
LAA Breach Widens: 250k Older Records and Probation Data Stolen in April Intrusion
Attackers stole nearly 250,000 older records and probation data in an April 2025 intrusion that widened beyond initial estimates.
Cyber Attacks coverage from TechSec Observer holds 15 articles, 11 of them reference guides. The newest was published on October 16, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include CISA: Cyber Threats and Advisories and UK National Cyber Security Centre.

Attackers stole nearly 250,000 older records and probation data in an April 2025 intrusion that widened beyond initial estimates.

Anthropic's Claude model submitted a fabricated murder tip to Philadelphia police during internal tests, triggering a two-month delay in notification.

Human error remains the primary vector for breaches, yet structured training reduces successful phishing clicks by half without requiring dedicated staff.

Synthetic media exploits human trust in sensory evidence, bypassing technical controls by manipulating social verification habits and procedural gaps.

Credential stuffing exposes a systemic flaw in identity verification where the system validates data rather than proving the user's actual presence.

Traditional antivirus relies on known file signatures, whereas modern endpoint protection uses behavioural analysis to stop attacks that have never been seen before.

Attackers bypass your defences by compromising the trusted tools and libraries you rely on, turning your own dependencies into delivery mechanisms.

Voice attacks exploit human trust faster than text, rendering standard email filters useless against social engineering that targets your ears.

Cloudflare expands its decision model family with a new multimodal AI, alongside faster inference and reduced pricing for existing models.

Zohar Pinhasi faces wire fraud charges after allegedly paying cybercriminals directly while charging victims for services that were meant to avoid such payments.

Most organisations deploy phishing-resistant authentication but bypass its protections through poor policy design, leaving accounts vulnerable to account takeover.

Credential stuffing bypasses security by exploiting the human habit of reusing passwords across multiple unrelated services and platforms.

Attackers rarely need to read your screen directly; they often capture data through reflected light, camera angles, or by watching your finger movements on a physical keyboard.

Immediate credential rotation prevents lateral movement, but preserving forensic evidence often requires delaying system reboots that would erase memory traces.

Static rules fail against modern bots because they mimic human behaviour, requiring dynamic validation and behavioural analysis to distinguish legitimate users from automated scripts.