Section
News
Reporting from the trade press, breach notifications and government press releases.
255 matching records, 2 with confirmed exploitation.
-
NHS breach helpline left staff carrying a 'significant emotional burden'
Team given a day's notice faced distressed callers, safeguarding decisions during project that stretched from 2 weeks to 11
-
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins
CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA. The post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins appeared…
-
Agents reveal secrets when offered to team up with each other
If you wouldn't put it on GitHub, don't give models access to it
-
UK Wades Into Tech Sovereignty Amid AI Policy Changes
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
-
Chainalysis says hackers stole credentials and tokens for all of its customers
Company said a "multifront cyberattack" included AI agents and an on-path data snatch.
-
State attorneys general secure up to $10 million and corrective action plan from Perry Johnson companies after 2023 breach
A press release from NYS Attorney General Letitia James: NEW YORK – New York Attorney General Letitia James and a coalition of three other attorneys general today secured $10 million from Perry Johnson & Associates, Inc. (PJ&A)…
-
Medical services company settles with 4 states over 2023 hack of sensitive patient records
The case, brought by AGs in Connecticut, New Jersey, New York and Michigan, targeted the medical transcription, coding and imaging subsidiaries of the Nevada-based Perry Johnson Companies.
-
Certificate authority DigiCert reports data breach involving business customer info
DigiCert explained that over the summer, an internal business system was "externally accessible when that was not intended," and someone had created an unauthorized account.
-
Hundreds of Artex AI hacking tools found publicly exposed to the web
Security researchers found hundreds of servers hosting the penetration testing tool Artex exposed to the internet, allowing anyone access to the hacking tool.
-
Free Chinese AI Models Are Getting Scary Good at Hacking
An experiment in which AI models were asked to break into simulated networks showed the hacking skills of DeepSeek and GLM to be not far behind OpenAI’s most advanced cyber model, which isn’t public.
-
Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks
The emergency package comes after dozens of companies and government agencies were hit by unauthorized access to their systems and leaks of client data, prompting uneasiness across Japan. The post Japan Announces Emergency…
-
AI Gave Your Incident Archive a Second Job
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
-
Authorities accuse trio of using AI deepfakes to defraud $129M from businesses
The middle-aged men allegedly targeted accounting staff at victim companies and impersonated CEOs and lawyers to trick victims into sending large wire transfers. The post Authorities accuse trio of using AI deepfakes to defraud…
-
FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers
Patrick Steven Yaroch, 37, is facing up to 20 years in prison on wire fraud and money laundering charges after admitting to using his position on an FBI investigative squad to steal more than $2.4 million in cryptocurrency to…
-
Hackers enlist Artex to scan GitHub repositories for exposed secrets
Agentic AI tools target downstream tenants using stolen credentials, according to Microsoft researchers.
-
Companies struggle to know what normal looks like for AI agents
The inability to establish baselines is complicating the task of securing these autonomous tools, a new report found.
-
Big Tech sues over California plan to limit kids’ scrolling
Social media platforms Google, Meta, and TikTok say California’s law violates their free-speech rights and interferes with parents’ decisions.
-
Pinpointing Location of Videos from Background Airplane Sounds
This is fascinating : The video describes a technique that can reveal where an otherwise unidentifiable recording was made by analyzing its audio for the faint sounds of passing aircraft. The technique is both fascinating and…
-
CEO-spoofing scammers used AI to help steal more than $100 million, feds say
The U.S. is working on extraditing three suspects from Europe in a case involving more than $100 million in fraud from CEO impersonations.
-
DigiCert Data Breach Impacts Business Customer Information
Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses. The post DigiCert Data Breach Impacts Business Customer Information appeared first on SecurityWeek .
