Threats & incidents
-
Liechtenstein attack exposes ownership register data
Attackers copied beneficial-owner data relating to around 31,000 legal entities, while Liechtenstein suspended several other government systems to check for wider exposure.
-
Amgen cloud breach exposed patient data
Amgen has declared a material cybersecurity incident after proprietary information and patient health data were exfiltrated from third-party cloud environments.
-
Arch Linux freezes AUR changes
Arch Linux disabled package adoption and later all pushes to its user repository while responding to malicious package takeovers and follow-on commits.
-
Adform code targeted crypto wallet addresses
Malicious code delivered through Adform technology attempted to replace cryptocurrency wallet addresses copied by visitors to affected websites.
-
FlashStart expands DNS-layer protection
FlashStart 2026 adds DNS-layer malware protection, service-provider APIs, microservices architecture, and data sovereignty features for enterprises and managed providers.
-
EY tax support breach exposes client data
A breach involving a third-party support platform used by EY tax teams exposed personal and financial information held in tickets and documents.
-
Russian zero-click campaign targets Zimbra mail
The NCSC and international partners say Russian state-supported actors used a Zimbra zero-click exploit to steal email data from Western organisations.
-
UK education and police support data stolen
Hackers have claimed data from Department for Education and Police National Legal Database-linked systems, exposing public-sector contact records and staff details.
-
Rail supplier portal breach reaches Stadler
A supplier platform incident at Stadler exposed technical data without affecting rail vehicles, production, personal data, or operational systems.
-
Cyber sanctions widen across Europe
Eight European partner countries have aligned with EU cyber sanctions targeting individuals and entities linked to attacks against the Union and its partners.