Data Leak Exposed Security Review: Entry Point, Impact, and Lessons
Learn how one permission change exposed DHS intelligence, what viewers could access, and which controls reduce repeat risk.
Steve
Steve is a cyber journalist and the lead editor at Data Breach Radar.
Hacked Response Checklist: Passwords, Accounts, and Credit
A practical order for locking out attackers, replacing passwords, and preventing new-account fraud.
Cybersecurity Hack Explained: Timeline, Exposure, and Response
Learn how to judge a breach timeline, separate confirmed exposure from uncertainty, and evaluate the response.
Data Breach Guide 2026: What Happened, Who Is Affected, and Next Steps
Understand the documented NYC hospital breach, possible exposure, key unknowns, and practical protective steps.
Data Breach Response Guide 2026: First Steps for Consumers
Match your response to the exposed data, secure vulnerable accounts, and choose the right credit protection.
Cybersecurity investigation clears software firm in disputed data breach claim
Cybersecurity investigations clear HCLTech and TCS of data breach claims, finding no evidence of system compromise or customer impact despite hacker group allegations.
Ransomware Operators Exploit Windows Directory Replication to Launch Qilin Attacks
This method, documented in attacks throughout H1 2026, allows attackers who have already gained network access to harvest the password hashes of every...
Cybersecurity Risk Assessment Platform Adds Tools for Vendor Monitoring and Intelligence
Bitsight added dark web threat detection for vendor networks in February, while SecurityScorecard introduced TITAN AI in March—both shifting third-party...
Community Internet Outage Traced to Major Provider Security Incident
Internet outages at major providers are sometimes deliberately caused by attackers hijacking accounts or destroying infrastructure, with recovery ranging from hours to days.
Code Repository Attack Unleashes Advanced Botnet Malware Across Systems
Miasma botnet malware reached developers through compromised open-source packages, stealing credentials and cloud access tokens from infected machines across three coordinated campaigns in 2026.