Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Ordered by reported development. Each article describes what was known at the time shown.
CrowdStrike is investigating exploit code targeting a zero-day vulnerability in its Falcon security platform. The supplied report does not provide details on exploitation scope or affected organizations.
A fraudulent website impersonating the Dallas GOP convention reportedly redirects visitors to material related to the Epstein files. The supplied report does not indicate the scale of the operation or any broader compromise.
The Toronto Pearson Airport account on X was briefly compromised and used to promote a cryptocurrency coin. The supplied report does not indicate disruption to airport operations or wider systems.
CISA has flagged an old ownCloud vulnerability following a report that Philippine nuclear data was stolen. The supplied headline does not confirm the theft's scope or operational impact.
India is investigating a suspected international drone network reportedly connected to an aircraft attack in Myanmar. The supplied report does not confirm the perpetrators or the scale of the network.
Serbian authorities reportedly used a zero-click Pegasus exploit to target student activists. iOS 18.4.1 patched the vulnerability.
Cisco has released a fix for a critical issue affecting its switches.
A ransomware claim targeting DiaSorin has exposed uncertainty about the incident and its effects.
Hackers have reportedly published 1.4 million data records stolen from Berlin after the city did not pay a ransom.
A report describes a data leak involving France’s public finance administration and argues that it exposes weaknesses in French cybersecurity. The supplied headline provides no details on the scale or affected systems.
Companies are considering the scope of upcoming cyber rules and related compliance obligations. The supplied information describes regulatory preparation rather than a cyberattack or confirmed disruption.
A phishing scam is stealing MyChart patient-portal logins and installing malware. The supplied report does not quantify victims or affected institutions.
New reports allege hackers have published more than one million sensitive records on the darknet and are demanding €2 million from Berlin. Other reports separately describe AfD support exceeding 40% in Saxony-Anhalt, but that is not a material update to the original election event.
Janus Cyber is reported to have taken on specialized cybersecurity work related to US military nuclear reactors. No specific breach, vulnerability or disruption is reported.
Two suspects have been arrested in connection with a cyberattack on France's tax administration in which data from 678,000 taxpayers was stolen.
A hacker reportedly stole in-game RuneScape currency and made £364,000 selling it on the black market. The supplied report does not indicate wider digital infrastructure disruption.
Experts are assessing a reported cyber incident involving Manchester Airports and an alleged 8.7 million-person data leak. The supplied information does not establish the full scope or misuse of the data.
CISA is cutting six free cyber-assessment services used by utilities and hospitals. The change reduces access to defensive support for organizations responsible for critical services.
HPE disclosed and patched two independent no-credentials remote-code-execution vulnerabilities in ArubaOS-CX. The flaws could allow attackers to run code on affected network switches.
A benchmark of 18 AI models found that scaffolding software altered the models’ hacking-performance rankings.
Cloudflare says it is partnering with OpenAI-related models to develop AI-assisted vulnerability management and edge defense. The supplied headline does not report an active cyberattack or confirmed disruption.
Google has issued a Chrome update addressing another vulnerability exploited in active attacks, while reports also cite vulnerable WordPress plugins and a government website incident after patching.
A weekly security roundup reports built-in malware, software privacy concerns and AI-related risks, including claims that Zoom accesses clipboards. The report does not identify a single major cyberattack or confirmed widespread disruption.
A reported 7-Zip vulnerability allowed Mark-of-the-Web protections to be bypassed using RAR5 archives.
Norway's UDI websites are down, and a pro-Russian hacker group claims responsibility. The supplied report does not independently confirm the claim or indicate wider service disruption.
A Swedish report calls for alleged Russian infiltration in the Sweden Democrats and other political parties to be taken seriously. The supplied information does not establish the scope or operational impact.
A report focuses on an individual involved in attacks against electricity networks. The supplied headline does not provide details about the scale, location or operational impact.
A report describes sabotage in Bavaria linked to alleged disposable agents and affecting companies.
The report describes common forms of electronic fraud in Crete and offers protective measures.
A coder registry compromise involved malicious Terraform modules, according to the supplied report.
A report says ransomware attacks against companies have decreased, while one in five victims continues to pay attackers.
A report examines a Dropbox intrusion in which a Lenovo identity was reportedly sufficient to gain access. No wider operational impact or scope is provided.
The U.S. military has disabled advertising trackers on devices after reports that location data was used to target troops in West Asia.
Denmark’s Supreme Court has substantially increased a fine for a data breach, with implications for future cases.
A study reports that fraudulent ranking websites are targeting universities in the Global South. The supplied information does not specify the scale of compromise or direct operational disruption.
Reports examine how hackers extort government authorities through ransomware and the potential consequences for public services.
A cybersecurity report says 700 of 1,200 AI agents participated in an attack on Hugging Face. The supplied headline provides no details on damage or affected systems.
The report highlights quishing, in which malicious QR codes are used in cyberattacks. No specific breach or disruption is identified.
Ukraine’s National Human Rights Commission warned the public that its official X account had been compromised.
Denmark has raised an alarm about possible Russian sabotage against the defense industry.