Breaches
-
Justin Sullivan via Getty Images
Hackers target Workday in social engineering attack
Researchers cite increasing evidence of collaboration between Scattered Spider and the cybercrime group ShinyHunters in the campaign.
By David Jones • Aug. 19, 2025 -
funky-data via Getty Images
Developers knowingly push vulnerable code, despite growing breach risk
Only three in 10 respondents said their application security programs were highly mature.
By Eric Geller • Aug. 15, 2025 -
Justin Sullivan/Getty Images via Getty Images
Citrix NetScaler flaws lead to critical infrastructure breaches
Dutch authorities said hackers penetrated several critical infrastructure providers, in a warning sign for vulnerable organizations elsewhere.
By Eric Geller • Updated Aug. 12, 2025 -
Chainarong Prasertthai via Getty Images
Financially motivated cluster a key player in ToolShell exploitation
Researchers from Palo Alto Networks detail ransomware deployment and malicious backdoors in a campaign against Microsoft SharePoint users.
By David Jones • Aug. 8, 2025 -
Just_Super via Getty Images
AI is helping hackers automate and customize cyberattacks
CrowdStrike’s annual cyber-threat-hunting report reveals the double threat that AI poses to many businesses.
By Eric Geller • Aug. 4, 2025 -
gorodenkoff via Getty Images
Ransomware gangs capitalize on law enforcement takedowns of competitors
After authorities dismantled LockBit and RansomHub, other groups rushed in to snatch up their affiliates, according to a new report that highlights a cybercrime ecosystem in flux.
By Eric Geller • July 31, 2025 -
BlackJack3D via Getty Images
‘Shadow AI’ increases cost of data breaches, report finds
Companies are failing to protect their AI tools from compromise, often leading to more extensive data breaches, according to new data from IBM.
By Eric Geller • July 30, 2025 -
Hollie Adams via Getty Images
FBI, CISA warn about Scattered Spider’s evolving tactics
International authorities are pursuing the group following the arrests of four suspects in a series of attacks targeting British retailers.
By David Jones • July 29, 2025 -
Just_Super via Getty Images
Ransomware attacks against oil and gas firms surge
Manufacturing remains the No. 1 ransomware target, new data from Zscaler shows.
By Eric Geller • July 29, 2025 -
Sean Gallup via Getty Images
Allianz Life discloses massive data breach linked to supply-chain attack
The intrusion comes amid a wave of recent social-engineering attacks targeting the insurance sector and other industries.
By David Jones • July 28, 2025 -
Just_Super via Getty Images
Philadelphia Indemnity Insurance discloses June data breach
The regulatory filing follows a wave of hacks against the industry that researchers have linked to Scattered Spider.
By David Jones • July 25, 2025 -
Justin Sullivan via Getty Images
Clorox files $380 million suit blaming Cognizant for 2023 cyberattack
The attack, linked to Scattered Spider, disrupted production of household cleaners and other goods.
By David Jones • July 23, 2025 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
SharePoint hacking campaign affects hundreds of systems worldwide
CISA is responding to potential compromises at federal agencies and various state and local entities.
By David Jones • Updated July 23, 2025 -
Just_Super via Getty Images
Ransomware attacks in education jump 23% year over year
Education was the fourth-most-targeted sector during the first half of 2025, according to a report from Comparitech.
By Briana Mendez-Padilla • July 22, 2025 -
Khanchit Khirisutchalual via Getty Images
AI-powered attacks rise as CISOs prioritize AI security risks
Security executives are concerned about flaws in AI agents but also eager to see them replace humans in some roles, according to a new report.
By Eric Geller • July 17, 2025 -
Sam Silverstein/Cybersecurity Dive
UNFI expects cyberattack to cost it at least $350 million in sales
Operations at the grocery distributor, whose customers include Whole Foods, have largely returned to normal, the company said.
By Sam Silverstein • July 16, 2025 -
Kaarin Vembar/Cybersecurity Dive
DragonForce hackers claim responsibility for Belk data breach
The North Carolina-based retailer is the latest known victim in a spree of attacks in the U.K. and U.S.
By David Jones • July 15, 2025 -
Majid Saeedi via Getty Images
Iran-linked hackers target US transportation, manufacturing firms
U.S. authorities have been warning of potential state-linked or hacktivist threats since the country intervened in the Israel-Iran war.
By Eric Geller • July 9, 2025 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by ismagilov via Getty Images
SEC seeks SolarWinds settlement in reversal for agency under new leadership
The decision by the commission, now under Republican control, could reshape the landscape of corporate accountability for cyber incidents.
By Eric Geller • July 7, 2025 -
Sam Silverstein/Cybersecurity Dive
Ahold Delhaize USA says cyberattack exposed personal data of 2M people
The intruders who gained access to the grocer’s online systems in November had access to information including birthdays, Social Security numbers and bank account details.
By Sam Silverstein • July 1, 2025 -
Carl Court via Getty Images
US authorities unmask North Korean IT worker schemes and their American accomplices
Federal officials said businesses should carefully verify the identities of remote employees to avoid falling prey to similar scams.
By Eric Geller • June 30, 2025 -
JuSun via Getty Images
Data breach at healthcare services firm Episource affects 5.4M
The incident, one of the largest breaches reported to federal regulators this year, came after a cybercriminal accessed data on the company’s computer systems over the winter.
By Emily Olsen • June 30, 2025 -
Sam Silverstein/Cybersecurity Dive
United Natural Foods says cyberattack will reduce quarterly earnings
The company, which supplies Whole Foods and other grocery stores nationwide, had to disable electronic ordering systems while responding to the attack earlier this month.
By Eric Geller • June 27, 2025 -
Justin Sullivan via Getty Images
Judge approves AT&T’s $177M data breach settlement
The settlement, which has received preliminary clearance, now awaits a December hearing for final approval.
By Alexei Alexis • June 25, 2025 -
Courtesy of Nucor Steel Tuscaloosa.
Steelmaker Nucor restores operations, confirms limited data breach
The steel products giant said it does not expect the cyberattack to have a material impact on its operations.
By David Jones • June 23, 2025
