Education publishing giant McGraw-Hill has confirmed a data breach following an extortion attempt, with more than 100GB of stolen data now publicly distributed online, exposing the personal information of approximately 13.5 million users. The breach, disclosed in April 2026, stems…
Category: EN
Critical Cisco ISE Vulnerabilities Let Remote Attackers Execute Malicious Code
Cisco has issued an urgent security advisory warning of multiple vulnerabilities in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). According to the official Cisco security advisory published on April 15, 2026, these flaws could allow an…
New UAC-0247 Campaign Steals Browser and WhatsApp Data From Hospitals and Governments
A threat cluster tracked as UAC-0247 has been running an active campaign since early 2026, targeting local governments and municipal healthcare institutions across Ukraine, including clinical hospitals and emergency ambulance services. The attackers are not only stealing sensitive data from…
Two U.S. Nationals Sentenced for Running Laptop Farm for DPRK Remote Workers
Two American nationals have been sentenced to federal prison for operating a sophisticated “laptop farm” scheme. The operation successfully infiltrated over 100 U.S. companies, generating more than $5 million in illicit revenue to fund the Democratic People’s Republic of Korea…
Microsoft 365 Web Services Hit by Google Chrome 147 Compatibility Issue
Microsoft is actively investigating a widespread authentication issue affecting users attempting to access Microsoft 365 web-based services through Google Chrome version 147. The problem, first reported on April 16, 2026, has left a significant number of users unable to properly…
“iCloud storage is full” scam is back, and now it wants your payment details
Apple users: Watch out for “upgrade now or lose your photos” scams that rush you into handing over your payment details. This article has been indexed from Malwarebytes Read the original article: “iCloud storage is full” scam is back, and…
Git identity spoof fools Claude into giving bad code the nod
Forged metadata made AI reviewer treat hostile changes as though they came from known maintainer Security boffins say Anthropic’s Claude can be tricked into approving malicious code with just two Git commands by spoofing a trusted developer’s identity.… This article…
Data Breach at Tennessee Hospital Affects 337,000
Cookeville Regional Medical Center was targeted last year by the Rhysida ransomware group, which stole 500GB of data. The post Data Breach at Tennessee Hospital Affects 337,000 appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
How to Strengthen Digital Security in Schools Without Slowing Down Learning
Digital tools are now a core part of the K–12 learning experience. From cloud-based assignments and collaboration platforms to one-to-one device programs, technology has opened the door to more personalized, engaging instruction. As digital learning expands, though, so do the…
How Creators Can Build Secure and Trusted Platforms
Learn how creators can build secure and trusted platforms by improving security, protecting user data, and establishing trust. The post How Creators Can Build Secure and Trusted Platforms appeared first on Security Boulevard. This article has been indexed from Security…
[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment
In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not weak passwords. Unmanaged non-human identities that nobody was watching. For every employee in your org, there are 40 to 50 automated credentials: service accounts, API…
NIST Drops NVD Enrichment for Pre-March 2026 Vulnerabilities
NIST’s National Vulnerability Database will now prioritize enriching new and exploited flaws to address the record growth of reported CVEs This article has been indexed from www.infosecurity-magazine.com Read the original article: NIST Drops NVD Enrichment for Pre-March 2026 Vulnerabilities
Cargo theft malware actor observed for a month
Researchers from Proofpoint have been closely monitoring a threat actor targeting the trucking and logistics industry. This article has been indexed from CyberMaterial Read the original article: Cargo theft malware actor observed for a month
NWHStealer Malware Campaign Targets Windows Users
A newly discovered malware, NWHStealer, is targeting Windows users through a sophisticated campaign that uses fake VPN websites, gaming mods, and hardware utility tools as bait. This article has been indexed from CyberMaterial Read the original article: NWHStealer Malware Campaign…
Fiverr Exposed User Files to Google Search
Fiverr, a popular online marketplace for freelance services, has encountered a significant data exposure incident. This article has been indexed from CyberMaterial Read the original article: Fiverr Exposed User Files to Google Search
McGraw Hill data breach affects 13.5 million accounts
“A significant data breach has occurred at McGraw Hill, impacting 13.5 million user accounts. This article has been indexed from CyberMaterial Read the original article: McGraw Hill data breach affects 13.5 million accounts
Bluesky down as users face access issues
Bluesky, a social media platform, is currently experiencing an outage that has left many users unable to access their accounts. This article has been indexed from CyberMaterial Read the original article: Bluesky down as users face access issues
Artemis Emerges From Stealth With $70 Million in Funding
The startup is leveraging AI to prevent AI-powered attacks across applications, users, machines, and cloud workloads. The post Artemis Emerges From Stealth With $70 Million in Funding appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
Google Play is changing how Android apps access your contacts and location
Google’s new set of Google Play policy updates and account transfer feature strengthen user privacy and protect businesses from fraud. Google is also expanding features for managing new contact and location policy changes to support a smoother, more predictable app…
Textbook titan McGraw Hill on ransomware crew’s reading list after 13.5M records exposed
Publisher claims misconfigured Salesforce-hosted page leaked data Textbook giant McGraw Hill has landed on a ransomware crew’s leak site after an alleged Salesforce-linked misconfiguration spilled 13.5 million records into the wild.… This article has been indexed from The Register –…