Lawmakers are demanding answers from CISA after a contractor leaked agency secrets on a public GitHub account, raising concerns about the agency's internal policies and procedures.
Telehealth company Hims & Hers Health suffered a data breach through its third-party customer support platform, exposing protected health information including details tied to erectile dysfunction, hair loss, and mental health conditions.
At RSAC 2026, AI dominated conversations for the fourth consecutive year, with industry leaders debating agentic systems, SOC replacement, and whether humans can realistically stay in every security decision loop.
Anthropic unveiled Claude Mythos Preview on April 7, an LLM capable of finding and exploiting zero-days across major operating systems and browsers. The company's Project Glasswing initiative aims to keep the powerful model in defensive hands, but experts remain skeptical.
Fraud across Latin America's digital banking sector is accelerating faster than any other global region, fueled by social engineering, account takeovers, and mobile-focused attack chains, according to a new BioCatch report.
A researcher using the alias 'Chaotic Eclipse' publicly released a proof-of-concept exploit for an unpatched Windows zero-day called BlueHammer, citing frustration with Microsoft's Security Response Center. Security experts warn ransomware gangs and APT groups could weaponize the exploit within days.
The FBI's Internet Crime Complaint Center recorded nearly $20.9 billion in cybercrime losses in 2025, a 26% rise from the prior year and a staggering 400% increase since 2020, according to the agency's annual report.
Russian GRU-linked hackers known as Forest Blizzard exploited vulnerabilities in outdated SOHO routers to redirect DNS traffic and harvest Microsoft Office authentication tokens from over 18,000 networks without deploying any malware.
FINRA has officially launched the Financial Intelligence Fusion Center (FIFC), a secure portal designed to enable real-time threat intelligence sharing between FINRA and its member brokerage firms to combat cybersecurity and fraud threats.
Federal agencies issued an urgent joint warning that Iranian government-linked hackers are actively disrupting programmable logic controllers and SCADA systems at American critical infrastructure facilities, with new victims reported since March.