Incident reporting: who got in, how long they stayed, and what it cost.
Sweden's IMY data protection authority has penalized the HR systems vendor for inadequate monitoring and software validation practices that enabled a ransomware attack affecting over 200 municipalities.
The extortion group claims it exploited an unpatched Oracle PeopleSoft vulnerability to breach FBI infrastructure, access AWS GovCloud, and steal sensitive records on employees and job applicants. The group says it is now using the same zero-day against Fortune 500 companies.
Microsoft's Digital Crimes Unit has coordinated a takedown of the EvilTokens phishing-as-a-service operation, which exploited device-code authentication to breach over 12,000 accounts across more than 10,000 organizations worldwide.
A September 23 webinar will examine how attackers leverage social engineering and malicious OAuth applications to compromise Google Workspace environments, and what defenders should prioritize in response.
Attackers obtained credentials for third-party Ribon applications on the BigCommerce platform and used them to inject malicious code into merchant storefronts, exposing customer data across multiple online stores.
The Data Protection Commission has fined Google over GDPR breaches involving three location-tracking features that processed user data without proper transparency or retention controls.
Researchers discovered a malicious npm package that bypasses GitHub's June 2026 security measures by embedding malicious code in a library function that executes at runtime, rather than during installation.
A coordinated law enforcement advisory from Japan, the US, Australia, and Germany documents how the state-sponsored WaterPlum group infected tens of thousands of machines worldwide and funneled millions in stolen cryptocurrency back to Pyongyang.
