data breach

A recent audit of a data breach at France’s tax administration shows how stolen employee passwords can lead to serious data exposure without highly sophisticated hacking. According to France’s cybersecurity agency ANSSI, attackers likely obtained several dozen staff passwords through infostealer malware on personal devices. Two internal portals reportedly relied only on passwords, allowing attackers to access them using compromised employee credentials.

Veradigm confirms a third-party data breach exposing sensitive patient information, including Social Security numbers, through compromised vendor credentials.

Mathspace data breach affects over 1 million users after attackers exploited a critical Metabase SQL injection vulnerability.

Nutex Health disclosed a cybersecurity breach after hackers accessed its network and exfiltrated data. Investigation into exposed healthcare and business information is ongoing.

Cybercriminals use AI-powered fake Apple Support calls and phishing pages to steal iPhone passcodes, Apple ID credentials, and 2FA codes.

China-linked SilkParasite targets Central Asian governments using spear-phishing, DLL sideloading, Google Drive C2, and five newly identified malware families.

A new crypto scam uses Claude Code, phone databases, phishing, and fake wallet apps to target cryptocurrency users and steal recovery phrases.

Security researchers found Atlassian Rovo vulnerabilities that could expose Jira and Confluence data through prompt injection and malicious URLs.

A cyber attack on England’s Department for Education exposed around 607,000 records containing email addresses and phone numbers. Learn what happened and the cybersecurity risks.

Researchers warn that a 20-year-old IPMI vulnerability could allow attackers to compromise thousands of internet-exposed data center servers through weak BMC authentication.