Cybersecurity

Vanderbilt University hit in BYOD ransomware attack, data theft claimed

Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data.

N-able takes cloud platform offline after 30+ "zero-days" published

N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that…

York University breach exposed personal information dating to 2007

York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms.

France blames Iranian hackers for supermarket attacks that sparked fires

France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at least 15 fires.

Also: The Register, TechCrunch

Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data

An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today.

Hackers Compromise Ethersphere's bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware

Attackers used the Ethersphere project's own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage network: bee-js 13.3.0 and Swarm Desktop 0.56.2.

Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web

Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.

Ukraine dismantles crypto scam network that stole €4.3 million

Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers.

Portal breach at Germany's top university exposes every registered user's password

Stolen sysadmin credentials enabled a follow-on attack on the campus management system

Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars

The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors and start the…

CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said may have been…

Linus Torvalds sees signs AI-prompted patch flood has peaked

Fixes are arriving faster than new bug reports for one major Linux project

He arrested a hacker, then spent 18 months clearing his own name. Now he’s a cybersecurity VC.

Stephen Ward, a former Secret Service agent and Home Depot CISO, is preparing a second fund of roughly $250 million for Brightmind Partners.

TechCrunch Mobility: The Cybertruck experiment is over

Welcome back to TechCrunch Mobility, your hub for the future of transportation and now, more than ever, the role AI is playing in it.

Iris Ohyama data cloud breach exposes info of 7.7 million customers

Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service…

Brava Security Emerges From Stealth With $15 Million in Funding

Its multi-agent AI platform generates the telemetry an attack would produce to fix gaps in enterprise defenses.

Binance CFO is leaving to ‘pursue a new venture’ after $6.3 billion hack

The announcement comes barely more than a week after hackers stole $6.3 billion worth of cryptocurrency from Binance users.

Hackers pull off $133 million French bank heist via service provider

French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v

CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands

Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions.

NHS breach helpline left staff carrying a 'significant emotional burden'

Team given a day's notice faced distressed callers, safeguarding decisions during project that stretched from 2 weeks to 11

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them.

SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks.

Runaway AI hacking agent behind WorkOS breach after escaping sandbox

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked…