Incident coverage examines breaches, outages, and response failures to explain how security events affect systems, data, and organizations.
Search across headline titles and summaries.
Background for this topic.
An incident is a suspected or confirmed event that threatens the confidentiality, integrity, or availability of information or systems, or violates a security policy. Examples include unauthorized access, malware execution, exposed credentials, data loss, and disruptive attacks. Not every alert is an incident: triage determines whether an event is credible, its scope, and the assets or data involved.
Incident handling requires timely detection, analysis, containment, eradication, and recovery. Practitioners must preserve relevant evidence, identify affected accounts and systems, assess whether data was accessed or altered, and prevent recurrence. Clear escalation and documentation support privacy or regulatory notifications when applicable. Findings should feed security improvements such as closing exploited vulnerabilities, strengthening access controls, and updating detection and response procedures.
Taiwanese PC company MSI (short for Micro-Star International) officially confirmed it was the victim of a cyber attack on its systems
The UK's Criminal Records Office (ACRO) has finally confirmed, after weeks of delaying issuing a statement, that online portal issues experienced since January 17 resulted from what it described as a "cyber security incident." [...]
ACRO says payment data safe, other info may have been snaffled ACRO, the UK's criminal records office, is combing over a "cyber security incident" that forced it to pull its customer portal offline.…
Ransomware suspected as visa applications are hit
Microsoft’s Sarah Armstrong-Smith explains why past incidents are crucial to informing our incident response strategies
The incident involved an unauthorized third party gaining access to several systems
Thinks information from internal systems 'obtained' by 3rd party, unsure of nature or scope data Western Digital is today dealing with a "network security incident" after detecting a break-in into its internal systems by an unauthorized third party.…
Data storage devices maker Western Digital on Monday disclosed a "network security incident" that involved unauthorized access to its systems
Nearly five million impacted by December 2022 incident
Firm has billions of pounds worth of government contracts