LATEST POST
Ernst & Young data breach claimed by ShinyHunters extortion gang
Bleeping Computer reports: The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company’s systems via a supply-chain attack. Ernst & Young disclosed the breach earlier this month, saying a third-party support ticket system used by its IT personnel was compromised […]
Cyberattacks are targeting Midwest businesses more than elsewhere in the U.S.
NPR in Kansas City reports: Organizations in the Midwest experienced 7% more cyberattacks than the national average during the first five months of 2026, according to data from Check Point Research. Healthcare, financial services, and energy and utilities are among the most targeted industries. “The central U.S. has hospitals, manufacturers, banks and utilities that are highly […]
700Credit $17.5 Million Data Breach Class Action Settlement
ClaimDepot reports: Consumers who received a notice that the 700Credit data breach may have affected their personal information could qualify to submit a claim for up to $2,500 from a class action settlement. The cybersecurity incident impacted approximately 5.8 million individuals. 700Credit LLC, a company that provides credit reports and other information to auto, RV, powersports and marine […]
79% of ransomware attacks now originate from compromised identities, Sophos report finds
Manila Standard reports that identity is the dominant initial access vector in ransomware attacks, according to a new report from Sophos: Sophos, a global cybersecurity leader, released its seventh annual State of Ransomware report, a vendor-agnostic survey of IT and cybersecurity leaders across 17 countries identifying the impact of ransomware on businesses and how prepared organizations […]
Healthcare Services Group agrees to $3M settlement after 2024 breach
Paubox reports: In October of 2024, Healthcare Services Group (HCSG), a Bensalem, Pennsylvania-based provider of environmental, dining, and nutritional support for healthcare facilities, became aware of a data breach that impacted 624,496 individuals, including employees and patients. Data that was accessed in the breach included names, Social Security numbers, driver’s license numbers, state identification numbers, financial account information, full […]
KPMG sacks senior partner after finding she hid board documents
Financial Review reports: KPMG has sacked its former chief operating officer Eileen Hoggett from the firm’s partnership in a rare move after finding she had stored printed copies of confidential Lendlease board documents in her locker, shared them with her colleagues to win audit contracts, and repeatedly lied about it. A furious John Sams, the […]
OpenAI’s Attack on Hugging Face Adds to Ongoing AI Agent Security Concerns
Responsible dog owners worry about their pets getting out of the yard and possibly attacking people. Now we all have to worry about AI models breaking out of their sandboxes and attacking tech firms or others. Security Boulevard reports: The cyberattack against Hugging Face launched by rogue AI models from OpenAI is only the latest […]
‘WP2Shell’ Opens Millions of WordPress Sites to Remote Takeover
If you haven’t patched already, get busy. DarkReading reports: Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The attacks are being fueled by the ready availability of numerous proof-of-concept exploits for the two bugs, identified as CVE-2026-60137 and CVE-2026-63030. Researchers at […]