Security News

A threat actor is claiming to have stolen millions of employee records from the Microsoft Azure environments of several major companies, raising concerns that the information could be used to launch targeted phishing, impersonation, and privilege escalation attacks. The threat actor, known as "TheHatman," has reportedly posted internal employee directories belonging to companies including McDonald's, Vodafone, Kyndryl, Tata Consultancy Services (TCS), HCL Technologies, InterContinental Hotels Group, Gap, Hexaware Technologies, and Wyndham Hotels for sale on...

The Forescout 2026 H1 Threat Review found that more than 37,000 vulnerabilities were published during the first six months of the year, representing a 51% increase year on year. More than half were classified as high or critical severity, while ransomware attack claims rose by 25% to 4,544 incidents, averaging 25 attacks every day. The report, published by Forescout Research – Vedere Labs, analysed more than 37,000 vulnerabilities, over 1,000 tracked threat actors and thousands...

Acumen Cyber has announced a strategic partnership with AttackIQ to help organizations continuously validate their cyber defenses against real-world threats and reduce exposure to modern attacks. The partnership combines Acumen Cyber’s engineering-led security operations expertise with AttackIQ’s Continuous Threat Exposure Management (CTEM) platform. Together, the companies aim to help organizations identify exploitable attack paths, validate security controls, and prioritize remediation efforts based on actual risk rather than theoretical vulnerabilities. Moving beyond traditional vulnerability management As...

Forescout Technologies has joined the Electricity Information Sharing and Analysis Center Vendor Affiliate Program, a move that will expand the sharing of threat intelligence with utilities and government partners working to protect North America’s power grid. The program is run by the Electricity Information Sharing and Analysis Center(E-ISAC), which operates under the North American Electric Reliability Corporation. As part of the partnership, Forescout will provide intelligence from its research unit, Vedere Labs, and collaborate with...

Saviynt has today announced a $700M Series B Growth Equity Financing at a valuation of approximately $3 billion. Funds managed by KKR, a leading global investment firm, led the round with participation from Sixth Street Growth and TenEleven, as well as new funding from existing Series A investor Carrick Capital Partners. The investment reflects what many in the cybersecurity sector see as an accelerating shift: as organizations deploy generative AI, autonomous agents, and machine-driven workflows,...

Privacy issues have garnered significant attention from the state despite not typically being at the forefront of discussions regarding data regulation. The states included in the article are not in any specific sequence. Kentucky Steps Up Early Sectors like entertainment and online platforms in Kentucky take data protection seriously. For example, popular iGaming services that allow users to play from Kentucky offer secure sign-ins, encrypted transactions, and strong data safeguards. These features support safe and...

When signing into a real money online casino, your deposits are not the only things at risk—your data is, too. All sorts of sensitive information, ranging from signing up to making a payment, are collected and managed by online gambling platforms and must be secured at all times. Because privacy concerns and cyber threats are increasing, how your data is protected is very important for everyone. Here, we explore all the essential security topics in...

Philadelphia-based cybersecurity firm HostBreach is offering a free CMMC Cyber Snapshot to businesses looking to maintain CMMC compliance. In particular, this refers to government contractors (GovCon) and federal contractors so they can organise their cybersecurity posture pending the Cybersecurity Maturity Model Certification (CMMC) 2.0 standards.  This free offer comes at the right time, with the Department of Defense (DoD) enforcing stricter cybersecurity requirements to protect Controlled Unclassified Information (CUI) on contractor systems.  What is CMMC Compliance? CMMC...

HealthEquity, a leading provider of health savings account (HSA) services, has announced it suffered a data breach recently, resulting in compromised customer protected health information (PHI). It is understood the breach was detected on March 25, 2024, after abnormal activity was flagged from a business partner's device. Once an investigation was carried out, it was revealed that a threat actor had accessed and exfiltrated data from HealthEquity's SharePoint system. HealthEquity mobilised and launched a forensic...

As the demand for lithium-ion batteries surges, driven by the electric vehicle (EV) boom and renewable energy storage needs, the security of the lithium supply chain has never been more critical. Leaders in market intelligence for battery materials highlight the increasing importance of robust cybersecurity measures to protect this vital industry.   Why Cybersecurity Matters The lithium supply chain involves complex networks of mining, processing, and manufacturing, often spanning multiple countries and involving numerous stakeholders. With...