Headline-making news in information security, cyber security, privacy, and AI, from 2010 to today.
The Pentagon’s Defense Manpower Data Center says attackers exploited a file-sharing flaw and stole personal data of over 3 million people between October 2025 and July 2026.
The US Federal Trade Commission opens an investigation into OpenAI, Anthropic, and the AI evaluator METR over the potential dangers of frontier AI.
Australian Federal Police arrest two men in Perth over the TeamPCP hacking spree that compromised open source tools to steal credentials from over 1,000 organisations.
CISA confirms attacks on over 100 internet-exposed US water and wastewater systems in July 2026, which US officials believe were likely Iranian.
ShinyHunters claims a breach of Instructure’s Canvas platform, affecting nearly 9,000 schools and universities, then defaces login pages during exams.
Anthropic says its Claude Mythos Preview model can find serious software flaws at scale and gives access only to selected defenders through Project Glasswing.
Companies House takes its WebFiling service offline after a flaw let logged-in users view, and potentially change, other companies’ records.
A pro-Iran group claims a destructive attack on Stryker that wiped tens of thousands of company devices and disrupted operations worldwide.
Ofcom opens a formal Online Safety Act investigation into X after its Grok AI tool was used to create sexualised images of real people, including children.
Anthropic says a Chinese state-sponsored group used its Claude Code tool to automate most of a cyber espionage campaign against about 30 targets.
Security vendor F5 says a nation-state actor had long-term access to its systems and stole BIG-IP source code and vulnerability information.
A ransomware attack on Collins Aerospace’s MUSE check-in system disrupts Heathrow, Brussels, Berlin, and other European airports.