Trending
Threat actors are increasingly leveraging the inherent trust of major SaaS platforms to deliver phishing lures directly through legitimate system-generated alerts. SAN FRANCISCO, CA — Security researchers have identified a sophisticated shift in phishing tactics, where attackers are bypassing traditional email gateways by abusing the automated notification systems of GitHub
Data Breaches
The world’s largest travel platform has issued an urgent warning to customers after an unauthorized third party accessed sensitive booking information, triggering a massive wave of targeted phishing attacks. AMSTERDAM, Netherlands — Booking.com has confirmed a significant data security incident that has exposed the personal details and travel itineraries
Trending
A newly identified threat actor, UNC6783, is bypassing the "front door" of major corporations by targeting Business Process Outsourcing (BPO) firms. By leveraging fake Okta portals and hijacked Zendesk tickets, the group has successfully extorted dozens of high-value targets, exposing a critical failure in the Managed Perimeter.
Data Breaches
Jones Day, one of the world's largest law firms, has confirmed that a targeted cyberattack resulted in unauthorized access to sensitive files belonging to 10 of its clients. The breach, which the firm describes as "limited" in scope, was carried out via a sophisticated phishing campaign
Data Breaches
PayPal has issued a series of security alerts following a wave of "unconventional" cyberattacks designed to compromise user accounts and exfiltrate sensitive financial data. The payments giant has confirmed that a significant credential stuffing campaign, alongside sophisticated phishing operations, has resulted in the exposure of personal information for
Cyber Attacks
Drift Protocol, a prominent decentralized exchange (DEX) operating on the Solana blockchain, has been targeted in a massive exploit resulting in the loss of approximately $285 million. Leading blockchain forensic firms, including Elliptic, TRM Labs, and Chainalysis, have attributed the attack to threat actors associated with the Democratic People’s
Cyber Attacks
Harvard University’s Information Technology (HUIT) department has issued a high-priority security alert following a "brazen" and targeted cyber campaign aimed at students, faculty, and staff. The university, which serves as a global hub for high-value research and intellectual property, is currently navigating a sophisticated social
Data Breaches
Hims & Hers Health, Inc., the multi-billion dollar telehealth platform known for its direct-to-consumer wellness products, has disclosed a cybersecurity incident that compromised sensitive customer support data. The company confirmed that unauthorized actors gained access to its third-party support environment earlier this year, leading to the
Trending
The UK’s National Cyber Security Centre (NCSC), in coordination with Microsoft, has issued an urgent advisory regarding a sophisticated campaign targeting users of encrypted messaging applications. The warning highlights an increase in "highly targeted" social engineering attacks on platforms including WhatsApp and Signal, linked to advanced persistent
Cybersecurity 101
A clear guide to the most common cybersecurity threats organizations face in 2026 — malware, phishing, data breaches, DDoS, injection attacks, insider threats, and the best practices for defense.
Data Breaches
A data breach is any security incident in which unauthorized parties access sensitive or confidential information. This guide explains what a data breach is, how breaches happen, their impact on organizations and individuals, and how to prevent and respond to them. It is intended for business leaders, IT professionals, and
Cyber Attacks
Aura, a leading provider of all-in-one digital safety and identity protection services, has confirmed a significant data security incident involving the exposure of approximately 900,000 records. The breach, which stems from a legacy marketing database, has reignited discussions regarding the supply chain risks associated with corporate acquisitions.