⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Scottish government has disclosed a data breach at its prosecutor's office, caused by a third-party vendor. The breach may extend beyond the initial agency, as the vendor reportedly provided services to other government bodies.
In a significant legal victory for cybersecurity, a UK court sentenced Justin Swaddle, a member of the decentralized cybercrime collective known as The Com, to two years in prison. Swaddle operated under the digital aliases Epstein, Rugen, and Moscow across platforms like Discord, Snapchat, and Telegram, and pleaded guilty to multiple charges of blackmail and child abuse.
The Netherlands National Cyber Security Centre (NCSC) has issued a warning about active exploitation of a macOS authentication bypass vulnerability. Hackers are targeting the Screen Sharing feature, using a publicly available exploit code to gain unauthorized access to systems.
The Americas faced the highest ransomware burden globally in the first half of 2026, with 2,188 documented attacks representing over 57% of worldwide incidents. North America experienced a diverse, multi-group RaaS economy led by Qilin, while South America saw concentrated activity from operators like The Gentlemen.
Stolen OAuth tokens provide an alternative entry path into Google Workspace beyond traditional phishing. Material Security emphasizes that defenses must address the full attack chain, including token abuse, to protect Gmail, Drive, and integrated services.
Google announced HEIR, an open-source compiler for homomorphic encryption that allows computations on encrypted data without ever decrypting it. This tool aims to make private AI practical by enabling cryptographically secure data processing in untrusted environments, such as cloud services.