-
Japanese media group Nikkei has disclosed two employee email account compromises involving Google Workspace and Microsoft 365. The Nikkei email breaches may have exposed personal information and allowed attackers to distribute 9,000 phishing emails. The incidents occurred several weeks apart, with unauthorized access in July and September. However, Nikkei has not confirmed a connection between…
-
A former infrastructure engineer has received a 32-month prison sentence after locking administrators out of thousands of devices on his employer’s network. The engineer extortion sentence follows a failed attempt to demand 20 bitcoin, worth approximately $750,000 at the time. Daniel Rhyne, 57, of Kansas City, Missouri, pleaded guilty over the attack against an industrial…
-
OpenAI plans to introduce invisible watermarks in eligible ChatGPT and Codex text outputs across the European Union. The ChatGPT text watermarking rollout will use a technology called textGrain, which creates detectable statistical patterns through subtle changes in word selection. According to the company’s announcement, the rollout will take place over the coming weeks. Readers will…
-
Attackers are scanning for a critical Rejetto HFS vulnerability that could let them forge administrator sessions and execute code remotely. Security researchers have detected probes targeting the flaw, although they have not disclosed successful compromises. Tracked as CVE-2026-61500, the weakness affects Rejetto HFS versions 3.0.0 through 3.2.0. The open-source HTTP File Server supports self-hosted file…
-
Italy’s data protection authority has fined IQVIA €7 million, approximately $7.8 million, over its handling of patient information. The IQVIA data privacy fine follows findings that health records described as anonymous could still allow individuals to be identified. The regulator, known as GPDP, examined a database containing information about roughly one million patients. IQVIA’s Italian…
-
The Denmark population registry breach has exposed personal information belonging to approximately 8.8 million people. Authorities say attackers misused a private Danish company’s legitimate access to the Central Population Register, known as CPR. The affected records include current residents, people who have moved abroad and deceased individuals. Consequently, the total does not represent 8.8 million…
-
Dell has released fixes for a critical Dell System Update flaw that could let unauthenticated remote attackers execute code with root privileges. The company urges customers to upgrade promptly, warning that successful exploitation could compromise the application and its underlying operating system. The vulnerability, tracked as CVE-2026-86360, affects Dell System Update (DSU), a command-line deployment…
-
South Korea’s financial authorities have launched investigations following cybersecurity incidents at several major banks. The South Korea bank breaches have also raised questions about possible AI-assisted attacks, although officials have not confirmed that connection. The Financial Services Commission (FSC) held an emergency meeting after reports of incidents involving Shinhan Bank and KB Kookmin Bank. Officials…
-
The alleged developer of Ploutus ATM malware has appeared in a Nebraska federal court following his arrest. US authorities accuse Anibal Alexander Canelon Aguirre of helping lead a scheme that stole millions from cash machines. Canelon Aguirre, 50, also uses the names “Prometheus” and “The Engineer,” according to investigators. Prosecutors link the alleged operation to…
-
Meta’s personal AI assistant Muse faces scrutiny over how it gathers and remembers information about people beyond its users. Meta Muse privacy concerns include profiles of friends and relatives, sensitive information gathering and reports of actions without expected approval. Meta introduced Muse in September 2026 to handle tasks such as sending emails, organizing travel and…