Data Breaches
The European Commission has officially confirmed a cybersecurity intrusion targeting its cloud-based infrastructure, marking a significant escalation since initial reports of data theft surfaced last week. While EU officials are working to downplay the severity of the incident, the threat actor group known as "ShinyHunters" claims to have
Data Breaches
In one of the most consequential supply chain compromises of the year, security researchers have identified a sophisticated campaign to "poison" the widely used Axios software package. The attack, which targeted the npm registry used by millions of web developers, has been attributed by Google’s Threat Analysis
Data Leak
AI heavyweight Anthropic has confirmed a significant data exposure involving the source code for its newly released developer tool, Claude Code. The leak, which resulted in over 512,000 lines of proprietary code being inadvertently published to the public npm registry, marks the second high-profile security lapse for the company
Policy & Government
A sophisticated cyberattack attributed to Iran-linked threat actors has compromised the personal data of FBI Director Kash Patel, exposing sensitive communications and internal documents. The breach comes at a period of heightened vulnerability for the U.S. federal government, as an ongoing Department of Homeland Security (DHS) shutdown has reportedly
Data Breaches
The UK Ministry of Defence (MoD) is facing renewed condemnation following reports that the 2021 Afghan Relocations and Assistance Policy (ARAP) data breach has led to direct physical harm and fatalities. Recent findings, supported by parliamentary oversight committees and human rights organizations, suggest that the exposure of personal details for
Data Breaches
CareCloud, Inc. (Nasdaq: CCLD), a prominent provider of cloud-based healthcare IT solutions, has disclosed a significant cybersecurity incident that may have compromised sensitive patient health records. In a Form 8-K filing with the U.S. Securities and Exchange Commission (SEC), the company reported a "material event" involving unauthorized
Patch Management
In an unprecedented escalation of its security communications, Apple has begun pushing urgent, full-screen "Critical Software Alerts" to millions of iPhone and iPad users. The notifications, which bypass standard "Do Not Disturb" settings, warn users that their devices are running outdated versions of iOS 17 and
Data Breaches
Educational services provider Kaplan North America, LLC has begun notifying an undisclosed number of individuals following a cybersecurity incident that exposed sensitive personal information. The breach, which was identified in early March 2026, has already triggered multiple class-action investigations and legal filings across several jurisdictions. Incident Discovery and Data Exposure
Data Breaches
The European Commission confirmed Friday that unauthorized actors targeted its Europa web platform, resulting in the theft of internal data. The incident, which occurred on March 24, 2026, involved a breach of an Amazon Web Services (AWS) account utilized by the Commission for hosting specific digital services. Breach Discovery and
Data Breaches
The Los Angeles County Metropolitan Transportation Authority (Metro) restricted access to its internal computer systems late Saturday following the detection of unauthorized activity on its network. The proactive shutdown impacted employee workstations and administrative applications across the agency — a move intended to contain the threat while forensic investigators determine the
Cyber Attacks
Officials in Foster City declared a local state of emergency on Wednesday following a targeted ransomware attack that has disrupted municipal computer systems and forced critical digital infrastructure offline for several days. The declaration — authorized by City Manager Stefan Chatwin and formally adopted by the City Council — is intended to
Cyber Attacks
Crunchyroll, the world’s largest anime streaming platform, has launched an investigation into claims that a threat actor has exfiltrated nearly 100GB of sensitive user data. The alleged breach was first brought to light after a prominent hacker group posted samples of the database on a known cybercrime forum, claiming