Anthropic unveils AI tool for scientists and medical R&D: Claude Science aims to speed research and drug discovery, and improve collaboration www.healthcareinfosecurity.com/anthropic-un...

Two prolific ransomware gangs, INC Ransom and Lynx, have been linked to the FortiBleed operation discovered last month that penetrated more than 430,000 FortiGate firewalls to harvest credentials. www.databreachtoday.com/fortibleed-h...

Router ban by FCC risks freezing home security updates www.databreachtoday.com/fcc-router-b...

Why CIOs need an AI sovereignty strategy: IBM finds AI vendor disruptions are raising costs and operational risk. www.databreachtoday.com/cios-need-ai...

Weekly Data Breach Roundup: —A DeepSeek browser-only ransomware path —Trust in AI pen testing drops —Tata breach exposed Apple iPhone 18 Pro data —CISA flags BlueHammer in ransomware attacks —950 Oracle EBS systems exposed www.databreachtoday.com/breach-round...

Scattered Spider suspect Peter Stokes, 19, extradited from Finland to US, with the FBI noting that the teenager "exhibited substantial wealth for a person of his age," including apparently diamond-encrusted chains the read: Hack the Planet. www.databreachtoday.com/scattered-sp... #hacktheplanet

Azure password-spraying attack designed to bypass MFA defenses traced to threat actor targeting deprecated OAuth 2.0 authentication flow. www.bankinfosecurity.com/azure-passwo...

Car-manufacturing giant Nissan and the U.S. National Association of Insurance Commissioners are the latest organizations to confirm they fell victim to cyber extortionists who wielded a zero-day exploit against Oracle PeopleSoft. www.databreachtoday.com/nissan-trace...

Russian water system hack attempted to turn Canada dry www.databreachtoday.com/russian-wate...

Russian hackers have shifted focus from Ukraine to influence operations across the European Union and NATO countries, warns Google's Threat Intelligence Group. www.databreachtoday.com/google-kreml...

"Sounds legit": Artificial intelligence chatbots decide which instructions to obey based on whether the text seems like it comes from a user, not the security labels meant to mark it as trusted or untrusted, say researchers. www.databreachtoday.com/ai-models-tr...

US export ban lifted: Fable 5 returns across Anthropic's Claude Platform, Claude.ai, Claude Code and Claude Cowork, with Mythos 5 restored for a vetted set of American organizations. www.databreachtoday.com/us-lifts-exp...

US Homeland Security Secretary Markwayne Mullin told lawmakers CISA has adequate funding but must hire roughly 600 cybersecurity professionals under new leadership to restore its workforce, rebuild threat sharing and strengthen defenses. www.databreachtoday.com/dhs-eyes-600...

PQC in the USA: The Office of Management and Budget has issued a detailed road map requiring federal agencies to begin post-quantum cryptography implementation immediately. www.databreachtoday.com/omb-commerce...

The Model Context Protocol is getting its biggest rewrite since launch. The changes fix one well-known security weakness while creating several new ones. www.databreachtoday.com/new-mcp-spec...

Russian threat actors continue trying to trick Signal and WhatsApp users into giving them access to their account. U.S. officials say thousands of US, European and Ukrainian officials, diplomats, journalists and others have fallen victim. www.databreachtoday.com/russian-thre...

Come to Vienna: Stung by the Trump administration's export controls on Anthropic's most powerful cyber-capable models, Mythos and Fable, the Austrian government wants Europe to tempt Anthropic into moving across the Atlantic. www.databreachtoday.com/austria-urge...

Post-quantum security spurs national sovereignty thinking www.databreachtoday.com/post-quantum...

OpenAI limits GPT-5.6 rollout at US government's request, although trusted partners get early preview www.databreachtoday.com/openai-limit...

The U.S. Department of Health and Human Services is preparing new guidance to help accelerate the adoption of artificial intelligence across healthcare. www.databreachtoday.com/hhs-agencies...

Counterfeit flash drives embedded with a Chinese-linked computer virus and used by the Japanese army are now dispensing malware throughout other secure networks in the country. www.databreachtoday.com/malware-lace...

Survey says: Your board members may not understand the inner workings of large language models, but that doesn't mean they aren't using AI to do their board work. www.databreachtoday.com/your-board-u...

A hacking group linked to Russian domestic intelligence expanded its toolkit, intensified phishing operations and increased its use of legitimate online services to conceal infrastructure and stolen data throughout 2025, researchers say www.databreachtoday.com/russias-gama...

U.S.-based artificial intelligence companies have accused Chinese firms of illicitly distilling their large language models to create competitive products, and they're asking the U.S. government for help. www.databreachtoday.com/ai-firms-see...

Surveillance risk: US Secret Service driven to use personal phones abroad, due to heavy limits imposed on government-issued devices www.databreachtoday.com/secret-servi...

Finding fraud: A federal effort, bolstered by data analytics and artificial intelligence, helped bust $6.5 billion in fraudulent healthcare claims, U.S. government officials said this week. www.databreachtoday.com/feds-expand-...

