Data Breaches
Canada Life confirmed a hacker used one employee login to reach its Salesforce and access 70,000 people's data. Three months on, ShinyHunters claims 5.5 million records are for sale. The gap between those numbers — and one stolen login — is the story.
Vulnerabilities
The European Commission’s flagship age-verification tool, touted as a secure solution for protecting minors online, has faced a disastrous rollout after independent researchers bypassed its core security features in under 120 seconds. Brussels, Belgium — The European Union’s ambition to set a global standard for online safety has
Data Breaches
Humana disclosed two data breaches in two months, and a third followed. None started on Humana's own network — each traced to a third party holding member data. The real story is healthcare's business-associate concentration risk, not a firewall that failed.
Threat Intelligence
A sophisticated ad-fraud and scareware campaign dubbed "Pushpaganda" is successfully exploiting Google Discover’s recommendation algorithm, using AI-generated fake news to trick millions into enabling malicious push notifications. MOUNTAIN VIEW, UNITED STATES — Security researchers have uncovered a novel exploitation of the Google Discover ecosystem, where threat
Cyber Crime
Tyler Robert Buchanan, a Scottish national and pivotal figure in the ‘Scattered Spider’ cybercrime syndicate, has entered a guilty plea in U.S. federal court, marking the second guilty plea in the Scattered Spider case. Noah Michael Urban ("King Bob") was the first, pleading guilty in April 2025
Cyber Attacks
Mastodon.social, the primary gateway to the decentralized Fediverse, has successfully restored services following a sustained Distributed Denial of Service (DDoS) attack that disrupted access for millions of users. JENA, GERMANY — The resilience of decentralized social media was put to the test this week as Mastodon.social, the platform'
Vulnerabilities
A widespread misconfiguration in Perforce Helix Core servers has left the proprietary source code and sensitive internal data of major global organizations accessible to the public internet. MINNEAPOLIS, MN — Security researchers have issued a stark warning regarding Perforce Helix Core, the industry-standard version control system used by gaming giants,
Data Breaches
New forensic details reveal that the massive data exfiltration at Vercel began with a single employee downloading a compromised Roblox game cheat, highlighting the catastrophic intersection of personal device use and enterprise SaaS permissions. SAN FRANCISCO, CA — The security community is processing the full scope of the breach involving Vercel
Threat Intelligence
A joint forensic investigation has unmasked The Gentlemen, a rapidly expanding ransomware operation that leverages the SystemBC malware to automate enterprise-scale intrusions across more than 1,500 victims.
Crypto-Crime & Laundering
Blockchain security researchers and protocol developers have identified the North Korean state-sponsored Lazarus Group as the primary suspect in the staggering $290 million theft from Kelp DAO. SEOUL, KOR — The decentralized finance (DeFi) ecosystem is reeling after a sophisticated exploit targeted Kelp DAO, a leading liquid restaking protocol. Early
Policy & Government
As the fallout from systemic attacks on healthcare providers continues to mount, federal lawmakers and former intelligence officials are pushing for a radical reclassification of ransomware: treating digital extortion as a capital crime. WASHINGTON, D.C. — The legal immunity traditionally enjoyed by cybercriminals — often shielded by international borders and the
Data Breaches
The French National Agency for Secure Documents (ANTS) has confirmed a significant security incident targeting its central portal, as threat actors move to monetize a database allegedly containing millions of sensitive user records. PARIS, FRA — The French government is grappling with a severe compromise of its digital identity infrastructure. The