Aminu Abdullahi

Alation confirms unauthorized activity in one of its systems, leaving key questions about customer exposure, stolen data, and the attack’s scope.

Federal agencies warn that Medusa ransomware has hit more than 500 victims and can exploit newly disclosed vulnerabilities within 24 hours of release.

Microsoft linked more than 30 rotating domains to MacSync Stealer by correlating endpoint and network behavior across the malware’s attack chain.

A hacker claims to be selling 3.6 million Azure-linked employee records from McDonald’s, Vodafone, TCS, and others, but no breach is confirmed.

Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs.

A ShipMonk breach exposed personal data from nearly 14,000 Trezor customers, increasing the risk of phishing, impersonation, and physical attacks.

Taiwan says AI agents helped target government systems, highlighting how autonomous tools could accelerate cyberattacks and challenge defenders.

Trump’s cybercrime memo directs a federal program for vetted U.S. firms to conduct supervised operations against foreign criminal groups.

DentaQuest says a May 2026 network breach affected 15 million people, exposing Social Security numbers and dental or vision health information.

A fake voicemail phishing campaign uses redirects, cloud services, and counterfeit Google login pages to steal credentials from unsuspecting workers.

Researchers found suspected phishing sites impersonating WhatsApp and Instagram, showing why valid TLS certificates do not establish website legitimacy.

Hackers targeted major financial firms with help-desk vishing and real-time MFA interception. Here’s how the campaign worked and how to respond.