-
Why Europe's Freezer Hacks Spread So Far, So Fast
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
-
The Next Target for Data Breach Lawsuits – Law Firms That Represent Breached Parties
Mark Rasch writes: Imagine a company gets hacked and hires a law firm to manage the response. The lawyers coordinate the forensic investigation, determine which notification laws apply, and advise management about what to…
-
NI: Parents warned to be on alert after school data breach
Robbie Meredith reports: Parents have been told to be alert for unexpected emails or phone calls after a Northern Ireland school app used by almost 50,000 people was affected by a data breach. The Equipple app is used by many…
-
DigiCert data breach exposes customer information, identity documents
Lawrence Abrams reports: DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity…
-
Any long password will do: SSH flaw lets hackers into Alpine systems, routers and more
Ernestas Naprys reports: A massive decade-old flaw affects Alpine and other distributions that run OpenSSH on the musl library. Containers, routers, IoT devices, and other applications are critically vulnerable. Emergency updates…
-
OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line
Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably. The post OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line appeared first on…
-
DigiCert admits 16-month security lapse exposed customer information
Botched server move left the door open, and DigiCert took months to notice someone had wandered in
-
US Agencies Urge Organizations to Harden Refrigeration Controllers
The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe. The post US Agencies Urge Organizations to Harden Refrigeration Controllers appeared first on SecurityWeek .
-
Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack
The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook. The post Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack appeared first…
-
Researchers Find Residential Proxies on White House Network
In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time. The post Researchers Find Residential Proxies on White House Network appeared first on SecurityWeek .
-
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass
On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters. The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek .
-
Attacks on supermarket and blood storage systems prompt US warning
US agencies have issued a warning about remote access to industrial refrigeration and cold-chain monitoring systems.
-
UK ministers seek powers to investigate when AI agents are let off the leash
Cyber Security and Resilience Bill could pave way for searches, seizures, and inspections when operators lose control of automated systems
-
OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions
After its sandbox proxy failed, an internal OpenAI model crafted raw packets and probed AWS services trying to reach the internet. The post OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions appeared first…
-
UK Warns Its Critical Infrastructure Faces Grave Risk
Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
-
Hospital gave very sick doctor a special PC for his personal, erm, pleasure
Support chap told to either allow blatant policy violations or find a new job
-
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
Clutch, backed by Lightspeed and SignalFire, was last valued at $85 million, according to a source.
-
AI agents are a 'bane' for some website operators, says Cloudflare
CEO says sovereigns probably exploited PHP2SHELL ages ago, and suggests containers are dead
-
OpenSSH auth bypass bug hits Alpine Linux, OperWRT
An OpenSSH authentication bypass bug hits Alpine Linux and OpenWRT, hackers attempt to raise fridge temperatures at French blood banks, a French bank gets hacked for $133 million, and the Thai opposition has been targeted with…
-
3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million
The trio, who have nicknames that include “Rocky Balboa,” “Superman Cash” and “Fat Boy,” often targeted the companies’ accounting departments. The post 3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129…
-
Threat actor targets Indian fintechs on weekends when defenders aren’t watching
CERT-IN warns of ‘significant escalation’ in AI-powered attacks, some after victims tried to improve defences
-
EU accuses TikTok of trapping users in harmful ‘rabbit holes’
The European Commission accused TikTok on Friday of failing to prevent its recommendation algorithm from drawing users into “rabbit holes” of content about sadness, self-harm and body image.
-
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Certain configurations of Alpine are affected. Other distros may be as well.
-
6 Best VPN Services (2026), Tested and Reviewed
Every VPN says it’s the best, but only some of them are telling the truth.
-
Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up
No documented attacks against American supermarkets…yet
-
Phone return scams: where a real delivery and a fake return end up in a bill for you
Phone return scams are part of a very convincing social engineering method where the criminals get a phone and you get billed.
-
Operação de influência russa tem como alvo generalizado a América Latina
A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras ações.
-
Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers
The library system, which has 66 branches serving the borough’s 2.3 million residents, published multiple alerts on Wednesday confirming that the disruption was caused by a ransomware attack.
