In July 2025, the Nova ransomware gang stole cervical cancer screening data on 850,000 women held by Clinical Diagnostics (“Eurofins”). The lab paid them an undisclosed ransom amount, but that has not been the end of the lab’s problems. In May 2026, the Dutch Health and Youth Care Inspectorate concluded that the laboratory had failed…
What do identity risks, data security risks and third-party risks all have in common? They are all made much worse by SaaS sprawl. Every new SaaS account adds a new identity to secure, a new place where sensitive data can end up, and a new source of third party risk. Learn how you can protect…
Dysruption Hub is all over the breach news today. They report: Meriden, Connecticut, took city internet services and public Wi-Fi offline after officials reported an attempted disruption, limiting some municipal operations as police investigate. The city said emergency services were not affected. City officials disclosed the issue Feb. 17, saying the IT department responded immediately after identifying……
Part entrepreneurial adventure, part security history, Bernardo Quintero’s ‘Infected’ documents how the VirusTotal side project became a threat-intel cornerstone. The post Book Review: Infected – A Candid Look at VirusTotal’s Birth and Legacy appeared first on SecurityWeek.
Adobe has warned of a critical security flaw in its Commerce and Magento Open Source platforms that, if successfully exploited, could allow attackers to take control of customer accounts. The vulnerability, tracked as CVE-2025-54236 (aka SessionReaper), carries a CVSS score of 9.1 out of a maximum of 10.0. It has been described as an improper…
Europol has announced the takedown of distributed denial of service (DDoS)-for-hire services that were used to launch thousands of cyber-attacks across the world. In connection with the operation, Polish authorities have arrested four individuals and the United States has seized nine domains that are associated with the now-defunct platforms. “The suspects are believed to be…
Cybersecurity researchers have uncovered a Go-based malware called XDigo that has been used in attacks targeting Eastern European governmental entities in March 2025. The attack chains are said to have leveraged a collection of Windows shortcut (LNK) files as part of a multi-stage procedure to deploy the malware, French cybersecurity company HarfangLab said. XDSpy is…
