-
Boston Scientific has confirmed a cybersecurity incident that took some of its technology systems offline and disrupted its ability to process and ship customer orders worldwide. The Boston Scientific cyber incident was detected on August 25. The medical-device company said the outage affected several IT operating systems and business applications. Boston Scientific has activated its…
-
Hackers claim they have stolen and are selling 4TB of databases and source code from AI recruiting company Mercor. The alleged Mercor data breach has not been independently confirmed, and the company had not publicly commented on the new claim at the time of reporting. Mercor works with major AI companies, including OpenAI, Google, Meta…
-
Pan American Group LLC has disclosed a data breach after an unknown attacker accessed company servers and obtained files containing employee information. The Taco Bell operator breach occurred in April 2026. Pan American Group says it found suspicious activity on April 9 and later confirmed that an attacker had accessed certain servers between April 8…
-
Microsoft Paint may embed a hidden identifier into AI-generated images, even when a Copilot+ Windows PC creates the image locally. Researcher Xusheng Li says the identifier could allow Microsoft to connect an image to records related to an account, device, IP address or prompt. The Microsoft AI image watermark is not visible to users. It…
-
Ubiquiti has released urgent security updates for 22 vulnerabilities across its UniFi ecosystem. Twenty-one of the flaws carry Critical severity ratings, with several allowing attackers on a reachable network to bypass authentication, escalate privileges or run commands. The Ubiquiti UniFi vulnerabilities affect UniFi OS and a wide range of products, including gateways, routers, storage systems,…
-
The Los Angeles County Museum of Art has disclosed that a cyberattack exposed sensitive customer and employee information, including Social Security numbers and medical data. LACMA detected suspicious activity on July 11, 2025. The museum says the activity began four days earlier, and investigators confirmed that attackers had compromised its network in August 2025. The…
-
Researchers have identified an npm mirror phishing technique that uses package registries and public mirrors to host malicious redirect pages. Instead of infecting developers who download a package, attackers store harmful HTML files inside npm packages. Mirror services then copy those files and make them available from trusted developer-related domains. This approach can make phishing…
-
Researchers have uncovered AnonyMousKIT, a phishing-as-a-service platform that uses AI voice agents to target owners of stolen iPhones. The service reportedly helps criminals obtain passcodes, Apple Account credentials and two-factor authentication codes. Attackers can then unlock stolen devices, remove Activation Lock and access sensitive data. Researchers at SOCRadar say the platform has operated since early…
-
A Norway government DDoS attack has disrupted shared public digital services, causing login problems, slow responses and temporary outages. The attack began at 03:38 CEST on Monday and targeted infrastructure operated by the Norwegian Digitalisation Agency, Digdir, and its service provider Vivicta. Digdir supports key public-sector systems, including digital identity services, electronic signatures, secure digital…
-
Nutex Health says an unauthorised third party accessed and stole information from company servers during a cyberattack. The healthcare operator disclosed the incident in a filing with the US Securities and Exchange Commission. The company says some of the stolen material may contain private or confidential information. However, investigators have not yet determined exactly what…