A new wave of cyber-attacks using Medusa ransomware has been linked to North Korean state-backed hackers, who continue to target the US healthcare sector despite recent indictments. Researchers from the Symantec and Carbon Black Threat Hunter Team said the attackers deployed… Read More "North Korean Lazarus Group Expands Ransomware Activity With Medusa"
A sophisticated phishing campaign impersonating cryptocurrency brokerage Bitpanda has been uncovered by cybersecurity researchers. The operation, detailed in a new advisory by the Cofense Phishing Defense Center, combines credential theft with extensive personal data harvesting, using a near-perfect replica of… Read More "Multifaceted Phishing Scheme Deceives Bitpanda Customers"
Employee negligence driven by shadow AI cost organizations more than any other type of insider risk last year, accounting for 53% of the $19.5m lost on average per business, according to DTEX. The security vendor’s Cost of Insider Risks 2026… Read More "Cost of Insider Incidents Surges 20% to Nearly $20m"
A Ghanaian national had pleaded guilty to scamming countless victims as part of a global fraud ring that engaged in romance fraud and business email compromise (BEC). The Justice Department announced the guilty plea for Derrick Van Yeboah, 40, late… Read More "Ghanaian Pleads Guilty to Role in $100m Romance Scam"
Millions of patients have had personal and health insurance information compromised after a breach at IT firm TriZetto Provider Solutions (TPS). A breach notification disclosure posted by the Office of the Maine Attorney General revealed that over 3.4 million individuals… Read More "TriZetto Provider Solutions Breach Hits 3.4 Million Patients"
US-based cybersecurity industry analyst firm IT-Harvest has announced the second cohort of its Cyber 150 awards – and 22% of winners are offering AI security products. Cyber 150 is IT-Harvest’s annual list of the fastest-growing mid-size cybersecurity companies worldwide. Introduced… Read More "AI Security Startups Dominate New Cyber Innovation Awards"
In a welcome relief for sysadmins, Microsoft released security updates for just 79 vulnerabilities in this month’s Patch Tuesday yesterday, including two publicly disclosed zero-days. Microsoft categorizes zero-day vulnerabilities as flaws which have either been exploited or disclosed without a… Read More "Microsoft Fixes Two Publicly Disclosed Zero-Days"
UK organizations were hit by far fewer cyber-attacks in February than the global average, but the year-on-year (YoY) increase was nearly four times the growth rate worldwide, according to Check Point. The security vendor’s February 2026 Global Threat Intelligence report revealed… Read More "Cyber-Attacks on UK Firms Increase at Four Times Global Rate"
Security and safety guardrails in generative AI tools, deployed to prevent malicious uses like prompt injection attacks, can themselves be hacked through a type of prompt injection. Researchers at Unit 42, Palo Alto Networks’ research lab, have found that large… Read More "Researchers Discover Major Security Gaps in LLM Guardrails"
A new malware campaign targeting human resources and recruiting staff has seen attackers distribute malicious files disguised as job applications. The operation, uncovered by Aryaka Threat Research Lab, uses a specialized tool known as BlackSanta to disable endpoint detection and response… Read More "BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign"
