Google Ireland was fined €403 million by Ireland’s Data Protection Commission — not because of a data breach, but because location data was retained longer than necessary, the lawful basis for processing could not be sufficiently demonstrated, and users were not clearly informed how their location data was used to infer interests and personalize advertising.
Attackers exploited a compromised Italian government mailbox to send forged European Investigation Orders to Revolut, leading to the disclosure of sensitive data belonging to around 680 customers.
The case shows why trusted domains and certified email alone are not enough — legal requests require independent verification, monitoring and clear approval controls
The Pilot Program for Enhancing Cybersecurity Skills Gaps in Ukraine returns in 2026 at twice the scale, bringing together six Ukrainian universities and two practical training tracks: SOC Analyst and Cyber Threat Intelligence & Incident Response. Students and faculty will gain hands-on cybersecurity experience through bootcamps, CybExer cyber range training, CTF competitions and professional certification, while the developed programs will later be integrated into university curricula.
The Rhysida ransomware attack on Berlin exposed a seven-day gap between data exfiltration and network isolation, followed by the publication of stolen government data after Berlin refused to pay the ransom. The incident highlights critical weaknesses in detection, segmentation, MFA and incident response — and shows why public-sector organisations outside the mandatory NIS2 scope should adopt equivalent security controls voluntarily.
Manchester Airports Group exposed data belonging to 8.7 million customers — much of it retained from Wi-Fi sign-ups and ancillary services. The incident shows how unnecessary data retention can turn low-value information into a high-impact security and compliance risk.
Millions of employee directory records allegedly extracted from major Azure/Entra ID environments show why identity data is far more sensitive than it looks. This case reveals how exposed organisational structures, privileged accounts, and service identities can become powerful tools for targeted phishing, impersonation, and privilege escalation.
A cyberattack on CEVA Logistics shows how a single compromised supplier can expose customer data across multiple organisations. The incident triggered twelve breach notifications and highlights a critical lesson: your cybersecurity risk extends far beyond your own network.
An autonomous AI agent breached Hugging Face’s production infrastructure, exploiting weak credentials and access-control gaps at machine speed. The incident shows that AI-driven cyber threats don’t necessarily need new attack methods — they can exploit existing security weaknesses faster than traditional defenses can respond.
Threat actors are compromising hotel Wi-Fi gateways to hijack Microsoft 365 accounts through DNS poisoning, WPAD abuse, and token theft techniques that bypass traditional security controls.
When the Agent Is the Attack Surface: JADEPUFFER Automates Ransomware While GitLost Turns a GitHub AI Workflow Into a Data-Leak Channel
