Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.
| 19 Jul 2026 | |
| Written by Gabi Gerber | |
| Attacks & Threats |
| Hacking Topics, Security Operation Center |
Ernst & Young has begun notifying clients of a data breach after an attacker compromised a third-party support platform and downloaded documents containing personal and financial information used in preparing tax returns.
The incident affected an external IT service-management system used by EY employees supporting the firm’s client tax services. Support tickets created through the platform could include document attachments, creating a route through which confidential tax records and related financial information were exposed.
EY detected suspicious activity involving the platform on April 23, 2026, and launched an investigation with assistance from an independent cybersecurity firm. The investigation determined that an unauthorised third party had accessed the system between March 28 and April 12 and downloaded documents belonging to multiple clients. More here
Threat actors behind the "Phantom Deal" campaign are studying companies in extreme detail, aiming to dupe midlevel employees into initiating large financial transfers. More...
The "Spring Ring" operation aims to compromise users of the collaboration suite to remotely access their sessions, sprea… More...
Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a m… More...
OpenAI's Hugging Face attack postmortem shows agents don't care about rules — they need strong controls. More...
An untold number of ZBT routers sold around the world as white-label products come with several implants built by the ma… More...
You can't make an omelet without breaking a few eggs, and you can't patch nearly 1,000 CVEs without a few glitches. More...
Threat actors behind the "Phantom Deal" campaign are studying companies in extreme detail, aiming to dupe midlevel emplo… More...
The "Spring Ring" operation aims to compromise users of the collaboration suite to remotely access their sessions, sprea… More...
Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a m… More...
OpenAI's Hugging Face attack postmortem shows agents don't care about rules — they need strong controls. More...
