Data Breaches
A threat actor advertised a 340 million-record OnlyFans dataset for 0.313 BTC on May 25, then privately admitted they did not breach the platform. The compilation stitches old breach data to public profiles, and the framing failure is itself the editorial story.
Data Breaches
A site branded as 'UK Visa Portal' exposed at least 100,000 applicants' passport scans and selfies, TechCrunch reported May 26. The site is not affiliated with the UK government, and the operator sent attorneys rather than fix the leak.
Threat Intelligence
The operator who installed the spyware was the one who left the cloud bucket open.
Data Breaches
U.S. Senators are demanding transparency from Navigate360 following claims that a hacker exfiltrated over 8 million confidential records from the P3 Global Intel platform, potentially unmasking tipsters and exposing decades of sensitive law enforcement and school safety data. WASHINGTON, D.C. — A massive cybersecurity incident at P3 Global Intel,
Data Leak
Any Notion page published to the web quietly exposes its editors’ names, emails, and profile photos through an unauthenticated API — a flaw first reported in 2022 and still unpatched. The real lesson: collaboration metadata is now a phishing target list.
Vulnerabilities
iOS 18.7.8 fixes a notification retention flaw after the FBI used Cellebrite to extract cached Signal message previews from deleted iPhone apps in a high-profile Texas criminal case. CUPERTINO, CA — Apple has released a critical out-of-band security update — iOS 18.7.8 and iPadOS 26.
Artificial Intelligence (AI)
A privacy researcher says Claude Desktop for macOS silently installs a browser-automation bridge — even for browsers you never opened. The files are real and reproduced; the "spyware" label is contested. Here's what holds up, and what to check yourself.
Policy & Government
As Congress passes a last-minute, 10-day extension for key spy powers, the cybersecurity industry watches closely to see if the "backdoor search" debate will fundamentally change data privacy for US enterprises. WASHINGTON, D.C. — The U.S. House of Representatives has approved a temporary, short-term
National Security
Security researchers claim sensitive contracts and user IDs were indexed by Google due to misconfigured URLs; Fiverr maintains that its core systems remain secure. TEL AVIV — Fiverr, the global freelance services marketplace, is facing intense scrutiny following reports that sensitive user documents — including contracts, project briefs, and personal IDs — were
Education Security
Matthew Lane, the hacker behind a massive intrusion into student information systems, admits to federal crimes, highlighting the fragile state of K-12 and collegiate data security. CHICAGO, IL — Matthew Lane, a 20-year-old former college student, has admitted to orchestrating one of the most expansive cyberattacks on the
Data Breaches
RCI Hospitality Holdings, Inc., the dominant operator of upscale nightclubs and sports bars across the United States, has confirmed a cybersecurity incident that resulted in unauthorized access to sensitive internal and client information. HOUSTON, TX — RCI Hospitality Holdings, Inc. (Nasdaq: RICK) has formally disclosed a data breach following an investigation
Trending
A series of sophisticated breaches over the past month, including a 150GB data theft and a disruption of the country's busiest port, reveals how threat actors are leveraging Large Language Models (LLMs) to dismantle state defenses. MEXICO CITY — The Mexican government is reeling from a wave of high-