Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
U.S. states levied $3.45 billion in privacy-related fines against companies in 2025 — more than the previous five years combined — driven by aggressive enforcement of laws like California's CCPA and a new multi-state regulatory coalition.
Chinese national Xu Zewei has been extradited from Italy to the United States and formally charged for his alleged role in the HAFNIUM espionage campaign, which compromised more than 12,700 U.S. organizations by exploiting Microsoft Exchange Server zero-days during the COVID-19 pandemic.
Tennessee Governor Bill Lee has signed legislation banning cryptocurrency ATMs effective July 1, citing rampant fraud targeting vulnerable residents. The move makes Tennessee the second state to outlaw the kiosks, following Indiana's ban in March.
Oral arguments in Chatrie v. United States suggest a majority of justices will rule that police geofence searches of cell phone location data constitute Fourth Amendment searches requiring a warrant.
Justices from across the ideological spectrum pressed attorneys on both sides during a two-hour session in Chatrie v. United States, a case that could reshape how law enforcement collects Americans' location data.
A fresh wave of the GlassWorm supply chain campaign has seeded 73 'sleeper' extensions into the OpenVSX marketplace, six of which have already been activated to deliver malware while the remainder are considered dormant or suspicious.
Threat actors abused a flaw in Robinhood's account creation process to inject phishing content into legitimate emails sent from noreply@robinhood.com, tricking customers into thinking their accounts had suspicious activity.
Xu Zewei, a Chinese national accused of conducting cyberespionage on behalf of China's Ministry of State Security, has been extradited from Italy to the United States to face criminal charges tied to the Silk Typhoon hacking group.
A Beijing-linked influence operation attempted to interfere with Tibetan parliament-in-exile elections using AI-generated imagery and inauthentic social media accounts, but researchers say the campaign gained virtually no organic traction.