Section
News
Reporting from the trade press, breach notifications and government press releases.
268 matching records, 11 with confirmed exploitation.
-
Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
The Department of Justice and FBI announced two separate actions in response to North Korea-linked cryptocurrency theft operations.
-
TSMC has reportedly leaked the personal data of 46,000 employees, but emphasized that no evidence of intrusion was found in the system.
The following is an automated Google translation of an article that originally appeared in Chinese. Jian Yongxiang reports: TSMC, the world’s leading semiconductor foundry, has been hit by a major cybersecurity incident. Hackers…
-
Resource: DysruptionHub’s Cyber Incident Registry completes its historical backfill
More than 600 researched profiles now connect past coverage with ongoing follow-up, alongside new ways for Sustainers to follow the reporting. Joseph Topping reports: DysruptionHub’s Cyber Incident Registry now contains more than…
-
Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity
CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers never steal a single file. According to a media background briefing released…
-
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them. The post Rogue remote-access campaign spread through ScreenConnect add-on…
-
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
Meanwhile, a group of nonprofits sue AI giants and cite AI-driven cyberattacks
-
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are retargeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.
-
Lego marketplace BrickLink in pieces after 'unusual activity' takes it offline for almost a week
Lego fans demand answers as outage approaches a week with no confirmed cause
-
Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email
Microsoft says its systems are experiencing “elevated loads” as the company races to end an outage impacting its business and enterprise customers.
-
United to block customers from using AI agents, citing cyber threats
“Sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases" and more, United Airlines said.
-
Shipping giant Maersk says recent cyber incident affected legacy system
The incident is the latest in a string of attacks on ports and other shipping organizations worldwide, with Brazil’s largest port hit with ransomware last week.
-
Software Samaritan revamps borked Indian certs to block smart TV ads
A little tinkering can black hole obnoxious Samsung TV ads and some tracking, until a firmware fix ruins the fun
-
United Airlines blocks AI agents from booking flights, citing cybersecurity risks
The airline said it will not allow customers to use AI agents to book flights and manage reservations.
-
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders
CyberScoop is exclusively reporting on the letter to the Hill on the controversial snooping authorities under the Foreign Intelligence Surveillance Act. The post Don’t put Section 702 spying law renewal in defense bill, groups…
-
International operation dismantles malware networks, exposes 6.4 million stolen credentials
The Operation Endgame action dismantled the loaders, remote access trojans and infostealers that give ransomware gangs their way into corporate networks. The post International operation dismantles malware networks, exposes 6.4…
-
European authorities take down SteaIC malware servers for second time this year
German authorities on Thursday said investigators traced the rebuilt network to the Virtualine bulletproof hosting provider, seized by the FBI in October, with the assistance of police in Frankfurt and the Dutch National High…
-
ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations
Abuse of an independent third-party tool led to breaches at ScreenConnect customers, confirmed the software's maker, ConnectWise. Cybersecurity researchers had spotted intrusions at nearly 50.
-
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Sergiu Gatlan reports: Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations. Gootloader is a malware loader active…
-
Hong Kong Sogo data breach puts personal information of 820,000 members at risk
Danny Mok reports: Major Hong Kong retailers Sogo and Chow Sang Sang have disclosed separate data breaches after unauthorised parties accessed their systems, potentially exposing the personal information of customers, including…
-
Unocoin Goes Dark As 81,000 Wallets Show Zero Holdings
Damilola Esebame reports: Indian cryptocurrency exchange Unocoin said it discovered unauthorized access to its servers on 9 November and temporarily disabled user logins while its security team investigated. In its public notice…
-
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled. The post Apache Patches Critical HTTP Server RCE Found by Anthropic, Google appeared first on…
-
AI found widespread IoT vulnerabilities more quickly and cheaply than humans could
The newly discovered vulnerabilities illustrate AI’s growing power — as well as critical infrastructure’s continuing weaknesses.
-
Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
This is Fireworks' second data breach in as many months.
