Australian car rental insurer Prosura has suffered a major data breach, exposing the personal and policy information of an estimated 300,000 customers. Attackers are now selling the stolen data identity data on a public forum after the company reportedly failed to meet their demands.
Spangle AI, a startup founded by former Amazon and Bolt executives, has raised $15 million in a Series A round to build an agentic infrastructure for ecommerce. The platform connects AI-driven product discovery with real-time conversion.
Instagram is denying a system breach after data from 17.5 million accounts was leaked online and users were hit with a wave of password reset emails. Meta says it fixed a bug causing the email spam, but the leaked data, though likely old, still poses a significant phishing risk to users.
Somalia's government has confirmed a major data breach of its electronic visa system, exposing the sensitive personal information of over 35,000 travellers. The incident has prompted warnings from the US and UK, raising serious concerns over digital infrastructure security.
Cyber News Centre's cyber update for 17th November 2025: Somalia’s Immigration and Citizenship Agency has confirmed a significant breach of its e-visa system, compromising the personal details of over 35,000 travellers and triggering urgent international cybersecurity advisories.
The Somali government's Immigration and Citizenship Agency is responsible for border control, issuing passports, and managing the country's visa processes. The agency recently launched the electronic visa system to digitise and centralise travel authorisation for all visitors to the country.
The Immigration and Citizenship Authority (ICA) confirms that it has detected an unlawful breach targeting parts of the data of individuals travelling to Somalia (e-Visa). The attempt was immediately identified and swiftly prevented.
— SNTV News (@sntvnews1) November 16, 2025
The Government of Somalia is treating this… pic.twitter.com/tN7Om8V1vg
Update: Somalia's government has confirmed its electronic visa system was penetrated by unidentified hackers, exposing the personal data of at least 35,000 travellers, including thousands of US citizens. The breach prompted the US and UK to issue security alerts, warning that the compromise is ongoing and any new data entered into the system is at risk. Leaked information reportedly includes names, photos, birth dates, and home addresses.
In response, Somalia's Security Minister, Abdullahi Sheikh Ismail Fartag, dismissed the deputy director of the Immigration and Citizenship Agency, Mohamed Kasim, citing the need to strengthen the agency's performance.
The government has since moved its visa service to a new website without official explanation, and the original portal has been taken offline. An investigation is underway to determine the origin and full extent of the attack, which represents one of the most significant cybersecurity failures in the nation's history.
The reshuffle came only hours after the Immigration and Citizenship Agency acknowledged that its online visa platform had been breached, a development first reported by Somali Guardian. Officials confirmed an investigation is underway to determine who was behind the intrusion and to assess the full extent of the damage.
Why it Matters: This breach severely undermines confidence in Somalia's digital infrastructure at a critical time of state-building and digitisation. For the 35,000+ affected travellers, the exposure of sensitive personal and travel data creates immediate risks of identity theft, targeted phishing, and potential physical threats, especially for diplomats and intelligence personnel who have reportedly left the country. The incident also fuels political tensions with the self-declared republic of Somaliland, which had warned the system was unsafe. The failure to protect such critical data erodes trust between international partners and the Somali government, potentially impacting foreign investment, aid, and diplomatic relations.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Australian car rental insurer Prosura has suffered a major data breach, exposing the personal and policy information of an estimated 300,000 customers. Attackers are now selling the stolen data identity data on a public forum after the company reportedly failed to meet their demands.
Instagram is denying a system breach after data from 17.5 million accounts was leaked online and users were hit with a wave of password reset emails. Meta says it fixed a bug causing the email spam, but the leaked data, though likely old, still poses a significant phishing risk to users.
A sophisticated Chinese-speaking threat actor has been caught exploiting a trio of VMware ESXi zero-day vulnerabilities, allowing them to escape virtual machines and gain full control of the underlying hypervisor.
Gulshan Management Services, a Texas-based operator of ~150 gas stations, has disclosed a major data breach affecting over 377,000 individuals. The breach, resulting from a phishing attack that led to a ransomware infection, exposed highly sensitive personal and financial information.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
