Resources

A routine call to Walmart may have left customers with more than a solved shopping problem: a lawsuit says it may have left behind a biometric voiceprint, too.

Healthcare and pharmaceutical distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and data theft.

On August 7, The Register reported that the extortion group ShinyHunters had dumped data stolen from Abbott’s Cancer Diagnostics business.

A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to a data extortion group known as UNC6671.

ReliaQuest has disclosed a social engineering attack in which threat actors impersonated members of its security team.

The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July.

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments.

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey.

In 2026, the public sector is no longer defending a traditional perimeter. Instead, they are defending a complex web of interconnected trust relationships against adversaries that now operate at machine speed.

Cushman & Wakefield was the victim of a cyberattack — and now it faces a proposed class action for allegedly failing to protect former and current clients’ personal information.

The criminal extortion group ShinyHunters has struck Instructure a second time in less than a year, claiming to have stolen records tied to 275 million users across nearly 9,000 schools worldwide.

All cyberthreat actors by design are elusive, but none may be more so than the amorphous hacking group known as Scattered Spider.