-
Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era
Upgrade, migrate, but don't prevaricate – time has run out
-
Hijacked email accounts complicate investigations into European bomb hoaxes
Bomb threats sent to thousands of schools across Europe this week came from a compromised email account at a Taiwanese university, the latest incident in a series of hoax threats that have targeted airports and newsrooms using…
-
LEGO’s BrickLink taken offline: What users should know
BrickLink, the LEGO marketplace, has gone offline after detecting unusual activity, without disclosing whether customer data was affected.
-
Nvidia’s Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO
Nvidia gets a new chief executive, days after former CEO Jensen Huang admitted to a romantic affair with an alleged Chinese spy.
-
Apple’s HomeView Tries Face Authentication Without FaceID
Apple’s FaceID has long provided robust authentication. But for its smart home device, HomeView, the company is betting on new “person recognition” technology that has yet to be challenged in the wild.
-
Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160. The post Chrome, Firefox Updates Patch Over 180 Vulnerabilities appeared first on SecurityWeek .
-
Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign
Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories. The post Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign appeared first…
-
Romania says it stopped Russian cyberattack targeting government emails
Romania's intelligence agency said it stopped a cyber-espionage campaign by Russian state-linked hackers before the group exfiltrated sensitive data.
-
Daylight Lands $80 Million for AI-Powered Security Operations
The company plans to accelerate product development, hire new talent, expand its US presence, and enter new markets. The post Daylight Lands $80 Million for AI-Powered Security Operations appeared first on SecurityWeek .
-
Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
ConnectWise disables third-party extensions in 400 environments as bughunters uncover auth hole may let crims bypass MFA
-
Kazakhstan-linked hackers used AI agent to spy on Central Asian governments
Suspected Kazakhstan-linked hackers used an artificial intelligence agent to help spy on Central Asian governments, steal sensitive documents and infiltrate critical infrastructure networks, according to new research.
-
Study Provides Insights into Impact of Cyberattacks on Hospital Care
Steve Alder reports: A recent analysis by The Health Management Academy of cyberattacks on U.S. hospitals provides insights into the extent to which patient care is being disrupted by cyberattacks. A growing body of research…
-
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
Lawrence Abrams reports: ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer…
-
Inside an AI Attack Against a US Retailer
Alexander Culafi reports: A threat actor deployed an AI model during a stalled cyberattack and rescued the campaign, achieving lateral movement in the process. The attack, detailed today by Symantec, targeted an unnamed US retail…
-
Who Runs the Ransomware Group Qilin?
Brian Krebs reports: The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make…
-
JPN: Muji operator apologizes for data breach
NHK World reports: The operator of the Muji chain of retail stores is one of the latest Japanese companies hit by cyberattacks. Its president has apologized for breaches of customer data, including more than a million credit card…
-
SG: AIC hit by cybersecurity incident, personal data of over 4,000 healthcare and community care employees possibly affected
Sean Ler reports: Singapore’s point agency coordinating the delivery of aged care services — the Agency for Integrated Care (AIC) — has been hit by a cyberattack, with personal data of up to 4,064 employees at public healthcare…
-
Another Way Police Are Locating People from Their Smartphones
Penlink’s Webloc is an application that locates people using information from the weather, gaming, email, and religious apps on their phone. It’s sold to the police. The tool collects vast quantities of location data from…
-
European tech buyers add digital sovereignty to cyber shopping list
Sales from EU HQ'd vendor rocket in two years. The Trump affect? Yes but NIS2 and DORA are factors too
-
Notion Customer Data Compromised in Fireworks AI Hack
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable. The post Notion Customer Data Compromised in Fireworks AI Hack appeared first on SecurityWeek .
-
Inside an AI Attack Against a US Retailer
When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
-
Why scammers want you to allow push notifications
Browser push notifications are a common nuisance, and they can make people think their device is infected with adware.
-
Hackers Deploy Malware in Fresh ScreenConnect Campaign
The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication. The post Hackers Deploy Malware in Fresh ScreenConnect Campaign appeared first on SecurityWeek .
-
Hackers Target N-central Zero-Days as N-able Rushes Patches
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones. The post Hackers Target N-central Zero-Days as N-able Rushes Patches appeared first on SecurityWeek .
