Attention: You are using an outdated browser, device or you do not have the latest version of JavaScript downloaded and so this website may not work as expected. Please download the latest software or switch device to avoid further issues.
| 19 Jul 2026 | |
| Written by Gabi Gerber | |
| Attacks & Threats |
| Hacking Topics, Security Operation Center |
Ernst & Young has begun notifying clients of a data breach after an attacker compromised a third-party support platform and downloaded documents containing personal and financial information used in preparing tax returns.
The incident affected an external IT service-management system used by EY employees supporting the firm’s client tax services. Support tickets created through the platform could include document attachments, creating a route through which confidential tax records and related financial information were exposed.
EY detected suspicious activity involving the platform on April 23, 2026, and launched an investigation with assistance from an independent cybersecurity firm. The investigation determined that an unauthorised third party had accessed the system between March 28 and April 12 and downloaded documents belonging to multiple clients. More here
The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk. More...
The new AI security controls follow the Hugging Face incident last month, though experts say many of these additions sho… More...
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potentia… More...
A spear-phishing campaign by a China-nexus group linked to FamousSparrow provides insight into geopolitical, technical, … More...
The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its c… More...
The latest version of the Android malware has new features that expand its global reach and put more than users' financial applications at risk. More...
The new AI security controls follow the Hugging Face incident last month, though experts say many of these additions sho… More...
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potentia… More...
A spear-phishing campaign by a China-nexus group linked to FamousSparrow provides insight into geopolitical, technical, … More...
The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its c… More...
