US insurance giant Farmers Insurance says more than a million customers had personal data nicked after a third-party vendor was compromised. The insurer, which sells

Cloud security vendor Zscaler says customers of Google’s Play Store have downloaded more than 19 million instances of malware-laden apps that evaded the web giant’s

Asia In Brief Australia’s University of Melbourne last year used Wi-Fi location data to identify student protestors. The University used Wi-Fi to identify students who

Infosec in brief PLUS The US Department of Justice has thanked Akamai, Amazon Web Services, Cloudflare, Digital Ocean, Flashpoint, Google, PayPal, and Unit 221B for

feature Thirty years ago, Netscape kicked off the first commercial bug bounty program. Since then, companies large and small have bought into the idea, with

Data I/O, a major electronics manufacturer whose customers include Amazon, Apple, Google, and Microsoft, notified federal regulators that it fell victim to a ransomware infection

Ransomware scum breached kidney dialysis firm Davita’s labs database in April and stole about 2.4 million people’s personal and health-related information. In a filing with

Exclusive A leading UK provider of criminal record checks for employers is handling a data breach stemming from a third-party development company. Access Personal Checking

Microsoft’s security team has published an in-depth report into ClickFix, the social engineering attack which tricks users into executing malicious commands in the guise of

Interpol’s latest clampdown on cybercrime resulted in 1,209 arrests across the African continent, from ransomware crooks to business email compromise (BEC) scammers, the agency says.

A US court sentenced a former developer at power management biz Eaton to four years in prison after he installed malware on the company’s servers.

Anthropic says it has scanned an undisclosed portion of conversations with its Claude AI model to catch concerning inquiries about nuclear weapons. The company created

Microsoft has reportedly stopped giving Chinese companies proof-of-concept exploit code for soon-to-be-disclosed vulnerabilities following last month’s SharePoint zero-day attacks, which appear to be related to

English speakers adept at social engineering are a hot commodity in the cybercrime job market. According to threat detection and response firm ReliaQuest, English-language social

Security researchers with Trail of Bits have found that Google Gemini CLI and other production AI systems can be deceived by image scaling attacks, a

It’s been more than 200 years since the United States issued a letter of marque allowing privateers to attack the vessels of foreign nations, but

A significant data theft at Orange Belgium has opened hundreds of thousands of its customers to serious cybersecurity risks. The telecom company confirmed that data

RapperBot, a botnet-for-hire blamed for hundreds of thousands of DDoS attacks, has been yanked offline by the Feds, who also hauled in its alleged Oregon-based