Explore

Ransomware Attack on Coca-Cola's Fairlife Halts Production, Highlights Cybersecurity Risks

Ransomware Attack on Coca-Cola's Fairlife Halts Production, Highlights Cybersecurity Risks

Ransomware Attack on Coca-Cola's Fairlife Halts Production, Highlights Cybersecurity Risks

Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns

Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns

Ransomware Threats Surge with New Groups Emerging Weekly, Report Warns

Chick-fil-A Discloses Data Breach Following Credential Stuffing Attacks Affecting Customer Accounts

Chick-fil-A Discloses Data Breach Following Credential Stuffing Attacks Affecting Customer Accounts

Chick-fil-A Discloses Data Breach Following Credential Stuffing Attacks Affecting Customer Accounts

Clover Health Investments Reports Data Breach Affecting Customer Information

Clover Health Investments Reports Data Breach Affecting Customer Information

Clover Health Investments Reports Data Breach Affecting Customer Information

Craneware Reports Data Theft Affecting US Healthcare Finance Software

Craneware Reports Data Theft Affecting US Healthcare Finance Software

Craneware, a provider of healthcare finance software, has reported a cyber incident resulting in the theft of a significant volume of file names from its data environment. The breach involved unauthorized access to employee data and a subset of customer and partner records. While the company has not disclosed the identity of the intruders or the method of access, it has notified relevant authorities, including the FBI. Craneware, which serves around 2000 hospitals and health systems in the US, is working to identify affected parties and has assured that customer services were not disrupted.

Data Breaches at Suno and Paidwork Compromise Tens of Millions of Accounts

Data Breaches at Suno and Paidwork Compromise Tens of Millions of Accounts

Data Breaches at Suno and Paidwork Compromise Tens of Millions of Accounts

Fourth SharePoint Vulnerability Exploited Amid Recent Cyber Attacks

Fourth SharePoint Vulnerability Exploited Amid Recent Cyber Attacks

A new SharePoint vulnerability, CVE-2026-50522, has been exploited in the wild, marking the fourth such incident in the past month. This critical remote code execution vulnerability, which stems from the deserialization of untrusted data, was patched by Microsoft on July 14. Despite the patch, threat actors have been actively exploiting the flaw, with reports indicating that attackers are stealing machine keys to maintain long-term access to compromised systems. Security firm WatchTowr confirmed the active exploitation following the release of proof-of-concept exploit code. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has previously warned organizations about attacks targeting SharePoint instances, highlighting the ongoing threat posed by these vulnerabilities.

Coca-Cola's Fairlife Halts U.S. Production After Cybersecurity Breach

Coca-Cola's Fairlife Halts U.S. Production After Cybersecurity Breach

Coca-Cola's Fairlife Halts U.S. Production After Cybersecurity Breach

Coca-Cola's Fairlife Dairy Production Halted by Ransomware Attack, Impacting U.S. Operations

Coca-Cola's Fairlife Dairy Production Halted by Ransomware Attack, Impacting U.S. Operations

Coca-Cola's Fairlife Dairy Production Halted by Ransomware Attack, Impacting U.S. Operations

Hackers Breach Tech Firm, Compromising Data of US Hospitals and Pharmacies

Hackers Breach Tech Firm, Compromising Data of US Hospitals and Pharmacies

Craneware, a UK-based healthcare billing software company, has reported a cyberattack resulting in the theft of a significant amount of customer data. The breach affected thousands of US hospitals and pharmacies that rely on Craneware's software for billing and patient data management. The company is investigating the incident and has expelled the hackers from its systems. The breach is part of a larger trend of cyberattacks targeting healthcare tech firms, posing risks to sensitive medical and patient data.

Clover Health Investments Discloses Data Breach Affecting Customer Information

Clover Health Investments Discloses Data Breach Affecting Customer Information

Clover Health Investments, a healthcare technology company, has reported a data breach that compromised personal and health information of its customers. The breach, discovered on July 4, was a result of a social engineering attack targeting three non-managerial employee accounts involved in member visit-scheduling and broker-facing sales functions. These accounts had access to personally identifiable information and protected health information but did not have access to corporate financial or claims systems. Clover Health activated its response plan immediately, engaging third-party cybersecurity experts to contain and investigate the breach. The company has not yet determined the full scope of the breach and no group has claimed responsibility for the attack.

SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

SonicWall Zero-Days Exploited to Deliver Custom Malware Before Patch Release

Two zero-day vulnerabilities in SonicWall appliances were exploited by threat actors for several weeks before patches were released, according to cybersecurity firm Volexity. The vulnerabilities, identified as CVE-2026-15409 and CVE-2026-15410, affected SMA1000 secure remote access appliances. SonicWall issued a public advisory on July 14, alerting customers to the exploitation of these flaws. Volexity, which assisted in the investigation, attributed the attacks to a threat actor it tracks as UTA0533. The exploitation reportedly began as early as June 22. The attackers deployed custom malware named KnuckleBall, which injected additional tools into legitimate processes. Despite the significant capability demonstrated by UTA0533 in compromising the appliances, the group was reportedly less successful in moving laterally or accessing other systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added these vulnerabilities to its Known Exploited Vulnerabilities catalog.