Hackers stole fingerprints and medical data from 1.8 million people in NYC’s largest public hospital breach
Hackers stole fingerprints and medical data from 1.8 million people in NYC’s largest public hospital breach

  New York City Health and Hospitals, the largest public healthcare system in the United States, has disclosed that hackers stole personal data, medical records, and biometric information, including fingerprints, in a breach affecting at least 1.8 mill…

Grafana Labs refuses ransom after hackers steal already-open-source code
Grafana Labs refuses ransom after hackers steal already-open-source code

The hackers exfiltrated a codebase that was already open source, then demanded payment to keep it from being released. Grafana said no, and cited the FBI’s standing advice. It is the second high-profile extortion case in seven days. Grafana Labs, the o…

A student with a laptop and a radio stopped four high-speed trains. The crypto keys hadn’t been changed in 19 years.
A student with a laptop and a radio stopped four high-speed trains. The crypto keys hadn’t been changed in 19 years.

At 23:23 on 5 April, a 23-year-old university student in Taichung transmitted a falsified General Alarm signal into the Taiwan High Speed Rail Corporation’s internal radio system. Four trains travelling at up to 300 km/h received the highest-priority e…

Four OpenClaw flaws let attackers steal data, escalate privileges, and plant backdoors through the agent’s own sandbox
Four OpenClaw flaws let attackers steal data, escalate privileges, and plant backdoors through the agent’s own sandbox

Cybersecurity researchers at Cyera have disclosed four vulnerabilities in OpenClaw that, when chained together, allow an attacker to steal sensitive data, escalate privileges, and establish persistent control over a compromised host. The flaws, collect…

Snap, YouTube, and TikTok settle school addiction lawsuit, leaving Meta to face trial alone
Snap, YouTube, and TikTok settle school addiction lawsuit, leaving Meta to face trial alone

Snap, Google’s YouTube, and ByteDance’s TikTok have reached settlements in the first lawsuit brought by a public school district over claims that social media addiction has disrupted learning and forced schools to spend heavily on combating a youth men…

Google found the first AI-generated zero-day exploit. It stopped the attack before it started.
Google found the first AI-generated zero-day exploit. It stopped the attack before it started.

  Google has identified the first zero-day exploit it believes was developed with artificial intelligence. The criminal threat actor that built it planned to use it in a mass exploitation event. Google’s Threat Intelligence Group discovered the vulnera…

NHS England gives Palantir contractors broader access to patient data
NHS England gives Palantir contractors broader access to patient data

A leaked internal briefing note describes a new admin role on the £330m Federated Data Platform that lets external staff bypass case-by-case data approvals. Patient groups and Labour MPs have called the change dangerous. NHS England has decided to allo…

Cloudflare beat earnings, cut 1,100 jobs because AI agents do the work now, and lost a quarter of its stock price in a day
Cloudflare beat earnings, cut 1,100 jobs because AI agents do the work now, and lost a quarter of its stock price in a day

  Cloudflare beat Wall Street’s revenue and earnings estimates on Wednesday, announced it would cut 1,100 employees because artificial intelligence agents now do their work, and watched its stock fall 24 per cent on Thursday. The sequence is becoming t…

A data centre fire in Almere disabled a university, a transport emergency system, and the assumption that physical infrastructure is someone else’s problem
A data centre fire in Almere disabled a university, a transport emergency system, and the assumption that physical infrastructure is someone else’s problem

A fire at a data centre in Almere on Thursday morning knocked a university offline, disabled the emergency communication system for public transport across an entire province, triggered an NL-Alert to residents across Flevoland, and required a crash te…

The largest education data breach in history was not an attack on a school. It was an attack on a vendor.
The largest education data breach in history was not an attack on a school. It was an attack on a vendor.

  The largest education data breach in history was not an attack on a school. It was an attack on a vendor. On 30 April, hackers exploited a vulnerability in the systems of Instructure, the company that makes Canvas, the learning management system used…