River Bank reports hackers deleted data stolen in June ransomware attack
The financial institution is working with a third-party forensic firm to investigate the incident.
general
20 articles
31,000 Records Compromised in Breach of Liechtenstein Companies and Foundations Register
Cyberattack exposed data of 31,000 people in Liechtenstein’s beneficial ownership register for companies and foundations. A cyberattack compromised data belo...
New bill proposes lifetime identity protection for OPM data breach victims
The OPM breaches, which compromised sensitive personal information of approximately 22 million individuals, including Social Security numbers and security cl...
Terra Security launches feature to automatically block attacks
Prevention is designed to bridge the time lag, often weeks long, that occurs between a confirmed security finding and the deployment of a code fix.
BTMOB Android malware service fragments into a complex ecosystem
BTMOB, an Android RAT sold as a malware-as-a-service, has seen its operation splinter into a vast network of resellers, source-code vendors, independent serv...
Critical Check Point Flaw Lets Unauthenticated Attackers Execute Commands on Management Servers
Check Point has disclosed a high-severity authentication bypass vulnerability that could allow unauthenticated attackers to execute arbitrary commands on vul...
Cato Networks introduces agentic threat prevention to counter AI-driven attacks
The new capability operates on Cato's cloud-native platform, leveraging existing network and security telemetry.
CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
The U.S.
cPanel Database Privilege Escalation Flaw Enables Full Administrative Access
CVE-2026-58048 is a critical privilege-escalation vulnerability in the database management functionality of cPanel & WHM. This flaw allows an authenticated c...
UK police legal database breach exposes officer details, increasing phishing risks
AI-related security breaches surge in UK firms, IBM report reveals
IBM's 2026 Cost of a Data Breach report highlights a 56% surge in AI-driven cyberattacks, leading to an average cost of $6 million per breach.
Dataminr report: attackers exploit vulnerabilities faster than organizations patch
Dataminr's 2026 Mid-Year Threat Landscape Report reveals that the median time to patch vulnerabilities has increased to 43 days, contrasting sharply with the...
Apple challenges UK government demand for encrypted user data
The challenge stems from a "technical capability notice" issued by the UK government, a secret legal order compelling access to user data, even if encrypted.
Critical vulnerability in DNA forensic software could compromise 30 years of evidence
A group of forensic and computer scientists discovered that an AI model can be used to undetectably alter digital scans of DNA evidence created since 1995.
EU begins enforcing AI Act, putting AI models under the microscope
Europe’s fight to regulate AI models moved from paper to practice on 2 August 2026, when the European Commission’s AI Office and national authorities began e...
ChocoShell Steals Microsoft 365 Tokens and Browser Sessions From Travelers
ChocoShell is a PowerShell-based infostealer used in Microsoft’s newly disclosed “CaptiveCrunch” campaign to steal Microsoft 365 tokens, browser sessions, an...
Digital executive protection is a strategic imperative for CEOs
In this interview with Help Net Security, Brian Hill, Field CISO, Client Advisory for BlackCloak, explains how attackers reach companies through the personal...
NullReceiver Is Harder to Discover but Still Exposes a Reusable Attacker Wallet
NullReceiver is a lean, stealth-focused evolution of DPRK’s blockchain C2 tradecraft that hides a reusable attacker wallet behind ordinary-looking Ethereum t...
Apple Removes Telegram From App Store Worldwide
Telegram Messenger was temporarily removed from Apple’s App Store in several countries late Monday, preventing new users from downloading the messaging platf...
OWASP’s subtractive security project measures the attack paths you erased
An attacker who talks a user into opening an attachment gets whatever that machine still permits: a service account with rights across the domain, an outboun...