Vastaamo psychotherapy hack: US citizen charged in latest twist of notorious data breach

28-year-old Daniel Lee Newhard, an American citizen living in Estonia, has been charged in relation to the notorious hack of Vastaamo, the biggest data breach in Finnish history.

Read more in my article on the Hot for Security blog. Continue reading Vastaamo psychotherapy hack: US citizen charged in latest twist of notorious data breach→

“Pompompurin” resentenced: BreachForums creator heads back behind bars

Conor Brian Fitzpatrick, the creator of the notorious BreachForums hacking forum, has been resentenced to three years in prison after a US appeals court overturned his prior sentence of time served and 20 years of supervised release.

Read more in my… Continue reading “Pompompurin” resentenced: BreachForums creator heads back behind bars→

Smashing Security podcast #435: Lights! Camera! Hacktion!

When “bad actors” stop being hackers and start being… actual actors.

This week, Graham and special guest Jenny Radcliffe play “Hacker or Ham?” (yes, Steven Seagal, we’re looking at you), before diving into a campaign which saw an Iranian gang luri… Continue reading Smashing Security podcast #435: Lights! Camera! Hacktion!→

Luxury fashion brands Gucci, Balenciaga and Alexander McQueen hacked – customer data stolen

Luxury fashion group Kering – owner of the prestigious Gucci, Balenciaga, and Alexander McQueen brands, amongst others – has confirmed that hackers stole customer data from its systems in June 2025.

Read more in my article on the Hot for Security blog. Continue reading Luxury fashion brands Gucci, Balenciaga and Alexander McQueen hacked – customer data stolen→

The AI Fix #68: AI telepathy, and rights for robots

In episode 68 of The AI Fix, our hosts open the show by launching the thing nobody asked for but everybody wanted: our shiny new merch store – yes, including the “Would YOU trust a pigeon???” t-shirt for when you need fashion alongside health and safet… Continue reading The AI Fix #68: AI telepathy, and rights for robots→

British rail passengers urged to stay on guard after hack signals failure

Passengers of the UK’s state-owned London North Eastern Railway (LNER) have been warned to be vigilant after cybercriminals accessed traveller’s contact details and some information about past journeys.

Read more in my article on the Hot for Securit… Continue reading British rail passengers urged to stay on guard after hack signals failure→

Smashing Security podcast #434: Whopper Hackers, and AI Whoppers

Ever wondered what would happen if Burger King left the keys to the kingdom lying around for anyone to use? Ethical hackers did – and uncovered drive-thru recordings, hard-coded passwords, and even the power to open a Whopper outlet on the moon.

Mea… Continue reading Smashing Security podcast #434: Whopper Hackers, and AI Whoppers→

US charges suspected ransomware kingpin, and offers $10 million bounty for his capture

A US federal court has unssealed charges against a Ukrainian national who authorities allege was a key figure behind several strains of ransomware, including LockerGoga, MegaCortex, and Nefilim.

Read more in my article on the Fortra blog. Continue reading US charges suspected ransomware kingpin, and offers $10 million bounty for his capture→

Lovesac warns customers their data was breached after suspected RansomHub attack six months ago

American furniture maker Lovesac, known for its modular couches and comfy beanbags, has warned customers that their data was breached by hackers earlier this year, and that they should remain vigilant to the threat of identity theft.

Read more in my… Continue reading Lovesac warns customers their data was breached after suspected RansomHub attack six months ago→