Security Week

Browser phishing has surged by 140%, with zero-hour phishing attacks rising 130%, driven by increased browser reliance, zero-day vulnerabilities, and advanced criminal tactics.

Nigerian national Matthew Akande, 36, appeared in a US court facing multiple charges, including computer intrusion, wire fraud, and identity theft, for allegedly hacking US tax preparation companies.

Lee Enterprises confirmed that a recent cyberattack on its network involved ransomware, with attackers encrypting critical applications and stealing files.

The DOGE website was hacked due to vulnerabilities, allowing unauthorized content to be posted.

Microsoft has patched CVE-2025-24989, a critical privilege escalation vulnerability in Power Pages that has been exploited in attacks.

Finastra, a British fintech firm, has begun notifying individuals affected by a data breach that occurred between October 31 and November 8, 2024.

The Italian government denied using spyware to spy on journalists and activists but confirmed that at least seven Italian cellphones were hacked with military-grade surveillance technology.

A cyberattack on Hospital Sisters Health System (HSHS) in August 2023 compromised the personal information of 883,000 individuals.

Two major data breaches have impacted hundreds of thousands of individuals at Asheville Eye Associates and Delta County Memorial Hospital District.

The UK telecommunications company TalkTalk has confirmed a data breach involving a third-party supplier’s platform after a threat actor, ‘b0nd,’ claimed to have stolen information on 18.8 million customers.

Chinese AI company DeepSeek blamed a cyberattack for preventing new user registrations, though existing users remained unaffected.