The Breach News

North Korea Allegedly Inundates npm Registry with Malware

3rd Party Risk Management, Application Security, Governance & Risk Management 67 Malicious Packages Flood npm Registry Targeting JavaScript Developers Prajeet Nair (@prajeetspeaks) • July 16, 2025 North Korean threat actors have escalated their attacks by introducing 67 malicious packages to the npm Registry, part of the ongoing Contagious Interview campaign.…

Read MoreNorth Korea Allegedly Inundates npm Registry with Malware

67% of EU Government Institutions Receive D or F Grades for

85% of Employees Recirculate Compromised Passwords as Cybersecurity Threats Rise in EU Institutions In a pressing update from 2025, the European Commission has rolled out new initiatives designed to boost cyber resilience and enacted legislation aimed at enhancing cybersecurity across the European Union (EU). Nevertheless, significant apprehensions persist regarding the…

Read More67% of EU Government Institutions Receive D or F Grades for

Google Discovers Custom Backdoor Installed on SonicWall Network Devices

Cybersecurity Alert: Vulnerability Detected in SonicWall Secure Mobile Access Devices Recent findings from the Google Threat Intelligence Group have uncovered a concerning trend involving the exploitation of SonicWall Secure Mobile Access (SMA) appliances. These devices are critical components in enterprise networks, tasked with managing secure access for mobile devices. Unfortunately,…

Read MoreGoogle Discovers Custom Backdoor Installed on SonicWall Network Devices

UK NCSC Launches Software Vulnerability Initiative

Application Security , Governance & Risk Management , Next-Generation Technologies & Secure Development Agency Partners with Industry Experts for Enhanced Vulnerability Research Akshaya Asokan (asokan_akshaya) • July 16, 2025 The U.K. National Cyber Security Centre is seeking to expand vulnerability detection and mitigation efforts through collaboration with industry experts. (Image:…

Read MoreUK NCSC Launches Software Vulnerability Initiative

Thousands of Afghans Stealthily Relocated to the UK Following Data Breach – MSN

Thousands of Afghans Secretly Evacuated to the UK After Data Breach In a developing situation that highlights significant data security vulnerabilities, thousands of Afghan nationals were clandestinely transported to the United Kingdom following a substantial data leak. This breach, which has raised alarming concerns about privacy and security, reveals the…

Read MoreThousands of Afghans Stealthily Relocated to the UK Following Data Breach – MSN

DHS Under Increased Scrutiny for DNA Collection from Immigrant Children

Senator Wyden Questions DNA Collection Practices at DHS and DOJ United States Senator Ron Wyden has raised concerns regarding the collection of DNA from immigrants, including children, by the Departments of Homeland Security (DHS) and Justice (DOJ). In a recent inquiry, Wyden is demanding explanations about the legality, scope, and…

Read MoreDHS Under Increased Scrutiny for DNA Collection from Immigrant Children

AI Giants Advocate for Transparency in Model Decision-Making Processes

Artificial Intelligence & Machine Learning, Next-Generation Technologies & Secure Development Experts Investigate AI Model Reasoning and Its Implications Rashmi Ramesh (rashmiramesh_) • July 16, 2025 AI researchers from OpenAI, Google DeepMind, Anthropic, and others advocate for deeper exploration of chain-of-thought monitoring. (Image: Shutterstock) As artificial intelligence models articulate what they…

Read MoreAI Giants Advocate for Transparency in Model Decision-Making Processes

Louis Vuitton Links Regional Data Breaches to a Single Cyberattack

The luxury fashion powerhouse Louis Vuitton has disclosed a significant data breach affecting customers in the UK, South Korea, and Turkey, all traced to a singular security incident linked to the ShinyHunters extortion group. The retailer began notifying affected customers last week, initially focusing on South Korea, followed by notifications…

Read MoreLouis Vuitton Links Regional Data Breaches to a Single Cyberattack

Data Breach at UnitedHealth-Associated Tech Firm Episource Affects 5.4 Million Patients

Episource, a medical billing company affiliated with Optum, a subsidiary of UnitedHealth Group, has reported a significant data breach affecting over 5.4 million individuals in the United States. This incident, which occurred earlier this year, has been classified as one of the largest healthcare data breaches recorded in 2025, as…

Read MoreData Breach at UnitedHealth-Associated Tech Firm Episource Affects 5.4 Million Patients