Rockstar confirms limited data access tied to third-party cloud breach
Rockstar confirmed limited company-data access through a third-party breach while rejecting the broader impact implied by attackers’ extortion claims.
3 min readOpen brief →
Verified cybersecurity, fraud and digital-banking signals with decision context, affected audiences and practical actions.
TOPIC HUBSBrowse cybersecurity topics →
Stryker warned cyberattack costs could affect its annual results
Stryker warned cyberattack costs could affect its annual results. Cybersecurity Dive documented the development in April 2026. SecBriefs checked the central claim against a primary record or genuinely…
3 min readOpen brief →
Snowflake customers faced exposure after integration-provider token theft
Snowflake customers faced exposure after integration-provider token theft. BleepingComputer documented the development in April 2026. SecBriefs checked the central claim against a primary record or genuinely independent reporting…
3 min readOpen brief →
Medusa ransomware can move from exposed server to encryption within a day
Medusa ransomware can move from exposed server to encryption within a day. Microsoft Security Blog documented the development in April 2026. SecBriefs checked the central claim against a…
3 min readOpen brief →
FCC action targets phone networks carrying bank impersonation scams
FCC action targets phone networks carrying bank impersonation scams. FCC documented the development in April 2026. SecBriefs checked the central claim against a primary record or genuinely independent…
3 min readOpen brief →
Progress ShareFile flaws can be chained for unauthenticated compromise
Two ShareFile flaws can be chained from authentication bypass to remote code execution, making exposed Storage Zones Controller systems a priority for patching.
3 min readOpen brief →
More than 14,000 F5 BIG-IP APM systems remained exposed during active exploitation
A critical F5 access-layer flaw was being exploited while thousands of internet-facing systems still appeared exposed. worldwide. today.
3 min readOpen brief →
TrueConf zero-day let attackers push malicious updates to connected endpoints
A compromised conferencing server could turn its trusted update mechanism into a malware-delivery channel for every connected endpoint.
3 min readOpen brief →
EvilTokens turns Microsoft device-code login into a phishing and BEC service
A phishing service abuses Microsoft’s legitimate device-login flow to obtain tokens that can support account takeover and business email compromise.
3 min readOpen brief →
NoVoice malware reached 2.3 million Android downloads through Google Play
Malware hidden inside ordinary-looking Google Play apps turned old Android flaws into a large-scale device and messaging risk.
3 min readOpen brief →
Google patched Chrome zero-day CVE-2026-5281 after exploitation in the wild
Google confirmed active exploitation of a Chrome use-after-free flaw and released an emergency update across major desktop platforms.
3 min readOpen brief →
Malicious Axios releases put developer systems and credentials at risk
Malicious Axios releases briefly exposed developer systems to credential theft, showing how a trusted dependency can spread risk through automated builds.
3 min readOpen brief →
Lloyds app bug exposed transaction details across customer accounts
A Lloyds software update exposed private transaction details across customer accounts, creating privacy and impersonation risk without reported account takeover.
3 min readOpen brief →
International email-fraud case shows how trusted invoices redirect millions
A cross-border fraud conviction shows why familiar invoices and apparently trusted mailboxes cannot replace independent approval for consequential payments.
3 min readOpen brief →
FCC proposal targets call-center data access and overseas robocall scams
The FCC opened a rulemaking on offshore support, sensitive customer data and illegal robocalls; the proposed protections are not yet final.
3 min readOpen brief →
Puerto Rico cyberattack cancelled driver and vehicle-service appointments
A cyberattack forced Puerto Rico to cancel driver and vehicle-service appointments, demonstrating public impact even without confirmed data theft.
3 min readOpen brief →
Dutch Finance Ministry breach disrupted employees but spared public services
Unauthorized access disrupted work inside the Dutch Finance Ministry, while officials said tax, customs and benefits services remained available.
3 min readOpen brief →
Russian-linked phishing targeted officials’ secure messaging accounts worldwide
Russian-linked actors targeted messaging accounts by stealing verification codes and device access, rather than breaking the applications’ underlying encryption.
3 min readOpen brief →
Navia benefits breach exposed identity data for nearly 2.7 million people
A benefits-provider breach exposed durable identity data for nearly 2.7 million people across many employers and dependent relationships.
3 min readOpen brief →
Authorities disrupted botnets built from millions of connected devices
International authorities disrupted botnets built from millions of connected devices, but vulnerable routers and cameras can still be recruited again.
3 min readOpen brief →
TELUS Digital confirmed system breach while theft claims remained uncertain
TELUS Digital confirmed unauthorized system access, while the claimed theft volume and attacker attribution remained unconfirmed during the investigation.
3 min readOpen brief →
FBI warns of phishing that impersonates officials to divert permit payments
The FBI warns that convincing emails using real permit details and officials’ names are being used to target payment processes.
3 min readOpen brief →
Proton Mail subscriber metadata was shared with Swiss authorities and passed to the FBI
A reported Proton Mail disclosure highlights how payment-related account metadata can differ from protected message content and still become relevant to investigations.
3 min readOpen brief →
Ransomware’s public-safety consequences demand stronger prevention efforts
CyberScoop authors say ransomware’s routine disruption of services and infrastructure demands attention equal to its documented scale and wider public-safety consequences.
3 min readOpen brief →