The Latest

• 

  Scattered Spider expands its roster of tactics in recent hacks

  Microsoft researchers warn they are seeing changing patterns as the cybercrime group has started trying to hack airlines and other industries after targeting retailers and insurers.

  Threats

• 

  UNFI expects cyberattack to cost it at least $350 million in sales

  Operations at the grocery distributor, whose customers include Whole Foods, have largely returned to normal, the company said.

  Breaches

• 

  DragonForce hackers claim responsibility for Belk data breach

  The North Carolina-based retailer is the latest known victim in a spree of attacks in the U.K. and U.S.

  Breaches

• 

  Catastrophic cyber event could cause widespread disruptions to global infrastructure, study suggests

  The study by Munich Re and CyberCube also warned that the internet of things and large language models present near-term risks.  

  Strategy

• 

  Risk management, legacy tech pose major threats to healthcare firms, report finds

  Companies have improved their recovery processes and user controls but still lag in risk preparedness, according to the report.

  Strategy

• 

  Major railroad-signaling vulnerability could lead to train disruptions

  The high-severity flaw could let a hacker abruptly halt — and potentially derail — a train.

  Updated July 14, 2025

  Vulnerability

• 

  Hackers exploiting flaw in widely used Wing FTP Server

  Researchers warn that a vulnerability in the file-transfer service could enable remote code execution.

  Updated July 14, 2025

  Vulnerability

• 

  Researchers, CISA confirm active exploitation of critical Citrix Netscaler flaw

  Critics have faulted Citrix for not updating its guidance in recent days, even as concerns grow about a resumption of the 2023 CitrixBleed crisis.

  Updated July 11, 2025

  Vulnerability

• 

  Businesses are overconfident as mobile phishing scams surge

  Nearly six in 10 companies experienced incidents because of voice or text phishing attacks that led to executive impersonation, according to a new report from Lookout.

  Vulnerability

• 

  UK authorities arrest 4 people in probe of retail cyberattack spree

  The arrests mark the first major break in a case linked to the Scattered Spider cybercrime group, although additional work continues with multiple agencies.

  Updated July 10, 2025

  Cyberattacks

• 

  Ingram Micro restores global operations following hack

  The company is still assessing the full impact of the ransomware attack, which has been linked to the SafePay hacker group.

  Cyberattacks

• 

  Iran-linked hackers target US transportation, manufacturing firms

  U.S. authorities have been warning of potential state-linked or hacktivist threats since the country intervened in the Israel-Iran war.

  Breaches

• 

  M&S chairman calls for mandatory disclosure of material cyberattacks

  The chairman testified before British lawmakers following a major social-engineering attack on the department-store chain.

  Cyberattacks

• 

  Qantas says cyberattack affected 5.7 million customers

  The incident follows a notorious hacker gang’s pivot to targeting transportation companies with its trademark social-engineering attacks.

  Cyberattacks

• 

  Suspected contractor for China’s Hafnium group arrested in Italy

  U.S. authorities charged the man and a co-conspirator with hacking COVID-19 researchers and kicking off a cyberattack spree targeting Microsoft Exchange servers. 

  Threats

• 

  Ingram Micro makes progress on restoring operations following attack

  An attack linked to the ransomware gang SafePay has disrupted certain fulfillment capabilities.  

  Cyberattacks

• 

  Scattered Spider poses serious risk to several hundred major companies

  A new report shows that a select group of large companies uses technologies that the hacker group often targets.

  Strategy

• 

  Security coalition urges Congress to renew 2015 CISA law

  A group of top cybersecurity and technology firms said the law provided critical protections for sharing essential vulnerability information.

  Strategy

• 

  SEC seeks SolarWinds settlement in reversal for agency under new leadership

  The decision by the commission, now under Republican control, could reshape the landscape of corporate accountability for cyber incidents.

  Breaches

• 

  Ingram Micro investigating ransomware attack

  The technology company said the attack has affected its ability to process and ship orders.

  Cyberattacks

• 

  Qantas says large amount of customer data stolen in cyberattack on call center

  The attack follows a recent increase in cyberattacks and disruptions at major airlines.

  Updated July 7, 2025

  Cyberattacks

• 

  FBI cyber guidance to lawmakers falls short, US senator says

  Sen. Ron Wyden wants FBI briefings to cover four often-overlooked cybersecurity practices.

  Strategy

• 

  Ahold Delhaize USA says cyberattack exposed personal data of 2M people

  The intruders who gained access to the grocer’s online systems in November had access to information including birthdays, Social Security numbers and bank account details.

  Breaches

• 

  US authorities unmask North Korean IT worker schemes and their American accomplices

  Federal officials said businesses should carefully verify the identities of remote employees to avoid falling prey to similar scams.

  Strategy

• 

  US government warns of new Iran-linked cyber threats on critical infrastructure

  Companies should disconnect operational technology from the internet and enforce strong protections for user accounts, a joint alert from CISA, the FBI, NSA and DoD said.

  Strategy

More stories