions; listings removed after UK-China government intervention. LONDON, UK — In what is being described as a geopolitical health data security scandal, the UK government has confirmed that confidential medical and genomic data belonging to all 500,000 UK
Policy & Government
Security Minister Dan Jarvis announces 3-year SME funding and mandatory board-level cyber accountability at CYBERUK 2026. BIRMINGHAM, UK — In a landmark move to fortify the nation’s digital borders, the UK government has committed £90m ($120m) in new funding to bolster the cyber resilience of small and medium-
Data Breaches
Following our initial report on the Everest ransomware group's claims, Citizens Financial Group now faces a dual-front battle as federal litigation arrives in Rhode Island. Update (August 26, 2026): The litigation has expanded beyond the two original suits described below. By April 29, 2026, American Banker counted
Data Breaches
Vendors' pen-testing credentials and URL guessing gave Discord hackers weeks of access to a cybersecurity superweapon Anthropic warned was too risky for public release. SAN FRANCISCO, CA — On the same day Anthropic prepared to roll out its most powerful and restricted cybersecurity model to date, an unauthorized group
Data Breaches
ShinyHunters ransomware group accessed names, SSNs, and financial accounts of 47,876 customers; multiple class actions allege inadequate security. MINNEAPOLIS, MN — For the second time in less than half a year, financial services giant Ameriprise Financial is reeling from a major cybersecurity failure. The firm has confirmed that an unauthorized
Threat Actors
Leaked database reveals a structured cybercrime market connecting access brokers to 14 RaaS affiliates targeting US government and finance sectors in 40% of listings. MOSCOW / WASHINGTON, D.C. — A massive leak of the RAMP (Ransomware Access and Market Place) database has pulled back the curtain on Russia’s most structured
Data Breaches
Quorum Cyber analysis reveals ransomware (+21%), hacktivism (+75%), and data breaches (+73%) converging on research-rich academic targets. EDINBURGH, UK — Global higher education is facing a "convergence of threats" as a new analysis from Quorum Cyber reveals a staggering 63% year-over-year increase in verified cyberattacks. Between
Data Breaches
PIPC's record penalty cites an employee workstation hack, a 72-hour reporting delay, and nonexistent database security controls. SEOUL, South Korea — South Korea’s Personal Information Protection Commission (PIPC) has levied a record 1.21 billion KRW ($815,000) fine against Duo, the nation’s largest matchmaking service,
Vulnerabilities
Microsoft Defender LPE (CVE-2026-33825) added to KEV catalog after Huntress confirms wild exploitation; 2 related zero-days remain unpatched. WASHINGTON, D.C. — The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent mandate for all Federal Civilian Executive Branch (FCEB) agencies to patch a high-severity Microsoft
Vulnerabilities
iOS 18.7.8 fixes a notification retention flaw after the FBI used Cellebrite to extract cached Signal message previews from deleted iPhone apps in a high-profile Texas criminal case. CUPERTINO, CA — Apple has released a critical out-of-band security update — iOS 18.7.8 and iPadOS 26.