Introducing Sophos DNS Protection for Endpoints
Join the early access program for this new product.
The threat actor known as Jewelbug has been increasingly focusing on government targets in Europe since July 2025, even as it continues to attack entities located in Southeast Asia and South America. Check Point Research is tracking the cluster under the name Ink Dragon. It’s also referenced by the broader cybersecurity community under the names…
Stacey Saldanha-Olson reports: Two undisclosed patients filed a lawsuit April 15 after a Lawrence physical therapist breached more than 400 people’s medical data to target women who’d had breast augmentation surgery and other plastic surgery, according to documents filed in the U.S. District Court of Kansas. The undisclosed patients are suing through a class action…
Linet Amuli reports: Kenya’s digital health sector is facing a major cybersecurity crisis after hackers claimed to have stolen a massive trove of personal and medical data from M-TIBA, a Safaricom-backed mobile health platform. The alleged breach, said to involve over 2.15 terabytes of information, could expose the records of up to 4.8 million users,……
Connor Jones reports: Researchers in Austria used a flaw in WhatsApp to gather the personal data of more than 3.5 billion users in what they believe amounts to the “largest data leak in history.” The messaging platform allows users to look up others’ details by inputting their phone numbers. The feature, which has been part……
FRESH BREACH — LENA HEALTH BREACH PREVIEW — FULL LEAK COMING SOON by FulcrumSec – 10 hours ago Lena Health is a company the world will be better off without. To this end, we are working with a plaintiff attorney to contact the true victims of this breach, mostly patients of Lena’s main client, Houston Methodist Hospital, to 1)……
Cybersecurity researchers have disclosed a critical flaw impacting Salesforce Agentforce, a platform for building artificial intelligence (AI) agents, that could allow attackers to potentially exfiltrate sensitive data from its customer relationship management (CRM) tool by means of an indirect prompt injection. The vulnerability has been codenamed ForcedLeak (CVSS score: 9.4) by Noma Security,