Major phishing-as-a-service platform LabHost had its administrator Zak Coyne sentenced in the UK's Manchester Crown Court to 8.5 years imprisonment after he pleaded guilty to several charges related to fraudulent activity, reports Infosecurity Magazine.

Almost 8 million healthcare workers in the UK had their sensitive records inadvertently exposed by a misconfigured database belonging to Logezy, an employee data management software company, Hackread reports.

New York-based infusion center operations management software firm Endue Software and Illinois-based private ambulance service provider Medical Express Ambulance have confirmed being impacted by separate cyberattacks that cumulatively affected more than 236,000 individuals, according to Cybernews.

SecurityWeek reports that Texas-based third-party insurance administrator Landmark Admin and Georgia-based software solutions provider Young Consulting have updated their respective breach filings with the Office of the Maine Attorney General to indicate that more individuals had their information compromised than initially disclosed.

Infamous cybercrime marketplace BreachForums had its operations interrupted following a distributed denial-of-service attack claimed by pro-Palestinian hacktivist group Dark Storm Team just after threat intelligence firm ThreatMon disclosed the circulation of unverified reports regarding the website's seizure by the FBI, as well as the arrest of IntelBroker, who is one of its most prolific members, Cybernews reports.

Notorious online forum 4chan has been taken down following a significant cyberattack claimed by members of the Soyjak.party imageboard, or The Party, on Monday, according to BleepingComputer.

Hackread reports that widely used online file conversion tool PDFCandy.com has been spoofed to spread the ArechClient2 information-stealing malware.

Credential theft achieved by malicious MEXC order-hijacking PyPI package Major cryptocurrency trading exchange MEXC could have its trading orders hijacked and credential tokens exfiltrated through the new malicious ccxt-mexc-futures package, which has amassed at least 1,065 downloads before being removed from the Python Package Index repository, The Hacker News reports.

Seven organizations have already been compromised in intrusions exploiting the critical zero-day deserialization flaw impacting the Gladinet CentreStack enterprise file-sharing platform and Triofox on-premises file-sharing server, tracked as CVE-2025-30406, reports Cybersecurity Dive.

Attacks involving trojanized coding challenges have been launched by North Korean state-sponsored hacking operation Slow Pisces, also known as TraderTraitor, JadeSleet, and Pukchong, to compromise cryptocurrency project developers with the new RN Loader and RN Stealer payloads since last year, according to Infosecurity Magazine.