Incident reporting: who got in, how long they stayed, and what it cost.
Datatilsynet fined Xandr, a Microsoft-owned advertising company, for unlawfully sharing sensitive sexual orientation data from Grindr users with thousands of advertisers between 2018 and 2020.
Ledger has verified that cryptocurrency wallets distributed by CryptoBilis, a Malaysia-based reseller, contained unauthorized spy chips designed to steal private keys and drain user funds.
Threat actors remotely triggered defrost cycles on refrigeration systems across multiple French supermarket chains overnight, affecting between 250 and 350 locations and causing substantial food spoilage and financial damage.
Varonis Threat Labs uncovered AvisLoader, a Windows loader that uses encrypted peer-to-peer messaging to resist domain-based disruption and maintain command-and-control resilience across infrastructure changes.
The multinational food retailer, operating over 9,400 stores across three continents, confirmed a security breach forced it to disconnect systems to prevent further compromise.
A malware infection discovered at Nippon Columbia Group, a contractor handling customer data for Japan's largest karaoke chain operator, has exposed records for over 8.6 million customers and 93,000 employees.
Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive who worked at firms negotiating ransomware payments, has been arrested in Pennsylvania on extortion and conspiracy charges linked to the ShinyHunters hacking group.
A Chinese-speaking threat actor deployed an AI-powered penetration testing toolkit and large language model agents to breach major South Korean financial institutions, exposing customer data and triggering system failures across the sector.
