Security Week

The DOGE website was hacked due to vulnerabilities, allowing unauthorized content to be posted.

Microsoft has patched CVE-2025-24989, a critical privilege escalation vulnerability in Power Pages that has been exploited in attacks.

Finastra, a British fintech firm, has begun notifying individuals affected by a data breach that occurred between October 31 and November 8, 2024.

The Italian government denied using spyware to spy on journalists and activists but confirmed that at least seven Italian cellphones were hacked with military-grade surveillance technology.

A cyberattack on Hospital Sisters Health System (HSHS) in August 2023 compromised the personal information of 883,000 individuals.

Two major data breaches have impacted hundreds of thousands of individuals at Asheville Eye Associates and Delta County Memorial Hospital District.

The UK telecommunications company TalkTalk has confirmed a data breach involving a third-party supplier’s platform after a threat actor, ‘b0nd,’ claimed to have stolen information on 18.8 million customers.

Chinese AI company DeepSeek blamed a cyberattack for preventing new user registrations, though existing users remained unaffected.

A vulnerability in Subaru's Starlink connected vehicle service allowed unauthorized access to customer accounts in the US, Canada, and Japan, according to security researcher Sam Curry.

PowerSchool announced a data breach in December 2024, compromising personal information of students and educators. The breach, identified on December 28, affected only PowerSchool's Student Information System (SIS), accessed through its customer support portal, PowerSource.

On the first day of Pwn2Own Automotive 2025, $382,750 was awarded for 16 zero-day vulnerabilities in car infotainment systems, EV chargers, and automotive operating systems.