Financial service MoneyGram has experienced a cyberattack, during which an unauthorized third party accessed and acquired personal consumer information. The breach included social security numbers, contact information, bank account numbers, and fraud investigation data. The firm is rectifying the issue, has relaunched services, and is offering U.S. consumers two years of free identity protection and credit monitoring.

Mandiant warns of attacks on newly-disclosed Ivanti remote takeover threat
Google’s Mandiant team has issued an alert about a remote code execution flaw in the Ivanti Connect Secure VPN platform. The vulnerability, designated CVE-2025-22457, is