Latest

Cybercrime

Multimillion-Dollar Settlement Reached in MCNA Dental Hack

Marianne Kolbasuk McGee  •  June 18, 2026

MCNA Dental, one of the largest providers of U.S. government-sponsored dental benefits to children, has agreed to a proposed multimillion dollar settlement to resolve class action claims stemming from a 2023 LockBit ransomware attack and data theft that affected nearly 9 million people.

Cybercrime

Breach Roundup: ShinyHunters Leaks 26M MSG Records

Pooja Tikekar  •  June 18, 2026

This week, ShinyHunters leaked alleged Madison Square Garden data, a U.S. senator pressed CISA on regional staffing cuts, an Arch Linux supply-chain attack, Mackay Sugar began recovery from a ransomware attack, Novo Nordisk faced dueling breach claims - and more compelling cybersecurity news.

Cybercrime

The Gentlemen Ransomware Gang Standardizes EDR Killing

Tiffany Wang  •  June 18, 2026

Eset researchers say the rapidly growing Gentlemen ransomware operation differentiates itself by supplying affiliates with a standardized EDR-killer suite that disables security tools, quickly incorporates newly disclosed vulnerable drivers and helps scale attacks across multiple regions worldwide.

Blockchain & Cryptocurrency

Cryptohack Roundup: Spinning a Social Web to Nab Victims

Rashmi Ramesh  •  June 18, 2026

This week, a hacker used fake reputation network to spread clipper malware, the FBI warned of cash couriers in romance scams, India's financial investigation department filed a complaint in an alleged Coinbase-linked scam and Bithumb CEO booked in a bribery probe involving a South Korean lawmaker.

Cybercrime

Crime Gang Sells Access to 74,000 Fortinet Firewall Devices

Mathew J. Schwartz  •  June 18, 2026

Cybercriminals are selling access to 75,000 Fortinet FortiGate devices with VPN and web management interfaces, and the admin credentials appear to be legitimate and recently harvested as part of a still-live campaign, security experts warned.

Artificial Intelligence & Machine Learning

JPMorgan Pulls Anthropic Claude Access in Hong Kong

Tiffany Wang  •  June 18, 2026

JPMorgan Chase removed Anthropic's Claude models from its approved AI platform for employees in Hong Kong, following restrictions tied to Greater China access rules and underscoring how U.S. export controls and geopolitical concerns are reshaping enterprise AI adoption in global financial markets.

Critical Infrastructure Security

CISA Urges OT Resilience in Dark Remarks About Cyberattacks

Shaun Waterman  •  June 18, 2026

Critical U.S. infrastructure like water, power and even banking systems will be successfully hacked by enemy cyber warriors in the event of a military confrontation with a peer adversary like Russia or China, officials from the nation's civilian cyber defense agency said.

Identity & Access Management

Attackers Steal Salesforce Data From Klue Battlecards Users

Mathew J. Schwartz  •  June 18, 2026

Salesforce disabled connections to its customer relationship management environment from third-party app Klue Battlecards as a response to a "security incident." Attackers breached Klue's platform, generated OAuth tokens for Salesforce and stole data, now being held to ransom.

►

Critical Infrastructure Security

Bridging the OT Cybersecurity Skills Gap

Matthew Robertson  •  June 18, 2026

Ahead of his presentation at OTsec ANZ in Sydney, CISO at Power and Water Corporation Dominic Grunden shares his perspective on the skills shortage in OT cybersecurity and the need for fresh talent, differing priorities and leadership skills to bring teams together.

Encryption & Key Management

Addressing Quantum Readiness in Healthcare Security

Marianne Kolbasuk McGee  •  June 18, 2026

Healthcare organizations should prepare for post-quantum cryptography without overreacting to hype, said John Frushour, CISO of New York-Presbyterian Hospital. Stronger encryption standards, commercial software support and attention to medical devices can help providers manage emerging risks.

Cyberwarfare / Nation-State Attacks

Cyberspace Locked in a Nation-State Contest, Says NCSC CEO

David Perera  •  June 17, 2026

Britain's top cybersecurity official sought Wednesday to reframe digital defense as a contest against a constantly shifting opponent rather than a risk to be managed, calling today's spate of breaches and hacking incidents the opening salvos of a future war.

Data Breach Notification

Heart Monitoring Firm Tells SEC Hackers Stole Sensitive Data

Marianne Kolbasuk McGee  •  June 17, 2026

Cardiac monitoring firm iRhythm Technologies has told the U.S. Securities and Exchange Commission that hackers recently stole proprietary data and patient health information from "certain" third-party-hosted business applications, and demanded a ransom. The company did not disclose whether it paid.