Sansec says attackers modified a self-hosted Plausible tracker that loads on every Convertr merchant's checkout page; Convertr says it removed the skimmer and upgraded Plausible.
Moldova's prime minister says the attack on government systems looks like part of a coordinated campaign, but no country or group has been publicly blamed.
A federal judge in San Francisco denied home confinement for Abdulrahman Alfozan, who is charged with secretly recording an executive conference room. Prosecutors say his wife and son left the US the day after his arrest.
The order covers DeepSeek, its affiliates and third-party products built on its technology, and gives agencies 60 days to request exceptions reviewed by CISA.
Chukwuemeka Amachukwu was extradited from France and pleaded guilty to fraud, hacking and identity theft charges tied to spearphishing attacks on U.S. tax businesses.
The settlement, pending bankruptcy court approval, resolves allegations the company failed to protect customer data before a breach that exposed information on nearly 7 million people.
A Department of Homeland Security order requires federal civilian agencies to strip DeepSeek products, and anything built on DeepSeek implementations, from their IT systems and bars new purchases.
A New Mexico judge cut the state's original $220 billion award to $25 billion, with 15% annual interest until the fine is paid. Meta says it will appeal.
The capital city's IT department spotted suspicious activity and called in state law enforcement to lead the investigation, while the MyColaSC citizen services platform stayed offline.
The company says it believes some patient data in Quanum Lab Services Manager was accessed, and that the incident did not involve the recent PHP vulnerabilities.
A white paper would replace the 1885 Submarine Telegraph Act, whose maximum fine of £1,000 is a fraction of real repair costs, and add security duties for subsea telecom operators.