Verified cybersecurity, fraud and digital-banking signals with decision context, affected audiences and practical actions.
Researchers linked a multiyear intrusion campaign to a China-nexus actor targeting medical research organizations in the United States and Canada. Cybersecurity Dive published the underlying report or notice on 2026-06-15, placing the event within
French authorities investigated unauthorized access involving Tchap, the government messaging service, affecting more than 73,000 accounts. SecurityWeek published the underlying report or notice on 2026-06-15, placing the event…
Authorities in the United States, France and Italy coordinated action against a major website used to create and distribute non-consensual sexual deepfakes. CyberScoop published the underlying report or notice on 2026-06-12, placing the event
A bankruptcy administrator approved a proposed $47 million settlement fund for people affected by the 23andMe data breach. The Record published the underlying report or notice on 2026-06-12, placing the event within the month’s
US authorities and private-sector partners disrupted a China-based cybercrime network that investigators linked to approximately $1.9 billion in victim losses. CyberScoop published the underlying report or notice on 2026-06-12, placing the event within the
Google Threat Intelligence reported that ShinyHunters exploited Oracle PeopleSoft systems in the education sector and used stolen information to extort universities. Google Threat Intelligence published the underlying report or notice on 2026-06-11, placing the
Europol said an international operation dismantled the AudiA6 cryptocurrency laundering service, which allegedly processed about €336 million connected to ransomware groups. Europol published the underlying report or notice on 2026-06-11, placing the event within
Proofpoint reported that suspected North Korean actors used fake recruitment and coding assignments to infect developers and steal cryptocurrency. Proofpoint published the underlying report or notice on 2026-06-09, placing the event within the month’s
Unit 42 observed attackers contacting employees through Microsoft Teams while impersonating IT support and guiding targets into remote access or credential theft. Palo Alto Networks Unit 42 published the underlying report or notice on
Google Threat Intelligence documented an ongoing campaign targeting US law firms, where attackers sought access to confidential legal and client information. Google Threat Intelligence published the underlying report or notice on 2026-06-05, placing the
HP patched a critical vulnerability in several Poly internet-connected conference phones that could let an unauthenticated attacker compromise a device and capture sensitive audio. CSO Online published the underlying report or notice on 2026-06-02,
The Consumer Financial Protection Bureau said it was working to ensure consumers affected by Bilt’s move to a new banking partner received appropriate remedies. Consumer Financial Protection Bureau published the underlying report or notice
Attackers manipulated Meta’s automated support process to take over prominent Instagram accounts and replace their content. KrebsOnSecurity published the underlying report or notice on 2026-06-01, placing the event within the month’s verified security record.
On May 28, 2026, SecurityWeek reported that forticlient management flaw is being exploited in active attacks. The account describes a concrete security, privacy or fraud consequence rather than…
The event shows how cyber incidents can interrupt real services, production and recovery work beyond the IT department.
People should treat the event as a possible identity, privacy or impersonation risk and watch for follow-on misuse.
People should treat the event as a possible identity, privacy or impersonation risk and watch for follow-on misuse.
On May 26, 2026, CSO Online reported that stolen microsoft 365 tokens can bypass multifactor authentication. The account describes a concrete security, privacy or fraud consequence rather than…
On May 22, 2026, SecurityWeek reported that grafana breach traced to an unrotated token after supply-chain attack. The account describes a concrete security, privacy or fraud consequence rather…
People should treat the event as a possible identity, privacy or impersonation risk and watch for follow-on misuse.
On May 21, 2026, KrebsOnSecurity reported that kimwolf botnet administrator arrested after hijacking home devices. The account describes a concrete security, privacy or fraud consequence rather than a…
The event shows how cyber incidents can interrupt real services, production and recovery work beyond the IT department.
People should treat the event as a possible identity, privacy or impersonation risk and watch for follow-on misuse.
On May 20, 2026, The Record reported that crypto atm scams caused millions in losses across us states. The account describes a concrete security, privacy or fraud consequence…
