The FTC has taken action against edtech provider Illuminate Education for a 2021 data breach that impacted 10.1 million students. The regulator says the company ignored security warnings, stored data in plain text, and delayed notifying schools.
Google’s latest Android security bulletin addresses a massive 107 vulnerabilities. Three of the patched flaws are already being exploited in limited, targeted attacks against devices running Android 13 through 16.
The Supreme Court heard arguments on whether ISPs like Cox must terminate users accused of piracy. Justices seemed torn, questioning how to handle universities and the legal standard for “aiding and abetting” infringement.
A dangerous new Android malware family named Albiriox is being marketed as Malware-as-a-Service on Russian cybercrime forums. For a monthly subscription, it offers full remote takeover of devices to target financial and cryptocurrency applications worldwide.
The cybersecurity industry consolidated rapidly in November 2025 as major players like Palo Alto Networks and Zscaler acquired startups focused on AI-driven security and observability. These deals highlight a strategic push to automate defense and manage risk in complex, cloud-native environments.
The FBI has issued an urgent warning about sophisticated phone scams targeting bank accounts. Scammers have already stolen $262 million this year using fake calls that appear to come from legitimate institutions. New data shows 25% of scams now happen over the phone.
The UK is pushing forward with comprehensive cybersecurity legislation as attacks on essential services escalate. The bill would require operators of critical infrastructure to meet tougher security standards and report threats earlier.
Dark LLMs like WormGPT 4 and KawaiiGPT are assisting novice hackers with basic cybercrime tasks, but they’re technically underwhelming and haven’t created novel threats. Researchers say these tools mainly help script kiddies rather than enabling sophisticated attacks. The AI malware revolution appea
Two popular code formatting websites have exposed thousands of sensitive credentials belonging to banks, government agencies, and healthcare organizations. The exposed data includes authentication keys and login information that could give hackers system access. Researchers found over five years of
The Royal Borough of Kensington and Chelsea, Westminster City Council, and Hammersmith and Fulham are all affected by what appears to be a serious cyber intrusion. Shared IT services between the councils have created a domino effect, knocking multiple boroughs offline simultaneously.
