Data & infrastructure
-
Amgen cloud breach exposed patient data
Amgen has declared a material cybersecurity incident after proprietary information and patient health data were exfiltrated from third-party cloud environments.
-
CosmosEscape crossed Azure tenant boundaries
A remediated Azure Cosmos DB vulnerability chain could have crossed tenant, regional, and network-isolation boundaries using a platform-wide credential.
-
Adform code targeted crypto wallet addresses
Malicious code delivered through Adform technology attempted to replace cryptocurrency wallet addresses copied by visitors to affected websites.
-
FlashStart expands DNS-layer protection
FlashStart 2026 adds DNS-layer malware protection, service-provider APIs, microservices architecture, and data sovereignty features for enterprises and managed providers.
-
Huntress passes $250m as MSP security scales
Huntress says it now protects 270,000 businesses, deepening its role in managed security delivery for smaller organisations and the MSP channel.
-
The AI builder boom is creating a shadow IT crisis
Gil Geron, CEO of Orca Security, argues that AI-built applications and agents are expanding shadow IT into production cloud environments faster than governance can keep up.
-
EY tax support breach exposes client data
A breach involving a third-party support platform used by EY tax teams exposed personal and financial information held in tickets and documents.
-
AI test escape reaches Hugging Face systems
OpenAI and Hugging Face say a model evaluation incident crossed from a constrained test environment into real infrastructure and internal datasets.
-
Financial resilience rests on shared suppliers
The FCA says 27% of incidents reported by firms in 2025 were tied to third parties, with cyber involved in more than a third of those cases.
-
Software bills of materials get a new baseline
Updated SBOM minimum elements give vendors and buyers a clearer reference point for software transparency, vulnerability management, and supplier assurance.