These are the 26 largest and most consequential data breaches in financial services, current as of July 2026. They span banks, credit bureaus, payment processors, mortgage servicers, insurers, and the technology vendors that sit behind them, and many of the… Read More "26 Biggest Data Breaches in Finance (Updated July 2026)"
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Ravie LakshmananOct 09, 2026Vulnerability / Artificial Intelligence Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). “It’s an opt-in service informed by our experience using Claude to find… Read More "Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects"
Ransomware’s back office: What the ransom note won’t say
In March 2024, an affiliate of the BlackCat ransomware gang took to a cybercrime forum with a complaint. They’d carried out the attack on Change Healthcare – one of the largest healthcare data breaches in U.S. history – but never… Read More "Ransomware’s back office: What the ransom note won’t say"
Rhysida Publishes Berlin Government Data After €2m Extortion Demand Re
Berlin’s state government has confirmed that the Rhysida ransomware gang has published a stolen dataset on the dark web, after it refused to pay the threat actor’s extortion demand. The State of Berlin said Rhysida had demanded 30 bitcoins, equivalent… Read More "Rhysida Publishes Berlin Government Data After €2m Extortion Demand Re"
23 Biggest Data Breaches in Australia (Updated July 2026)
The biggest data breaches in Australia now stretch well past the Optus and Medibank era, and as of July 2026 the 23 largest and most consequential incidents range from the Ticketmaster and Live Nation Snowflake campaign, Canva, Latitude, and MediSecure… Read More "23 Biggest Data Breaches in Australia (Updated July 2026)"
OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
OpenAI said on Friday that it fired three safety researchers for a “breach of trust,” defending the dismissals after the trio accused the company of putting its corporate interests before safety as the reason for removing them. The ChatGPT maker… Read More "OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks"
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. “Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel,… Read More "Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories"
This week’s critical patch for NetScaler ADC and NetScaler Gateway is here
Nevertheless, it encouraged affected customers to upgrade to patched versions as soon as possible: 13.1-64.29 or later for the 13.1 series, and 14.1-73.46 or later for the 14.1 series of ADC and Gateway, and 13.1.37.283 or later for ADC 13.1-FIPS. … Read More "This week’s critical patch for NetScaler ADC and NetScaler Gateway is here"
New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay, instead of the previously leveraged NFCGate tool. The threat actors took the app, which is used to relay NFC data,… Read More "New NGate variant hides in a trojanized NFC payment app"
N-able Releases Hotfix for Critical Remote Code Execution Flaw
Managed IT software provider N-able has released a new hotfix that includes a patch for a critical remote code execution (RCE) vulnerability. CVE-2026-86218 is a critical pre-authentication RCE flaw in N-central, N-able’s remote monitoring and management platform. It was disclosed… Read More "N-able Releases Hotfix for Critical Remote Code Execution Flaw"