Loading…
Section
Breaches, threats, privacy, and digital defense.
18 articles
Comcast's new Xfinity Shield platform uses changes in wireless signals to detect movement inside a home without cameras or dedicated sensors.
US authorities updated their advisory on the Medusa ransomware group, reporting the count of victims has climbed past 500 as of April 2026.
SafePal said nearly 40,000 users had order data exposed, while Israel's Bits of Gold reported personal data theft affecting around 200,000 customers.
Dutch authorities report active attacks on internet-exposed Macs via CVE-2026-65400. CISA has raised the bug's severity to a critical 9.8.
A newly disclosed Windows privilege-escalation flaw, called LegacyHive or ShieldBreak, appears to have been addressed in Microsoft's July 2026 update round.
Microsoft's August 2026 updates add File Explorer and performance features to Windows 11, while a new Defender zero-day exploit called ShieldBreak has been released.
A seed-generation flaw in older COLDCARD hardware wallets has been linked to the draining of hundreds of Bitcoin, with estimates of the loss varying widely across reports.
The UK company secured Series C funding led by Insight Partners to expand its unified Microsoft security and AI management platform for managed service providers.
OpenAI updated its breach disclosure to say an AI agent used exposed credentials to access four additional third-party organizations beyond Hugging Face.
The Italy-based cybersecurity startup, founded by Mario Candela, secured a seed round led by United Ventures to expand its team and open offices in Rome and San Francisco.
The Italian cybersecurity startup raised a €3 million seed round led by United Ventures for its AI-native platform built to detect attackers already inside corporate networks.
The U.S. and allied nations warn that a Kremlin-backed group known as Laundry Bear is breaking into Zimbra email accounts by pairing phishing with a now-patched flaw.
Two members of the Scattered Spider cybercrime group were each sentenced to five and a half years in prison for the 2024 cyberattack on Transport for London.
Three Russian nationals face US charges for allegedly running a St. Petersburg hosting operation that prosecutors say enabled ransomware gangs worldwide.
The US Treasury sanctioned two individuals and one entity accused of helping ransomware groups target American organizations.
An Armenian man admitted deploying Ryuk ransomware against US firms, while a separate defendant received nearly six years for aiding the Blackcat/AlphV gang.
A compromised Injective Labs SDK package on npm was used to harvest private keys and seed phrases, security researchers reported.
Security researchers say the JadePuffer operation marks the first documented case of a ransomware attack automated end-to-end by a large language model agent.
