Data Breaches
Identity-data exposures continue at scale. A cannabis-club membership platform reportedly left nearly a million passports and ID photos reachable on the open internet with no password — a consumer-notification story for the week.
Nation-State Cyber Threats
A Russian-intelligence campaign against messaging-app credentials, documented by Ukraine, uses fake support texts to coax Signal and WhatsApp users into surrendering the codes that unlock their accounts.
Data Breaches
A high-profile prediction-market disclosure of user-fund theft: a compromised third-party vendor injected a malicious script into Polymarket's frontend, draining roughly $3.1 million from eleven user wallets, with the platform pledging full refunds.
Mobile Security
Cellebrite's stated sales-restriction practice gets fresh scrutiny via human-rights documentation, after researchers tied its forensic tooling to a jailed Russian activist's iPhone months after the company said it had pulled out.
Data Breaches
ShinyHunters published roughly 45GB of Madison Square Garden data after an extortion deadline passed, exposing millions of customer records and biometric facial-recognition files — a high-profile entertainment-venue incident with sector-wide implications.
Policy & Government
Another major jurisdiction moves toward age-based social-media restrictions: the UK plans to bar under-16s from major platforms, with first regulations due before Parliament by year-end and enforcement targeted for spring 2027.
Policy & Government
The largest data-protection fine in South Korean history reframes the cost of breaches in the Korean market and signals an Asia-wide enforcement escalation.
Threat Intelligence
Meta's contempt filing tests whether court-ordered restrictions are effectively binding on a commercial spyware vendor.
Artificial Intelligence (AI)
Bright Data, formerly Luminati, runs the largest residential proxy network in the world — and a researcher has now mapped how consumer apps and always-on smart TVs become its silent infrastructure.
Policy & Government
US Central Command confirmed foreign adversaries are using commercial location data to track and surveil US troops in theater. Sen. Ron Wyden said it is time to treat the adtech industry as a national security threat. Adversaries were not named.
Data Breaches
Pay Tel, a US prison calling vendor, left a Microsoft Azure storage server holding 300,000-plus driver's license scans and inmate communications open to the web without a password, UpGuard told TechCrunch on May 28. It is Pay Tel's second known security failure in a year.
Data Breaches
A threat actor advertised a 340 million-record OnlyFans dataset for 0.313 BTC on May 25, then privately admitted they did not breach the platform. The compilation stitches old breach data to public profiles, and the framing failure is itself the editorial story.