Compliance & Governance
Dropbox Lenovo ID Breach — No Password Needed to Break In
A Dropbox Lenovo ID breach compromised roughly 5,000 accounts without attackers ever needing a Dropbox password. Dropbox confirmed on September 1, 2026 that a flaw in Lenovo’s email verification process let an unauthorized party register a Lenovo ID using a victim’s email address, then use that fraudulent identity to sign straight into the matching Dropbox…
Read MoreTerminalFix ClickFix Attack Campaign Hits Germany
A TerminalFix ClickFix attack campaign has compromised a German state institution’s network, Germany’s Federal Office for Information Security (BSI) confirmed on September 4. TerminalFix is an evolution of the ClickFix social-engineering technique: a fake CAPTCHA tricks a user into pasting a command, but instead of the old single-machine Run-dialog trick, it opens Windows Terminal and…
Read MoreBoston Scientific Cyberattack Halts Global Shipments
A Boston Scientific cyberattack detected on August 25 has caused what the company itself calls a “global disruption” — halting order processing and shipping for one of the world’s largest manufacturers of pacemakers, defibrillators, stents and other implantable medical devices, with no confirmed restoration timeline more than a week later. What Happened The Boston Scientific…
Read MoreSwiss Federal SharePoint Breach Hits 200 Accounts
The Swiss federal SharePoint breach compromised roughly 200 accounts at Switzerland’s Federal Office of Information Technology, Systems and Telecommunication (BIT/FOITT), the agency confirmed in early August 2026. It is the first time DIESEC’s ongoing SharePoint vulnerability coverage has connected to a confirmed, named breach inside a DACH government body — not just a vendor advisory.…
Read MoreEY Third-Party Data Breach: 15 Days Inside Helpdesk
EY third-party data breach: attackers spent 15 days inside a support-ticketing platform used by Ernst & Young’s tax practice, walking out with client tax filings, Social Security numbers and financial account data before anyone noticed — the firm’s third vendor-side security failure in under three years. What Happened This EY third-party data breach ran from…
Read More