The QTFY campaign shows how compromised everyday devices can conceal state-linked attacks against critical infrastructure.

Disrupting a botnet’s command infrastructure does not remove the malware already present on compromised machines.

British fintech giant and neobank Revolut disclosed a significant data security incident after threat actors impersonated a legitimate government agency by using a fraudulent email domain to request ...

Hackers exploited a VPN vulnerability to access Japan’s Government Solution Service network, potentially exposing the personal data of government employees and other users.

Grindr has agreed to pay £26 million to settle a UK lawsuit from thousands of users over sharing personal sensitive data, including HIV status, with advertisers.

The non-custodial bitcoin payment processor says customer emails, bitcoin addresses, IBANs and hashed passwords may have been exposed, though user funds remain safe.

Changing remediation advice and disrupted integrations highlight the operational challenges of responding to actively exploited vulnerabilities.

Five proposed class action lawsuits accuse the Houston-based utility of failing to protect customer data after a threat actor ...

South African telecom provider Cell C has notified fiber internet customers that their personal data may have been ...

American sporting-goods retailer Hibbett Retail said a data security breach earlier this year compromised the sensitive ...

Attacks are not one-and-done activities. Nation-state attackers in particular will lurk for months, or even years, in a ...

Two separate ransomware groups have claimed responsibility for a cyber attack on Interim HealthCare, stating that they stole several gigabytes of sensitive patient data.