Headline-making news in information security, cyber security, privacy, and AI, from 2010 to today.
Australian Federal Police arrest two men in Perth over the TeamPCP hacking spree that compromised open source tools to steal credentials from over 1,000 organisations.
CISA confirms attacks on over 100 internet-exposed US water and wastewater systems in July 2026, which US officials believe were likely Iranian.
ShinyHunters claims a breach of Instructure’s Canvas platform, affecting nearly 9,000 schools and universities, then defaces login pages during exams.
Anthropic says its Claude Mythos Preview model can find serious software flaws at scale and gives access only to selected defenders through Project Glasswing.
Companies House takes its WebFiling service offline after a flaw let logged-in users view, and potentially change, other companies’ records.
A pro-Iran group claims a destructive attack on Stryker that wiped tens of thousands of company devices and disrupted operations worldwide.
Ofcom opens a formal Online Safety Act investigation into X after its Grok AI tool was used to create sexualised images of real people, including children.
OpenAI’s board abruptly fired Sam Altman, saying he had not been consistently candid; he was reinstated days later after staff revolted.
The UK hosted the first global AI Safety Summit at Bletchley Park, where 28 countries and the EU signed a declaration on frontier AI risks.
Hackers used reused passwords to access 23andMe accounts and scraped ancestry data on about 6.9 million people.
A cyber attack on MGM Resorts shut down systems across its US casinos and hotels, costing the company around $100m.
The UK Electoral Commission disclosed that hostile actors had access to its systems for over a year, including registers with data on around 40 million voters.
