Tag: security

11 million students possibly at risk after classroom software used by millions hacked

Infinite Campus hit by ShinyHunters via Salesforce account breach Names and staff contact info stolen; customer data unaffected Group added company to leak site, demanding ransom by March 25 amid wider Salesforce-targeting campaign Popular student information system (SIS) Infinite Campus has confirmed suffering a data breach at the hands of…

Read More

Millions possibly affected by data breach at dermatology giant QualDerm

QualDerm cyberattack exposed sensitive healthcare and personal data of 3.1 million people Breach included names, medical records, insurance info, and government IDs No evidence of misuse yet; company reported incident to HHS and is notifying affected individuals Dermatology management services giant QualDerm suffered a cyberattack in late 2025 which saw…

Read More

‘We are continuing to monitor the situation closely’: Crunchyroll investigating breach which reportedly stole data on 6.8 million users

Crunchyroll confirms cyberattack via third-party vendor Hacker accessed support agent’s Okta account, exfiltrated 8M tickets with 6.8 million emails Attacker demanded $5m ransom; company investigating, payment data not directly compromised Anime streaming platform Crunchyroll has confirmed suffering a cyberattack and said it was currently investigating claims of data theft. A…

Read More

This tax-themed malvertising attack can blind security software before it arrives — and then unleashes ransomware

Hackers exploit US Tax Day rush with phishing and malware Fake tax form sites via Google Ads drop ScreenConnect and disable defenses Campaign sets stage for ransomware, also seen with fake Chrome updates Cybercriminals are once again taking advantage of the short deadline for the upcoming tax filing window to…

Read More

Signal is being targeted by Russian hackers in a huge new phishing campaign, FBI says

FBI and CISA warn of Russian espionage campaign targeting messaging apps Phishing and social engineering used to hijack Signal and other CMA accounts Thousands of victims’ accounts compromised, including officials, military, and journalists The Federal Bureau of Investigation (FBI) and the US Cybersecurity and Infrastructure Security Agency (CISA) are warning…

Read More

Watch out for suspicious Microsoft Azure Monitor alerts – it could be this shifty new callback phishing attack

Phishing campaign abuses Microsoft Azure Monitor alerts Fake “suspicious charges” emails bypass protections using legitimate domain Attackers craft alerts with custom messages, similar to past Google Tasks and PayPal abuse Microsoft Azure Monitor is the latest in the long line of legitimate tools being abused in phishing attacks. If you…

Read More