A cyber-attack on the UK's Department for Education (DfE) and Police National Legal Database (PNLD) has exposed over 740,000 pieces of data, including personal details of officials, educators, police officers, and members of the public. Hackers, identifying as ExfilSquad, are demanding payment in exchange for not releasing all stolen data.
U.S. agencies warn that Iranian state-backed hackers are actively targeting American water and energy industrial control systems, expanding attacks beyond Rockwell products to include Schneider Electric and Siemens, potentially causing outages and unsafe conditions.
Hackers stole over $31.6 million across two separate crypto bridge exploits targeting AFX and Verus Protocol within hours. Blockaid reported AFX lost $24.15 million and Verus Ethereum Bridge lost $7.5 million, highlighting ongoing security risks for cross-chain bridges.
Origin Energy confirmed a hack accessed customer names, addresses, phone numbers, and partial bank data for an unspecified number of its 4.8m Australian accounts. The company is investigating with authorities, while experts warn of identity theft risks.
Hackers stole over $31.6 million in two separate crypto bridge exploits targeting AFX's Arbitrum bridge ($24.15M) and the Verus Ethereum Bridge ($7.5M) within hours. Blockaid detected both attacks, with the AFX incident likely due to compromised validator keys, underscoring persistent security risks for cross-chain bridges.
List of 7 essential WordPress plugins for enhancing SEO, security, spam protection, contact forms, analytics, and affiliate link management.
GO2 Health in Brisbane's Everton Park experienced a phishing attack in April, accessing patient data including DVA ID numbers from its main email mailbox. Patients were notified almost three months later, raising concerns about delayed alerts following another recent medical data breach.
Cybersecurity firms report hackers are actively exploiting critical vulnerabilities in popular WordPress software, affecting potentially tens of millions of websites despite recent patches and forced updates. Users are urged to update immediately to mitigate risks.
Owen Flowers (18) and Thalha Jubair (20) received 5.5-year prison sentences for a 2024 cyber-attack on Transport For London (TfL). The hack, carried out as part of the Scattered Spider collective, disrupted services, stole millions of customer data, and cost TfL £39m.
Two men linked to the "Scattered Spider" hacking group received five-year, six-month prison sentences in the UK after pleading guilty to cybercrime charges. The group is tied to high-profile ransomware, cryptocurrency extortion, and attacks on UK and US companies, including London's transport network and Caesars Entertainment.
Angelo Martino, a former ransomware negotiator, was sentenced to over five years in prison for conspiring with hackers to deploy BlackCat ransomware. The U.S. seized over $10 million in crypto and assets purchased with stolen funds. Martino is the third person jailed in the scheme.
A popular npm package for the Injective blockchain was compromised in a supply chain attack, with malware designed to steal crypto wallet private keys and seed phrases. The malicious code, present in version 1.20.21 of the @injectivelabs/sdk-ts package, has been removed, and affected versions deprecated, with no funds on the network reported at risk.
New research from Tel Aviv University, Technion, and Intuit reveals a technique called "HalluSquatting" that exploits AI hallucinations. Hackers can register fake software repository links predicted by AI, potentially leading to AI-enabled botnets and compromising computers.
A simulated cyberattack on US water utilities, orchestrated by Chinese military hackers (Volt Typhoon), highlights critical infrastructure vulnerabilities and the challenges faced by insurance companies in resource allocation during a national crisis.
Un cittadino italiano di 34 anni è stato arrestato in Spagna con l'accusa di aver collaborato con hacker filorussi responsabili di attacchi informatici. L'uomo avrebbe fornito supporto logistico e organizzato la fuga di un hacker verso la Russia.
Crypto losses decreased by 46.8% to $1.32 billion in H1 2026, but security firms CertiK and TRM Labs warn this drop is misleading. Attackers are becoming more sophisticated, with North Korean state-sponsored hackers responsible for over 70% of Q2 losses, prompting international discussions.
The US Department of Commerce has lifted export controls on Anthropic's advanced AI models, Claude Fable 5 and Mythos 5, after a brief suspension over national security concerns. The company will restore access to these tools, which are rivals to ChatGPT and Gemini.
Hackers stole over 630GB of confidential data from Apple supplier Tata Electronics in India, including details on the upcoming iPhone 18 Pro. The ransomware group World Leaks published the files, exposing supplier information and potentially impacting Apple's supply chain secrecy and India manufacturing strategy.
PMEs tornaram-se o principal alvo de ataques cibernéticos, representando 62% dos incidentes, segundo IBM Security. No Brasil, Kaspersky registrou 553 milhões de tentativas de phishing em 12 meses, com 43% visando PMEs. A falta de recursos e defesas frágeis tornam-nas vulneráveis, e mais de 60% fecham após ataques de ransomware. O artigo detalha as vulnerabilidades e oferece medidas preventivas, como terceirização de TI, MFA e políticas de segurança.
Russian hackers are suspected of being behind the cyberattack on Jaguar Land Rover that halted production for months and cost the British economy an estimated $2.5 billion. The UK government provided a £1.5 billion bailout. A Jordanian hacker also breached JLR networks.
Russian hackers are reportedly behind a cyberattack on Jaguar Land Rover last year, which halted production and cost the British economy $2.5 billion. The UK government provided a £1.5 billion bailout. A separate Jordanian hacker also breached networks.
Hackers stole approximately $3 million from Polymarket users by exploiting a compromised third-party vendor. The prediction market platform has fixed the issue and will fully reimburse affected users, marking its second security incident in two months.
Market research provider Klue, hacked earlier this month, is communicating with the Icarus hacking group, which claims to be deleting stolen customer data. However, a second unnamed gang has emerged, claiming to have obtained Klue's customer data from Icarus and is now directly extorting affected customers.
A February 2024 ransomware attack on Romanian hospitals using the Hippocrates medical software system led to a nationwide internet shutdown for over 100 hospitals, preventing further damage and protecting patient lives
