Dashlane disclosed that attackers brute-forced 2FA protections and downloaded encrypted vaults from fewer than 20 personal plan users. The vaults are encrypted, but users with weak master passwords should change them immediately.
Attackers exploited an unauthenticated API endpoint in ServiceNow to access customer instance data. The company quietly patched the flaw on June 5 after detecting anomalous activity, but not before data was queried.
Attackers abused Meta’s AI-powered High Touch Support tool to hijack over 20,000 Instagram accounts, exploiting a missing email verification check to bypass 2FA and access passwords, DMs, and personal data for over six weeks before detection.
A breach at Nelnet Servicing exposed names, addresses, and Social Security numbers for 2.5 million student loan borrowers — and the timing couldn’t be worse with loan forgiveness scams already circulating.
Attackers exploited a flaw in Meta’s AI-powered High Touch Support tool to hijack over 20,000 Instagram accounts, bypassing two-factor authentication entirely. The campaign ran undetected from April 17 to May 31, 2026.
Cybercriminals have registered nearly 19,000 FIFA-themed domains since January, targeting World Cup fans with phishing, ticket scams, travel fraud, and malware. The FBI and Meta have both issued warnings ahead of the 2026 tournament.
Over 2.5 million student loan borrowers had their personal data — including Social Security numbers — exposed through a breach at Nelnet Servicing. The incident comes at the worst possible timing, coinciding with federal loan forgiveness announcements.
Nelnet Servicing exposed 2.5M student loan records including SSNs in a breach that went undetected for weeks. Here’s what borrowers need to do now.
A breach at Nelnet Servicing exposed names, addresses, and Social Security numbers for 2.5 million student loan borrowers. Here’s what affected people need to know.
A breach at Nelnet Servicing exposed Social Security numbers and personal data for 2.5 million student loan borrowers. With loan forgiveness in the news, phishing attacks using this data are a serious and ongoing threat.
