Archive
(2,175 Total Articles)Page 14 of 20.
Panzer ransomware is affecting a small but geographically spread set of victims and appears to combine encryption with data theft. For defenders, this reinforces the need to harden backup recovery, monitor for exfiltration as well as encryption activity, and treat even limited ransomware campaigns as a cross-border incident risk.
Trezor says more U.S. customers were swept up in a ShipMonk data breach, which raises exposure for people whose order or contact data may have been handled by the fulfillment vendor. For defenders, the issue is vendor risk and breach notification rather than compromise of Trezor’s own crypto products.
Fiesta Insurance is reporting a data breach that exposed sensitive information. For defenders, the immediate issue is exposure of personal or policyholder data, and the likely obligations are breach notification, internal investigation, and review of controls around stored customer information.
Luminis Health is being cited in a reported cyber incident, and the matter is still under investigation. For defenders, the immediate concern is possible exposure of healthcare data and the need to verify scope, containment, and any notification obligations.
Stolen Bitcoin from Coldcard wallets is being laundered across chains by moving through THORChain swaps into Ethereum. For defenders, this points to active post-theft movement rather than a new exploit, and it raises the priority on wallet compromise detection, transaction tracing, and rapid coordination with exchange and bridge providers.
A breach affecting NFI North has reportedly exposed personal data tied to 49,540 individuals. Defenders should treat this as a data-breach notification that may drive notification, monitoring, and identity-theft risk management obligations for the affected organization and individuals.
Golden State Orthopedics appears to be the subject of a reported data breach involving a large amount of compromised data. For defenders in healthcare, the issue is exposure of patient and business records and the need to review incident response, data handling, and third-party risk controls.
Saskatchewan Health Authority says patient data was exposed in a breach at Nipawin hospital. For defenders, this is a healthcare data-breach incident with implications for patient privacy, incident response, and any notification or containment obligations tied to protected health information.
Attackers have compromised a large number of Dahua cameras and established backdoors on a smaller subset of devices. Defenders should treat this as an indicator of exposed networked surveillance gear that needs credential review, firmware validation, segmentation, and external access checks.
A cyberattack is reported to have affected three major UK airports and led to personal data for millions of people being published online. For defenders, this raises exposure around airport and passenger data handling, and it increases pressure on identity, incident response, and third-party risk controls across critical transport systems.
A blockchain network has been left offline for more than 10 days after a major exploit triggered a large bailout in its token economy. For defenders and risk owners, the main issues are service availability, exploit response, and the governance controls needed when a protocol is forced to absorb a loss.
Reynella East College is telling parents and carers about a data breach that occurred in June. For defenders, the main concern is exposure of student or family information and the need for clear breach response, notification, and follow-up controls in an education setting.
A class action lawsuit says Paylogix may have exposed personal data and delayed notifying affected people. For defenders, the main issues are breach response timing, notification obligations, and the risk that delayed disclosure increases legal and compliance exposure.
The reported ransomware attack on Bajaj Auto shows that Indian automakers are part of the same extortion risk that is hitting other large manufacturers. For defenders, the priority is to treat production, supplier, and corporate IT environments as linked attack surfaces and to plan for disruption, not just data loss.
A UK police legal database has disclosed a data breach. Defenders should treat this as a government information exposure with possible privacy, access control, and incident response implications for law enforcement and legal case data.
A cyberattack affecting a Thomson Reuters company has reached court systems in multiple U.S. states. For defenders, the immediate issues are third-party exposure, service continuity for judicial operations, and whether sensitive court-related data or access paths were affected.
A car rental experience appears to have led to a driver’s license being exposed and listed for sale on a dark web market. For defenders, this is an identity exposure problem that can affect customers, require incident response with the vendor chain, and increase the need for monitoring, notification, and fraud controls.
The Justice Department is pursuing the hackers involved in an attack affecting X users. For defenders, this is mainly an enforcement and incident-response signal: account compromise and platform abuse remain active risks, and organizations should review identity protections, monitoring, and user-reporting workflows tied to social platforms.
This points to a ransomware incident that was fast enough to disrupt an enterprise in hours rather than days. For defenders, the main implications are faster detection, tighter containment, and more scrutiny of how AI-assisted attack tooling changes response time and audit burden.
A layer-1 blockchain reportedly halted operations for several hours to contain a loss event tied to a multimillion-dollar hack. For defenders, this is an availability and governance issue as much as a financial one: it shows that blockchain operators may need emergency controls, incident response, and transparent disclosure practices when a protocol is under active exploitation.
Three blockchain networks halted operations after security incidents, which points to an active compromise or defensive shutdown affecting their availability and trust. Defenders should treat this as a warning about operational concentration risk in crypto infrastructure and the need to monitor for related attack patterns, incident response gaps, and user exposure across connected services.
The report says alleged Iranian cyberattacks against U.S. infrastructure did not succeed. For defenders, the main issue is continued threat pressure on critical infrastructure and the need to keep monitoring, hardening, and incident response plans current.
Ceva Logistics is facing a lawsuit after a data breach allegedly exposed employee records. For defenders, this raises the exposure around HR and personnel data, and it increases pressure to harden access controls, retention practices, and breach-response processes for internal identity data.
The report indicates a data breach affecting Tving and suggests the exposed record count may be far larger than its subscriber base. For defenders, the immediate questions are what data was exposed, whether the disclosure is credible, and whether related accounts, credentials, or downstream systems need review.
Cyberattacks against healthcare firms disrupted pacemaker monitoring, creating an operational and patient-safety issue rather than just a data-loss event. Defenders in healthcare need to treat remote monitoring and connected medical services as critical service dependencies, with incident response plans that cover availability and continuity as well as breach containment.