Data leaks and breaches: what was exposed, how it happened and what to change in your own systems.
Part 1 ended on a 70-gigabyte breach in 2021. Since then, hacktivists derailed trains, dumped molten steel on camera, and reached grids in three countries.
Vercel confirmed a security breach on April 18-19, 2026, tracing back to a compromised third-party AI tool and a single employee's Google Workspace connection. Here is the full attack chain, what was actually exposed, and what you need to do right now.
On March 31, 2026, Anthropic published version 2.1.88 of Claude Code to the npm registry. Bundled inside was a 59.8 MB JavaScript source map file
Infostealers are commodity malware that silently harvest credentials, session tokens, and crypto wallets from infected machines. The Lumma Stealer infection that triggered the Vercel breach started with one. Here is how they work and why they are so effective.
The criminals behind the attack claim to have shared 400GB of patient data. The NHS stated it is working swiftly to confirm the validity of these files. The ransomware attack on the UK's National Health Service (NHS) continues to disrupt health services in London, with a significant amount of…
The joint investigation will thoroughly examine the extent of the data exposure in the massive breach and determine if 23andMe had sufficient safeguards in place to protect this sensitive information. UK and Canadian authorities have announced a collaborative investigation into the DNA testing…
Claire Tills, senior research engineer at Tenable, describes the methods of the hacking group Lapsus$ as bold, illogical and poorly thought out. The criminals attacked renowned companies such as Microsoft, Samsung, Nvidia, Vodafone, Ubisoft and Okta. They stole data and sometimes used ransomware…
A CEO bragged he'd unmasked Anonymous. Hours later, a SQL injection in his own CMS ended his career. The real attack chains behind hacktivism, tools included.
The hackers– who may have links to cybercrime group Lapsus$ – are said to have compromised accounts to make emergency data requests on people's accounts that are using Apple and Facebook services. Apple and Facebook parent company Meta provided user data to cybercriminals last year who…
Authentication remains one of the most painstaking challenges faced by cybersecurity professionals and researchers. This ranges from a small startup all th way to the biggest organizations. This longstanding and even fundamental element of security continues to cause everyone to have a headache.…
A major hack has resulted in approximately just a little over 600 million worth of cryptocurrency being stolen from Ronin. This was the gaming-focused blockchain network used for the NFT-based game Axie Infinity. Ronin said that roughtly 173,000 Ethereum and 25 million USDC – a stable coin…
Hackers have now begun to attack internet-connected universal power supply devices. They are targeting their control interfaces via multiple remote code execution vulnerabilities. In some of the cases, they changed the default usernames and passwords, according to an important advisory from the…
