Earlier this year, Donncha Ó Cearbhaill, a security researcher who investigates spyware attacks, found himself in an unusual position. For once, he became the target of hackers. “Dear User, this is Signal Security Support ChatBot. We have noticed suspicious activity on your device, which could have led to data leak,” read a message he received...Read More

Somewhere between coordinating major event security and sharing real-time threat intelligence across hundreds of government partners, the Department of Homeland Security’s own information-sharing backbone got compromised. The intrusion into the Homeland Security Information Network — HSIN — reportedly occurred between late May and early June 2026, first reported by Nextgov and later confirmed by DHS....Read More

The Department of Homeland Security is said to be investigating a breach of its platform, which federal, state, and local governments and law enforcement use to share intelligence, with one senior lawmaker warning that the information spill could risk national security. News sites Nextgov, which first reported the incident, and Bleeping Computer report that DHS...Read More

A US Congressman is blasting the Signal messaging app as “not secure” by admitting that hackers hijacked his own account after he fell for a phishing scheme.  On Wednesday, outgoing Rep. Don Bacon (R-Nebraska) went out of his way to urge other US officials to avoid Signal. Russian state-sponsored hackers have been targeting that app,...Read More

A mom of five who was hacked to death in the street — allegedly by Texas sisters named Cookie and Kitty — had just minutes earlier tried calling her best friend, who is tormented by the thought she could have saved her. Caroline “Caro” Peña, 32, called her best pal Christina Salinas at around 1:35...Read More

Like many things in the shadowy world of cyber-crime, an insider threat is something very few people have experience of. Even fewer people want to talk about it. But I was given a unique and worrying experience of how hackers can leverage insiders when I myself was recently propositioned by a criminal gang. “If you...Read More

The University of Technology Sydney (UTS) was one of the affected institutions of the Canvas breach. Photo: Shutterstock Australian universities and TAFEs are rushing to assess their exposure after a breach of Instructure’s Canvas learning management system (LMS) compromised the personal data of up to 275 million students at over 9,000 institutions worldwide. Instructure confirmed...Read More

Image: Flickr – Infosec Images You know the guy at the poker table who reads everyone else’s tells? Someone just stacked the deck specifically for him. Jaredfromsubway.eth — the MEV bot reportedly behind roughly 70% of Ethereum sandwich attacks over a roughly one-year window ending October 2025, according to Cointelegraph Research — got drained for...Read More

Roughly two dozen Klue customers have come forward and confirmed that their Salesforce instances were compromised in a supply chain attack earlier this month. The attack unfolded between June 11 and 12, when hackers used compromised legacy credentials to access the market intelligence platform Klue, obtain OAuth tokens for customers’ Klue integrations, and exfiltrate data...Read More

Millions of students in universities and K-12 districts had their data compromised this week as a hack took down Canvas, a classroom management tool used all over the country. EMILY FENG, HOST: Millions of students in universities in K-12 districts had their data compromised this week as a hack took down Canvas. That’s a classroom...Read More