Headline-making news in information security, cyber security, privacy, and AI, from 2010 to today.
Attackers exploit a zero-day flaw in on-premises Microsoft SharePoint servers, known as ToolShell, with hundreds of organisations reported compromised.
Ireland’s Data Protection Commission fines TikTok EUR 530 million over transfers of EEA users’ data to China and a lack of transparency.
A cyber attack on Marks & Spencer, followed by attacks on Co-op and Harrods, leads to weeks of disruption and four arrests by the NCA.
Hackers steal around US$1.5bn in Ethereum from Dubai-based exchange Bybit, a theft the FBI attributes to North Korea.
Chinese start-up DeepSeek’s R1 reasoning model tops app download charts and triggers a record one-day fall in Nvidia’s market value.
Ireland’s Data Protection Commission fines LinkedIn EUR 310 million over how it processed members’ data for behavioural analysis and targeted advertising.
The Nobel prizes in physics and chemistry go to work underpinning modern AI, including neural networks and AlphaFold’s protein structure prediction.
The Wall Street Journal reports that the Salt Typhoon group had penetrated major US telecoms firms, including systems used for court-authorised wiretaps.
A cyber attack on Transport for London disrupts online services for months and exposes data including around 5,000 customers’ bank details.
A defective CrowdStrike Falcon update crashes around 8.5 million Windows devices, grounding flights and disrupting hospitals, banks, and broadcasters.
A ransomware attack on pathology provider Synnovis forces south-east London NHS trusts to postpone thousands of appointments and operations.
Attackers use stolen passwords to access Snowflake cloud accounts at Ticketmaster, AT&T, Santander, and others, stealing data on many millions of people.