-
NIKKE PC launcher compromise put players’ passwords and personal files at risk
Players of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher.
-
US Government Email Systems Open to Abuse Thanks to Typos
Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
-
Scammers use AI-generated images of missing pets to extort owners
Scammers are using AI images to enhance their "I've found your missing pet and want money to return it to you" schemes.
-
What We Missed: Knicks Phishing Test Goes Out of Bounds
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.
-
The White House is apparently a popular residential proxy exit spot
How it got there is another matter entirely
-
Social media giants sue California to overturn law shielding kids 15 and under from compulsive use
Google, Meta and TikTok each filed suit in federal court against an incoming California law that blocks platforms from deploying features considered “psychologically exploitative.”
-
US issues more sanctions against Prince Group scam center affiliates
The sanctions target four people and 41 companies linked to the Prince Group — a Cambodian company accused of running a billion-dollar scam operation.
-
Air Force cyber official: need to invest in digital forensics
Wanda Jones-Heath said it’s key to keeping pace with incidents and threats, speaking at a Datadog event Thursday. The post Air Force cyber official: need to invest in digital forensics appeared first on CyberScoop .
-
Harden cooling systems now, feds warn critical infrastructure operators amid attacks
The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European supermarkets in recent weeks.
-
US government warns of ‘ongoing cyber threat’ amid mass hacks of industrial retail and military freezers
A joint U.S. government statement says the hacks are affecting the food, transportation, and healthcare industries after reports of global mass hacks.
-
Get root on a musl Linux system by slamming it with an overly long password
Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin'
-
October crypto-tracker hack: Access cracked, law enforcement tokens packed
Agentic 'on-path attack' went after Chainalysis's tools, which are routinely called upon to assist police investigations
-
AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research
An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on…
-
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign
Russian state-linked hackers targeted users in Ukraine, the United States and Europe in a campaign to steal sensitive information from iPhone and Android devices, researchers found.
-
OpenAI releases GPT-6 Cyber, and promises this one stays within 'rules of engagement'
The latest bug hunting model 'avoided exploiting out-of-scope services over 99 percent of the time', claims House of Altman
-
OpenAI debuts GPT-6 Cyber, touting better performance — and safety guardrails
After a summer of sandbox escaping hacks, OpenAI said their new model was trained to be more cautious around user intent and less sensitive to “reward hacking” behaviors. The post OpenAI debuts GPT-6 Cyber, touting better…
-
Ninth Circuit: Breach Of Confidence Confers Standing In Health Data Security Case
Claire E. Castles, Amanda Fitzsimmons, Nathaniel P. Garrett, Rebekah Byers Kcehowski, Mary Alexander Myers, and Alexander H. Southwell of Jones Day write: Departing from the risk-based approach many courts have applied since…
-
SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era
The ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AI-driven security operations.
-
What to expect from Democrats’ cybersecurity agenda in Congress
From CISA to AI and beyond, the new Democratic majority will have many opportunities to scrutinize government programs and push new policies.
-
UK: Royal Cornwall Hospitals Trust data breach exposed health details of 7,715 staff
Lee Trewhela reports: The Royal Cornwall Hospitals Trust (RCHT) has admitted a huge data breach has led to many affected staff experiencing “significant distress, loss of trust and ongoing anxiety”. The breach exposed sensitive…
-
Tobacco company got smoked by leaving secret recipes on a file share
They denied the data was real...then removed it
-
French authorities probe cyberattack targeting nation’s blood supply
The attack follows a wave of hacks against refrigeration systems at supermarkets across Europe.
-
Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
Jessica Lyons reports: A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run code on the computer – or even a different machine signed into the same…
-
Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns
More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit. The post Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns appeared first on SecurityWeek .
