Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.
| 19 Jul 2026 | |
| Written by Gabi Gerber | |
| Attacks & Threats |
| Security Operation Center, Hacking Topics |
Ernst & Young has begun notifying clients of a data breach after an attacker compromised a third-party support platform and downloaded documents containing personal and financial information used in preparing tax returns.
The incident affected an external IT service-management system used by EY employees supporting the firm’s client tax services. Support tickets created through the platform could include document attachments, creating a route through which confidential tax records and related financial information were exposed.
EY detected suspicious activity involving the platform on April 23, 2026, and launched an investigation with assistance from an independent cybersecurity firm. The investigation determined that an unauthorised third party had accessed the system between March 28 and April 12 and downloaded documents belonging to multiple clients. More here
Organizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them. More...
Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot… More...
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval de… More...
The "third-party[.]com" domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure … More...
Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phi… More...
Organizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them. More...
Threat actors are now hiding payloads by using DNS TXT records and browser cache pre-fetching, making it tougher to spot… More...
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval de… More...
The "third-party[.]com" domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure … More...
Microsoft seized 50 websites and disabled more than 150 domains as part of a coordinated disruption effort against a phi… More...
