Klaviyo Sign-Up Bug May Have Exposed Passwords to Ad Trackers
Klaviyo has fixed a website configuration bug that may have exposed new customers’ sign-up data, including passwords, to third-party trackers...
Data
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send...
15 AI Security Lessons From Black Hat and Ai4 2026
On July 29, 2026, Kiteworks published the 2026 Data Security and Compliance Risk: Annual Survey Report, a survey of 459...
Three-headed dogs and long tails: Sophos at BSides LV
In addition to Sophos’ presence at Black Hat USA this year, data scientists from the Sophos AI team will present...
Coca-Cola Confirms Data Theft as Fairlife Ransomware Attack Escalates
Coca-Cola has confirmed that data was stolen during the ransomware attack on its Fairlife dairy business, escalating the incident beyond...
Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts
Ravie LakshmananJul 23, 2026Authentication / Data Protection Google on Thursday announced a new way for users to sign-in to their...
New Data Shows Suno Breach Affected 55M Accounts
Suno’s latest unwanted release is a data breach affecting more than 55 million accounts. On July 20, 2026, Have I...
Craneware Confirms Data Theft After Cyberattack, Investigations Underway
Hackers have stolen data from Craneware, a healthcare software provider serving thousands of U.S. hospitals and pharmacies, highlighting how cybercriminals...
23andMe Agrees to $18M Settlement With 43 States Over 2023 Data Breach
An $18 million settlement is the latest consequence of 23andMe’s 2023 data breach—and a reminder that some stolen information can...
The State of Ransomware 2026: Payments are dropping but encryption is climbing
This year's data has a few eyebrow-raising departures from the patterns of past State of Ransomware reports. Exploited vulnerabilities lost...
Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor...
AI Data Centers and the Concentration of Wealth
AI Data Centers and the Concentration of Wealth This essay was written with Nathan E. Sanders, and originally appeared in...
AssuranceAmerica Data Breach: 6.9M Driver’s License Numbers Exposed
A massive data breach exposed Americans’ driver’s license information, making it the largest known breach involving the data this year....
AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers
Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code,...
Hacker Claims Accenture Breach Exposed Source Code, SSH Keys, and Azure Tokens
A hacker is trying to sell what they claim is 35GB of Accenture data, including source code, cloud keys, and...
