Breaches, ransomware, defence and resilience
A joint advisory from US and international agencies says the group breaks in through stolen passwords, unpatched internet-facing devices and VPNs, wipes…
Fraudsters impersonated Intesa Sanpaolo’s CEO and a senior lawyer to persuade Fideuram’s chair to approve transfers, according to Reuters. About €53 million…
Oneonta City School District cancelled classes after a ransomware attack, following a closure in Jerome, Idaho. Attacks on education rose 54% last…
Email addresses and login details were taken, but Capcom says it has found no evidence that passwords or payment card data were…
The bugs, CVE-2026-109618 and CVE-2026-109619, can let an unauthenticated attacker run code on web servers. Fixed versions shipped on October 21 after…
The n0n group listed terminal operators, shipping lines and port IT suppliers across 18 countries. Researchers suspect a single shared vendor or…
A flaw in a file-sharing system at the Defense Manpower Data Center left Social Security numbers and service records for current and…
The bank's deployment of Hawk's AI model targets a problem rule-based compliance systems can't solve on their own: too many false alerts…
SitusAMC, which handles real-estate loan and mortgage functions for more than 1,500 lenders, disclosed a November breach that exposed banks' accounting records…
CISA, the FBI and NSA say an Iranian-affiliated group has been manipulating Rockwell Automation and Siemens industrial controllers since at least March,…
West Pharmaceutical Services took systems offline globally after a May breach disrupted manufacturing, shipping and receiving — underscoring how concentrated a single…
Enhabit Home Health & Hospice says attackers used stolen credentials at a third-party physician communication platform to reach clinical data on more…