-
London hotel put admin login for booking website on whiteboard behind the front desk
You could check out more than your room
-
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access. The post Critical Red Hat Quay Vulnerability Could Expose Private Container Images…
-
FBI agent stole $2.47m in crypto from criminal wallets
A former FBI supervisor memorized cryptocurrency wallet recovery phrases to steal millions, then confessed because it was “eating him up inside.”
-
Maersk Confirms Data Theft Amid $5 Million Extortion Attempt
The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems. The post Maersk Confirms Data Theft Amid $5 Million Extortion Attempt appeared first on SecurityWeek .
-
Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates
Couldn’t get the hardware it needed to generate certs, so tried to code a workaround
-
Srsly Risky Biz: Iranian hacks with Russian characteristics
Tom Uren and Amberleigh Jack talk about the French government attributing freezer hacks to cyber units within the Iranian Revolutionary Guard Corp. This surprises Tom, because the hacks were entirely consistent with Russian…
-
Chinese AI Project Scouts Spies in Taiwan Chip Industry
The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Lite.
-
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government's new active cyber-defense powers.
-
AU: Hacker claims to have sold stolen exams to students — but marked them for identification purposes?
Aimee Edwards reports: Victoria’s Year 12 exams have been thrown into turmoil after the state’s curriculum and assessment authority website was hacked. A bizarre message appeared on the Victorian Curriculum and Assessment…
-
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data
Pierluigi Paganini reports: A.P. Moller Maersk, the Danish shipping giant, says it identified an IT security incident involving unauthorized access and data extraction from one of its local legacy systems, one inherited from a…
-
Attackers Say 'Hello' to a Different Scale of Cloud Attack
Researchers dubbed an attack chain "Greeter" after discovering that attackers deliberately covered their trail by leaving "hello" messages in logs.
-
AI Raises the Stakes for Cyber Resilience
An organization's ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business enablement.
-
N-able Takes N-central Platform Offline After Discovery of 33 Flaws
The RMM provider also released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker takeover.
-
Vanderbilt restores systems after cyberattack as hackers claim data theft
Vanderbilt University is restoring campus technology, but has not confirmed the attackers’ claims of stolen student and employee data.
-
Who Runs the Ransomware Group Qilin?
The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security…
-
Iran-backed network directed London attacks over FaceTime, US prosecutors say
An indictment unsealed Tuesday says the broader campaign, targeting Jewish and American sites, included attacks on synagogues in Belgium, the Netherlands and London, and U.S. bank buildings in Amsterdam and Paris.
-
The $26 Million Cyber Heist Rocking a Small New Jersey Town
Scott Calvert reports: This historic village, established in 1697, drips with charm. White clapboard houses on Main Street proclaim their vintage—“Built by John Nesbit 1804” reads one plaque—and locals proudly share that George…
-
N-able issues hotfix after researcher dumps PoCs in disclosure spat
The company briefly disabled access to its RMM platform after an independent researcher warned of critical flaws.
-
Critical Xen Orchestra Flaws Exploited in Attacks
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes. The post Critical Xen Orchestra Flaws Exploited in Attacks appeared first on SecurityWeek .
-
CISA sets operational priorities for partnerships, risk assessments and systemic action
An internal memo from CISA’s acting chief instructs senior leaders to keep the new priorities in mind with every choice they make.
