A data breach involving PartsWarehouse.com was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving Cardinal Services was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving Pease Mountain Law was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data leak involving Trump Mobile was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving playdragonica.eu was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving United Medical Systems was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving Parker Lipman was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving MAS Law was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving SCU was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving Morningstar Properties was reported in May 2026. See incident details, impact on customers, and recommended security measures.
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. [...]
With increasing levels of connectivity within industrial environments, traditional notion of trusted users, devices, and networks being fundamentally... The post Zero trust in OT moves beyond...
The University of Mississippi Medical Center may have violated federal privacy law following a ransomware attack that crippled its systems in February, according to a 3 On Your Side investigation....
In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters, with the data later published that month. The incident exposed 185k unique email addresses, along with...
Researchers identified multiple coordinated software supply chain attacks targeting Composer/Packagist packages and upstream GitHub repositories. The activity involved malicious postinstall hooks,...
GitHub has rolled out new controls for npm to improve the security of the software supply chain, giving maintainers the ability to explicitly approve a release prior to the packages becoming...
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. "Although...
Anthropic on Friday disclosed that Project Glasswing has helped uncover more than 10,000 high- or critical-severity vulnerabilities across some of the most "systemically" important software across...
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to...
Cybersecurity researchers have flagged a fresh software supply chain attack campaign that has targeted multiple PHP packages belonging to Laravel-Lang to deliver a comprehensive...
What Happened:On 11 May 2026, the UK Information Commissioner’s Office (ICO) fined South Staffordshire Water £963,900 after the Cl0p ransomware group lurked completely undetected in its network...
A maximum-severity security vulnerability impacting LiteSpeed User-End cPanel Plugin has come under active exploitation in the wild. The flaw, tracked as CVE-2026-48172 (CVSS score: 10.0), relates...
Or is it just life today, with AI constantly digging through code repositories in search of security holes?
Dirty Frag, Copy Fail, and Fragesia show the new reality
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog,...
Plus: Google publishes a live exploit for an unpatched flaw, the feds arrest two men accused of creating thousands of nonconsensual deepfake nudes, and more.
Italian authorities have dismantled a piracy ecosystem centered around the CINEMAGOAL app that provided access to various streaming platforms, including Netflix, Disney+, and Spotify. [...]
Hey, Gemini, how much can we earn from one pump-and-dump cycle?
Authorities in Europe and North America have announced the dismantling of a criminal virtual private network (VPN) service used by criminal actors to obscure the origins of ransomware attacks,...
The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151Ukraine's National Security and Defense Council) has been observed using lures related to Prometheus, a Ukrainian...