CenterPoint Energy has confirmed a major cyber security breach following claims by a threat actor that its internal network was compromised and sensitive data was stolen.

Security researcher Troy Hunt reported that the McKesson data breach exposed information from approximately 6.4 million user accounts.

Montreal-based Communauto says an employee’s unauthorized script triggered a breach affecting about 2 percent of its members, prompting a police search and a cybersecurity review.

Scraped data linked to millions of Chess.com accounts has been added to Have I Been Pwned, showing how much personal information can leak without a system breach.

Disrupting a botnet’s command infrastructure does not remove the malware already present on compromised machines.

The QTFY campaign shows how compromised everyday devices can conceal state-linked attacks against critical infrastructure.

Changing remediation advice and disrupted integrations highlight the operational challenges of responding to actively exploited vulnerabilities.

British fintech giant and neobank Revolut disclosed a significant data security incident after threat actors impersonated a legitimate government agency by using a fraudulent email domain to request ...

Grindr has agreed to pay £26 million to settle a UK lawsuit from thousands of users over sharing personal sensitive data, including HIV status, with advertisers.

The non-custodial bitcoin payment processor says customer emails, bitcoin addresses, IBANs and hashed passwords may have been exposed, though user funds remain safe.

Hackers exploited a VPN vulnerability to access Japan’s Government Solution Service network, potentially exposing the personal data of government employees and other users.