Weekly Data Breach Roundup —How hackers exploited a Cisco SD-WAN flaw —Bucket hijacking risk —Ubiquiti flaws exploited —Canada utility discloses breach —Researchers flag cross-cloud hijacking risk —Exposed server reveals INC ransomware's mainframe focus www.databreachtoday.com/breach-round...

GitHub and a coalition of open-source AI players are pressing California lawmakers to overhaul a provision in state law meant to make it easier for users to identify content generated by AI, saying it clashes with how open-source licensing fundamentally works. www.databreachtoday.com/open-source-...

Iranian nation-state hackers have honed in on the typically sluggish and onerous pace of operational technology updates as a tactical advantage they can exploit to great psychological effect, researchers warn. www.databreachtoday.com/slow-ot-patc...

Medical tech manufacturer Stryker, targeted by Iranian hackers in March, is asking a federal court to dismiss proposed class action litigation filed by current and former employees who allege their personal information was compromised. Stryker says it wasn't. www.databreachtoday.com/stryker-seek...

Infostealer StealC and dropper/loader Amadey disrupted in international law enforcement crackdown targeting cybercrime service economy, leading to $41 million in crypto assets being flagged/blocked, and 27 million login credentials recovered. www.databreachtoday.com/infostealers...

How AI is reshaping risk: Five Eyes intelligence alliance warns that risk posed by widespread access to frontier AI models is only months away; act now www.databreachtoday.com/five-eyes-wa...

FortiBleed is only 'tip of the iceberg' of edge device targeting, with "platforms such as Fortinet, Cisco, Palo Alto, SonicWall, Ivanti/Pulse, Check Point and OpenVPN" also being targeted by many different groups of attackers, experts warn. www.databreachtoday.com/fortibleed-t...

Two Englishmen behind a 2024 hacking incident that disrupted London's transport authority's payment system pleaded guilty Monday to violating Britain's anti-hacking law. www.databreachtoday.com/2-british-me...

No zero-day tied to 80,000 harvested Fortinet credentials, as researchers and vendor both tie previously leaked credentials and brute-force attacks to #FortiBleed pwnage. www.databreachtoday.com/no-zero-day-...

"Let's get sovereign": Europe's push for technological sovereignty continues to accelerate, with France and Germany agreeing on a common position and Paris announcing a fund totaling 13 billion euros ($14.9 billion) for French and European tech firms. www.databreachtoday.com/france-germa...

HIPAA's no joke: Employer-sponsored gag gift firm's health plan pays $450,000 fine after investigation into ransomware breach unearths data privacy violations www.databreachtoday.com/hipaas-no-jo...

Cybercrime initial access service SocGholish disrupted, as police seize Evil Corp-tied group's servers and clean subverted WordPress sites www.databreachtoday.com/cybercrime-i...

Crime gang is selling access to 74,000 (and counting) Fortinet FortiGate firewall devices. Potentially they're dumping device config files and stealing easy-to-crack, legacy passwords still being stored. www.databreachtoday.com/crime-gang-s...

Weekly Data Breach Roundup —Extortionist: ShinyHunters publishes alleged Madison Square Garden data —U.S. Sen. Mark Warner questions if staffing cuts are weakening CISA's support to state/local governments —Supply-chain attack compromises Arch Linux packages www.databreachtoday.com/breach-round...

A cardiac monitoring firm that helps millions of patients diagnose and track cardiac arrhythmias says hackers stole proprietary data and patient health information and demanded a ransom. The company didn't say whether it paid. www.databreachtoday.com/heart-monito...

Attackers steal Salesforce data from Klue Battlecards users who integrated that market intelligence app with the CRM platform. Managed security service provider Huntress said it's one of the victims. It's the latest in a long line of CRM data heists. www.databreachtoday.com/attackers-st...

SpaceX bets big on AI coding with $60 billion Cursor deal www.databreachtoday.com/spacex-bets-...

Mastra AI framework poisoned in yet another supply-chain attack involving npm, the JavaScript package manager maintained by Microsoft's GitHub. www.databreachtoday.com/mastra-ai-fr...

Cloud computing mainstay Amazon Web Services has gazed into the vulnerability apocalypse depths and pronounced it fit for a business opportunity. www.databreachtoday.com/aws-unveils-...

White hat hacker says: 'I could have Rickrolled the World Cup' www.databreachtoday.com/hacker-i-cou... [no this is not a rickrolling link!]

Accountability gap: As enterprise technology leaders move artificial intelligence systems from pilots into production, two-thirds find themselves accountable for AI systems and outcomes that they don't fully control, according to recent research by IBM. www.databreachtoday.com/ai-accountab...

Security researchers spotted two undocumented Windows backdoors linked to Chinese espionage threat activity targeting government organizations in Asia and Central America between 2023 and 2024. www.databreachtoday.com/chinese-hack...

Three reasons ships are not going through the Strait of Hormuz yet www.bbc.co.uk/news/article...

Ban on foreign-made routers eased by U.S. Federal Communications Commission, giving large-scale internet service providers a one-year reprieve www.databreachtoday.com/us-fcc-eases...