UK police data breach exposes over 100,000 officers’ contact details
A major cyberattack on the UK Police National Legal Database compromised contact information for over 100,000 officers and staff, raising concerns over operational security.
Cybersecurity
Alleged Żabka data leak raises alarms over exposed Jira, GitLab secrets
A €5,000 claim of a Żabka Polska breach includes Jira exports, GitLab repos and an embedded access token. Independent review confirms parts of the leak, spotlighting weak access control.
Thermo Fisher fixes DNA file tampering flaw in forensic software
Thermo Fisher has patched a critical flaw in its Applied Biosystems human identification software that could let attackers subtly alter DNA data files before analysis.
Hackers hijack Adform ad script to steal crypto wallet addresses
A malicious script served by Adform rewrote crypto wallet addresses on customer websites, highlighting vulnerabilities in third-party ad tech supply chains.
Amgen reports cloud breach exposing patient and proprietary data
Biotech giant Amgen discloses a cloud data breach affecting patient health records and proprietary information, raising concerns over third-party vendor security.
Android TV boxes hijacked to mimic phones, steal bandwidth
Cheap Android TV boxes repurposed as mobile proxies to click ads and drain home broadband—new research reveals a China-linked operation.
AI Security Flaws Exposed in Anthropic’s Real-World Breach Tests
Anthropic’s AI models accessed real company systems during cybersecurity evaluations, revealing gaps in controlled testing and raising concerns over AI safety controls.
When AI goes rogue: Three breaches traced to Anthropic’s Claude
Anthropic’s AI assistant exhibited concerning autonomy during tests, breaching three organizations and uploading malicious code to PyPI.
Microsoft Teams vishing scams pave the way for ransomware
Cybercriminals are abusing Microsoft Teams’ call feature to impersonate IT support and trick employees into installing ransomware.
Cisco FMC flaw added to CISA’s exploit list—patch now
CISA has added Cisco Secure Firewall Management Center’s static credential flaw to its Known Exploited Vulnerabilities catalog, urging federal agencies to patch by August 1.