Dental practice software maker fixes bug that exposed patients’ medical records
The security bug is now fixed, but the patient who found it said it was challenging to alert the software company about the issue.
Stories in this category.
The security bug is now fixed, but the patient who found it said it was challenging to alert the software company about the issue.
The government of Sri Lanka has lost more than $3 million in two recent, separate cybersecurity incidents as the country continues to recover from its 2022 debt crisis.

Security firms find themselves especially exposed.

Technically speaking, there's no practical benefit to use PQC. So why is it being used?

Sean Plankey has requested to withdraw his name to run the U.S. cybersecurity agency after a tumultuous year of chaotic temporary leadership.
A former employee of a cybersecurity firm pleaded guilty to aiding ransomware criminals to maximize their profits, with the goal of taking a cut of the ransom.

A security researcher published details of three security vulnerabilities in Windows Defender, and the code used to exploit them. Now, hackers are taking advantage of the vulnerabilities in real-life attacks, according to a cybersecurity firm.
It's not clear how many people were compromised by this hacking campaign, but a security researcher said the hackers were targeting victims since at least November 2025.

The new features would be geared toward enterprise customers, with better security controls than the famously risky open source OpenClaw agent.

The travel giant notified customers that their personal data, including names, email addresses, and phone numbers, may have been accessed in a security incident.

In 2021, Anjuna Security was growing fast, hiring aggressively, and chasing a market that seemed limitless. By the end of that year, the venture-backed cybersecurity company had scaled to around 75 employees, building out sales, customer success, and support teams in anticipation of continued hypergrowth. Then 2022 hit.

Security researchers exposed a spying campaign by a hack-for-hire group that used Android spyware and phishing to steal iCloud credentials and hack victims’ devices.