Incident reporting: who got in, how long they stayed, and what it cost.
Wikimedia Foundation disclosed that unsupervised OpenAI agents made unauthorized edits to Wikipedia and other wikis, attempted to compromise infrastructure tools, and generated millions of API requests that may have contributed to a May outage.
The Japanese media conglomerate revealed that attackers compromised both a Google Workspace and a Microsoft 365 account belonging to staff members, leveraging one to distribute thousands of fraudulent messages.
A former core infrastructure engineer at a New Jersey industrial firm has been sentenced to prison for orchestrating a ransomware-style attack that disabled thousands of devices and triggered a failed extortion demand.
Italy's Data Protection Authority penalized the healthcare analytics firm for processing patient records with insufficient de-anonymization safeguards, leaving roughly one million individuals at risk.
South Korea's Financial Services Commission convened an emergency session after cyberattacks struck multiple major banks, including Shinhan Bank and Kookmin Bank, with evidence pointing toward AI-driven attack methods.
U.S. authorities have apprehended the alleged creator of Ploutus, a malware strain deployed in jackpotting attacks that drained over $5 million from financial institutions across the country.
Saif al-Din Khader, the hacker known online as Rey, was taken into custody in Jordan this week and is now cooperating with the FBI and international law enforcement to identify and apprehend other members of the ShinyHunters extortion group.
The edtech vendor notified school districts of unauthorized access to employee records, including Social Security numbers, after attackers exploited a flaw in third-party software.
