March 3, 2026

Google Patches 129 Android Vulnerabilities Including Qualcomm Zero-Day

Google has released its March 2026 Android Security Bulletin, delivering the largest Android security update in almost eight years. The update addresses 129 security vulnerabilities across the Android operating system, making it the biggest monthly patch release since April 2018. Among the issues fixed are 10 critical vulnerabilities and one actively exploited zero-day flaw, tracked as CVE-2026-21385. Security researchers reported […]
February 28, 2026

Iranian Prayer App Turned Into a Cyber Weapon During Airstrikes

Millions of people across Iran experienced an unusual and alarming situation on the morning of February 28, 2026, as military strikes and a major cyber incident unfolded at the same time.The incident involved BadeSaba Calendar, one of Iran’s most widely used prayer and religious applications, with more than five million downloads. Instead of delivering its normal prayer reminders and religious […]
February 25, 2026

European Commission & Dutch Authorities Hacked via Ivanti Zero-Day Vulnerabilities

In one of the most significant cybersecurity incidents of February 2026, several high-profile European organizations confirmed that their systems had been compromised after hackers exploited previously unknown vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM).Among the affected organizations were the European Commission, the Dutch Data Protection Authority (AP), and the Dutch Council for the Judiciary. The attacks were linked to two […]
February 12, 2026

Japan Airlines Hit by Unauthorized Access – 28,000 Passengers’ Data at Risk

Japan Airlines (JAL), one of Asia’s most respected airlines, disclosed a cybersecurity incident in February 2026 involving its Same-Day Baggage Delivery Service reservation platform. While the breach did not affect flight operations or core booking systems, it exposed personal information belonging to customers who had used the service over the past 18 months.The issue first came to light on the […]
February 2, 2026

NYC Health + Hospitals Data Breach: 1.8 Million Records Compromised in One of 2026’s Worst Healthcare Cyberattacks

New York City Health + Hospitals (NYCHHC), the largest public healthcare network in the United States, has disclosed a major data breach that affected approximately 1.8 million patients and employees. The incident is now being viewed as one of the most significant healthcare cyberattacks reported in 2026.According to the organization’s investigation, the attackers first gained access to the network around […]
February 1, 2026

INTERPOL Operation Red Card 2.0: A Major Blow to African Cybercrime Networks

In one of the biggest cybercrime enforcement actions of the year, INTERPOL worked alongside law enforcement agencies from 16 African countries to launch Operation Red Card 2.0, a coordinated effort aimed at disrupting online fraud networks operating across the region.The eight-week operation, which ran from December 8, 2025, to January 30, 2026, resulted in 651 arrests and the seizure of […]
January 29, 2026

January’s biggest data breaches exposed

January 2026 started with two major cybersecurity concerns that quickly gained attention across the security community. One involved a large-scale data breach affecting Match Group, while the other centered on a critical vulnerability discovered in the SmarterMail email platform.On January 28, the threat actor group known as ShinyHunters claimed responsibility for a breach involving Match Group services, including Hinge, Match.com, […]
January 7, 2026

Dire Wolf Ransomware Attack Hits Malaysian Energy Firm

Malaysian energy services company Perdana Petroleum Berhad became the latest victim of a major ransomware attack after the Dire Wolf ransomware group claimed responsibility for breaching the organization’s network.According to reports, the attackers used a double-extortion strategy, a tactic that has become increasingly common among modern ransomware groups. In addition to encrypting company systems and disrupting business operations, the group […]
December 20, 2025

Cisco Email Security Products Under Active Attack

Cisco Secure Email Gateway (SEG) and Secure Email and Web Manager (SEWM) appliances are currently being actively exploited by a China-linked advanced persistent threat (APT) group tracked as UAT-9686, with known associations to APT41 and UNC5174. Cisco’s Product Security Incident Response Team (PSIRT) identified the activity during a Technical Assistance Center (TAC) support investigation, with evidence indicating the campaign had […]