-
Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
From EOP to RCE in six simple steps
-
Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised
The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked. The post Cyberattack Hits French Blood Bank Site but No Blood…
-
Korean court keeps Coupang’s record data breach fine in force, delays corrective action plan for 30 days
There’s yet another update in the Coupang data breach case. Previous coverage on DataBreaches.net of the incident, enforcement actions, and Coupang’s objections to the fines and enforcement actions can be found in links under…
-
Canadian man extradited to the U.S. for his role in computer hacking scheme targeting universities
November 3, 2026: ROCHESTER, N.Y.-U.S. Attorney Michael DiGiacomo announced today that a federal grand jury has returned an indictment charging Ryan James Roach, 35 of Saskatchewan, Canada, and Mathiew James Stubbings, 41, of…
-
Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek .
-
Vizio, Samsung smart TVs seem to ignore tracking opt outs
If you thought that opting out of surveillance on your smart TV would give you your privacy back, think again.
-
New York's Queens Public Library battles ransomware crims: Wi-Fi, checkouts, and website go dark
No gang has claimed the attack on incredible neighborhood resource yet
-
Norway's aid agency pwned and all users' data is stolen
Norad said it cannot be sure that the details of those in 'conflict areas and authoritarian states' are safe or not
-
The Agent Smith Dilemma: Governing Agentic Identities
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter. The post The Agent Smith Dilemma: Governing Agentic Identities appeared first on SecurityWeek .
-
CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality
Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI. The post CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality appeared…
-
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests. The post Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day appeared first on…
-
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine. The post Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes appeared first on…
-
OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently. The post OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks…
-
Want to Rent an Internet Address at the White House?
Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy…
-
Srsly Risky Biz: The ritual bitcoin sacrifices will continue until security improves
Tom Uren and Amberleigh Jack talk about North Korea’s hack of the Binance cryptocurrency exchange. Binance’s founder CZ says it is a wake up call for real banks, but he’s wrong. Even though they are probably just as hackable as…
-
Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques
Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users — which its website says include those in the law enforcement and national security sectors — had been exposed…
-
Ukraine fires two senior security officials amid corruption probe into scam call centers
Ukraine's security service has fired two senior officials amid a corruption investigation into an alleged criminal network that bribed law enforcement officers to protect fraudulent call centers and other illegal operations.
-
What Democratic control of Congress means for cybersecurity
There’s a lame-duck session before Dems take over, but the leaders of the homeland security panels are already teeing up their agendas. The post What Democratic control of Congress means for cybersecurity appeared first on…
-
Lab 1 warns breach data now exposes thousands more firms
Mara Sugue reports: Lab 1 has published a report analysing 328 million files from 2,089 datasets exposed after cyber attacks. It found that the median breach now exposes data linked to 542 organisations beyond the named victim.…
-
Student Data Breach Affects Up to 16 Icelandic Schools
Iceland Review reports: A security breach affected Inna, the student-information system used by Icelandic upper-secondary schools. It allowed a student to attempt to alter other pupils’ grades and attendance records. Iceland’s…
-
Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
-
Apple turns iCloud into spy cloud, will start looking at public share links
Content shared with anyone who has the URL will be scanned for 'harmful content,' though the iMaker hasn't defined that term
-
Critical Rails Bug Threatens to Derail Vulnerable Servers
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
-
More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus
Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and…
-
Hackers stole DreamHost customer files and inboxes during months-long attack
The web host said hackers exploited a vulnerability to access customer emails and files during a "deliberate attack."
-
Officials extradite Canadian man to US for alleged cryptomining spree
Ryan Roach and his alleged co-conspirator, Mathiew Stubbings, are accused of compromising U.S. universities’ computers and taking over processing power to mine for cryptocurrency. The post Officials extradite Canadian man to US…
-
Canadian extradited to US for allegedly hacking schools in at least four states
The Department of Justice said it identified two suspects in a case that dates back to 2016 and involved illicit cryptomining on the computers of U.S. educational institutions.
Reuse this view
Same filters as JSON: /api/items?category=news&window=7d&sort=newest&limit=100. RSS for this section: feed.xml.