An insider data breach at FinWise may have impacted 689,000 customers

At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on GitHub, experts warn. The malware, which briefly infected…

The attack, which is linked to ShinyHunters, has reportedly compromised data relating to 7.4 million unique email addresses

AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use threat

Fifteen ransomware groups have claimed shutdown on BreachForums; experts warn of rebrands and copycats

Learn Medusa ransomware indicators, triage, containment, forensics, recovery, and prevention strategies to survive multi-extortion attacks.

The automotive manufacturer is still not fully operational after the recent cyber attack

Details on how the insider attack unfolded aren't clear, but FinWise has taken action to prevent future incidents

Apple just fixed more than 50 security flaws across iPhone, iPad, Mac, Watch, TV, and Vision Pro.

FileFix campaign hides PowerShell script and encrypted EXEs in JPGs via multilingual phishing

A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in default configuration

An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025