Spies Inside the Phone Network: SilentAir Diverted Texts and Grabbed Login Codes the Moment They Arrived
Text-message login codes rest on a simple assumption: only your phone receives the message. A report published this week describes...
Headlines
Police Pull the Plug on Gootloader, CastleRAT and StealC and Recover 6.4 Million Stolen Logins. Hacked WordPress Sites Were Part of the Machine
For years, a familiar pattern sat behind many ransomware attacks. Someone searching for a contract template or legal form clicked...
Maersk Says Hackers Took Data From a System It Inherited Through an Acquisition. A Ransomware Gang Wants $5 Million: Your Questions Answered
One of the world’s biggest container carriers is dealing with a data theft that started not in its core systems...
From One Vendor’s Stolen Credentials to Dozens of Customer AWS Accounts: A Timeline of the Qubole Trusted-Access Breach
Many companies let outside software providers into their cloud accounts through a standing trust relationship, set up once and then...
Chrome’s Eighth Exploited Zero-Day of 2026 Is Fixed. Here Is the Year’s Timeline, and Why Restarting the Browser Matters
Google has shipped another emergency Chrome update after confirming that attackers already have a working exploit for a newly reported...
Hearing-Care Provider Amplifon Americas Says a January Intrusion Exposed Health and ID Data for More Than 1.3 Million People
Amplifon Americas, the US hearing health care business of Italy’s Amplifon, is notifying more than 1.3 million people that their...
A French Bank Says Attackers Moved Its Own Money After Coming In Through a Vendor. It Puts the Loss in the $133 Million Range
When a bank is hit, the first question is usually whether customer deposits moved. Crédit Mutuel Arkéa’s answer this week...
Ahold Delhaize Puts a Price Tag on Its October Cyberattack: Up to $280 Million in Lost Sales
When a grocery chain takes systems offline to contain a cyberattack, the damage shows up weeks later in the earnings...
FBI and CISA Tell Grocery, Healthcare and Cold-Chain Operators: Pull Refrigeration Controllers Off the Public Internet
Your freezers may not feel like cybersecurity equipment, but federal agencies say attackers are treating them that way. On Thursday,...
A 2025 Network Move Left a DigiCert Archive Reachable From the Internet. Customer Contact Details and Some ID Documents Were Read
DigiCert, one of the best-known issuers of the security certificates that put the padlock on websites, has confirmed that someone...
