Cocospy, Spyic, and Spyzie—three near-identical stalkerware apps—have gone offline following a significant data breach. These apps were previously caught spying on millions of phones earlier in 2025.

A phishing campaign exploited the U.S. government’s GovDelivery email system to send scam messages impersonating official toll collection notices. The emails were sent from an official Indiana government email address.

A data breach at Connecticut’s largest healthcare system Yale New Haven Health affects more than 5.5 million people, according to a legally required notice with the U.S. government’s health department.

The Series D round led by Evolution Equity Partners values the Boston-based, Tel Aviv-founded startup at over $1 billion. The funding will be used for M&A and to continue developing its product, CEO Amitai Ratzon said.

Drata, a security compliance automation platform that helps companies adhere to frameworks such as SOC 2 and GDPR, has acquired software security review startup SafeBase for $250 million.

Zilla, based in Boston and established in 2019, offers cloud-native solutions with automation and AI features, making it an attractive buy for CyberArk. The deal includes $165 million in cash and a $10 million earn-out based on certain milestones.

French startup Riot has raised a $30 million Series B funding round after reaching $10 million in annual revenue in 2024. Left Lane Capital led the round, with participation from existing investors Y Combinator, Base10, and FundersClub.

SignalFire is leading this round with participation also from Lightspeed Venture Partners and Merlin Ventures, existing backers that invested in its previous $8.5 million seed round.

Hackers are exploiting outdated versions of WordPress and plug-ins to alter thousands of websites in an attempt to trick visitors to download and install malware, security researchers have found.

The state of Washington has sued T-Mobile over allegations that the phone giant failed to secure the personal data of millions of state residents prior to an August 2021 data breach that affected over 79 million customers across the U.S.