Latest
DHS Confirms Hackers Breached HSIN Federal Info-Sharing Network
The Department of Homeland Security has confirmed that attackers successfully compromised the Homeland Security Information Network (HSIN), a sensitive platform used to share information between feder...
CISA Confirms BlueHammer Flaw Now Used by Ransomware Gangs
The Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Monday that ransomware groups have moved beyond targeted zero-day attacks and are now broadly exploiting BlueHammer, a high-sev...
DOGE-Linked Studio Installs Trackers on Federal .Gov Sites
If you have visited a federal government website recently to check on benefits, look up healthcare information, or research your legal rights, your visit may have been tracked. The National Design Stu...
Data Breach Scam Notifications: How to Spot and Stop Them
When a major data breach makes headlines, cybercriminals are paying close attention. Within hours of a publicly announced incident, fraudsters begin launching waves of fake notifications designed to l...
ShinyHunters Claims 3.1TB Stolen in NAIC Oracle Zero-Day Breach
The National Association of Insurance Commissioners (NAIC) has confirmed a significant data breach after the hacking group ShinyHunters posted what it claims is 3.1 terabytes of stolen data online. Th...
Vermont Data Privacy and Surveillance Act: What It Means in 2028
Vermont's Governor signed S.71, the Vermont Data Privacy and Online Surveillance Act, into law on June 16, 2026, making Vermont one of the strictest states in the country on consumer data protection. ...
49% of Ransomware Victims Lose Data Before Detecting the Attack
Ransomware has always been a painful problem, but a new report reveals just how badly detection is failing: nearly half of all ransomware victims had their data stolen before they even realized an att...
EDR-Killing Ransomware Frameworks Demand a Layered Defense
Ransomware groups have quietly rewritten the rules of their own attacks. Rather than racing to encrypt files before security tools can respond, many are now taking a more calculated first step: disabl...
LastPass Supply Chain Breach via Klue: What Was Taken
LastPass has confirmed a data breach stemming from a supply chain attack on Klue, a third-party vendor. Hackers stole OAuth tokens from Klue's environment, which gave them access to LastPass's Salesfo...