Data Security

Eurail B.V., the company managing European rail passes, has disclosed that 308,777 American individuals had their data stolen following a December cyberattack, which was claimed to have led to the theft of 1.3 TB of data in February, reports The Record, a news site by cybersecurity firm Recorded Future.

Grupo Bancolombia and Banco De Bogota, two of the leading banks in Colombia, were claimed to have been compromised by the same threat actor, who also exposed data supposedly stolen from the financial entities' systems on DarkForums, according to Cybernews.

Security researchers from Access Now and Lookout have detailed a sophisticated espionage campaign that began in 2023 and continued through 2025.

The skimmer operates by establishing a WebRTC peer connection to a hard-coded IP address over UDP port 3479 to retrieve JavaScript code.

Employees don’t always realize the full risks of going outside the IT department and downloading “free” software.

The breach, attributed to the extortion gang World Leaks, reportedly exposed approximately 7.7 terabytes of data, including over 337,000 files.

The attackers leverage the applescript:// URL scheme to launch Script Editor with pre-filled malicious code.

Major luxury hotel and casino operator Wynn Resorts had information from 21,775 of its employees exfiltrated in a ShinyHunters-claimed attack, which was initially confirmed in late February, SecurityWeek reports.