Incident reporting: who got in, how long they stayed, and what it cost.
A vulnerability in a VPN device used by Japan's Government Solution Service enabled attackers to access personal data of government workers and officials. The Digital Agency discovered the intrusion on June 25 and contained it within days.
A September 23, 2026 webinar will examine how attackers use malicious OAuth applications and social engineering to breach Google Workspace environments without needing to steal passwords or exploit vulnerabilities.
The fintech platform disclosed that attackers obtained customer financial records and identity documents by spoofing official government communications.
Attackers are weaponizing a critical remote code execution vulnerability in Tencent's popular Windows input application to install a sophisticated backdoor, researchers warn.
Anthropic has disclosed that state-sponsored and criminal threat actors exploited its Claude AI model over an eight-month period to conduct espionage, data theft, and malware development operations targeting thousands of organizations globally.
Criminal groups tied to ShinyHunters, Helix, and other extortion operations have been conducting sophisticated social engineering campaigns since May 2026, impersonating IT support to trick employees into surrendering credentials and gaining access to Microsoft 365 environments.
Rather than targeting AI infrastructure directly, threat actors are exploiting legitimate features of popular AI services to distribute malware to unsuspecting users who trust the platforms' domains and branding.
A breach of Trezor's third-party email marketing provider exposed nearly 347,000 customer addresses to phishing attacks, with 2,500 users falling victim to malicious links impersonating critical security alerts.