-
Ca: York University Breach Exposes 19 Years of Student Health and Financial Data
Garrett Cole reports: Toronto’s York University has confirmed a major cybersecurity incident that resulted in the unauthorized theft of sensitive personal, medical, and financial records submitted across departmental webforms…
-
Hotel giant Wyndham exposed customer data after app security lapse
It’s been a while since hotel and resort giant Wyndham has shown up on DataBreaches.net. There was one report in 2024, but prior extensive coverage involved their historic litigation with the FTC following a breach. Now Zack…
-
Grok’s security blind spot exposed users and Musk’s company secrets
Paulina Okunytė reports: More than 35,000 apps created with Elon Musk’s AI assistant Grok were accessible to anyone on the internet, exposing corporate secrets and sensitive personal data, security researchers find. […] Claroc…
-
2013 breach at Russian cybercrime forum resurfaces with millions of victims’ credentials
Connor Jones reports: A 2013 breach of Russian-language cybercrime forum YouHack exposed its members’ login details – and millions of credentials they had posted about other victims, according to newly cataloged data. Have I Been…
-
Cyber threat prompts New Plymouth School District in Idaho to cancel classes
DysruptionHub reports: New Plymouth School District in Idaho canceled classes at all three schools after detecting a cyber threat in the district’s network Tuesday morning. “At this time we are not using computers or the district…
-
SG: Fullerton Health server hit by cyberattack; personal data of migrant workers affected
Rhea Yasmine reports: A server supporting Fullerton Health’s Migrant Worker Primary Care Plan (PCP) programme was hit by a cybersecurity incident, said the healthcare service provider. In a statement on its website on Nov 9, it…
-
French bank Credit Mutuel Arkea says €100m missing after cyberattack
Mathieu Rosemain, Elizabeth Howcroft and Mateusz Rabiega report: French lender Credit Mutuel Arkea has said that hackers stole around €100 million ($112.61 million) in a cyber heist and it is working to try to recover the money…
-
Hundreds of Dutch sports clubs report cyberattack exposing members’ personal data
NL Times reports: More than 350 Dutch sports clubs have reported a data breach to the Dutch Data Protection Authority (AP) following a cyberattack on membership administration system AllUnited on Monday evening. The number of…
-
ESET Links Cereal to Turla in Romanian Server Breach Case — Defense News
UA News reports: Slovak cybersecurity company ESET said that servers of a Romanian government institution were compromised in December 2025. The malware selected emails related to NATO and the European Union and created copies of…
-
Google DeepMind just mathematically verified key parts of Signal
The four-week project hints that AI could make formal verification far more practical.
-
Asus, Zoom Release Security Patches
Attackers could exploit them for command execution, memory overwrites, and privilege escalation. The post Asus, Zoom Release Security Patches appeared first on SecurityWeek .
-
Remus malware claims Gmail access even after you change your password
Developers of the infostealer Remus claim their malware can retain access to a victim’s Gmail even after a password reset.
-
Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts. The post Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities appeared first on SecurityWeek .
-
Poland shuts down government services platform ePUAP following cyberattack
The attack targeted a nationwide system that allows users to submit official documents, communicate with government agencies and complete administrative procedures online.
-
Britain, France set out first guidelines for commercial hacking firms
The guidelines call on businesses that develop, sell or finance CCICs to vet their customers, establish technical safeguards against misuse and to maintain systems for monitoring and reporting abuses.
-
Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices
The Series C round will fund international expansion and more autonomous features for the firm’s device security platform. The post Finite State Raises $27 Million to Secure Software and Firmware in Connected Devices appeared…
-
Muse sleep band users weren’t told their brain data was training AI
Muse maker Interaxon reportedly trained AI on users’ de-identified brainwave data, then revised its privacy policy after journalists asked questions.
-
Fortinet Patches Nearly 100 Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing. The post Fortinet Patches Nearly 100 Vulnerabilities appeared first on SecurityWeek .
-
Shipping giant Maersk probes 'IT security incident,' data theft
Says it 'strongly' suspects attack limited to legacy system, and that nothing sensitive is at risk
-
Three People Arrested for AI-Enhanced Impersonation Fraud
It’s hard to believe how lucrative this crime can be: According to a press release from the United States attorney’s office for the southern district of New York, three men Jacob Soall, Sharon Hazan, and Guy Sheetrit were…
-
NCSC scheme will help critical organisations test their cyber defences
New NCSC Cyber Adversary Simulation scheme will help critical organisations strengthen their resilience through rigorous, real-world testing by trusted providers.
-
Bay Raises $50 Million to Control What Enterprise AI Agents Can Do
Founded by three ex-IDF Unit 8200 intelligence officers, Bay is launched to provide a control plane for AI agents. The post Bay Raises $50 Million to Control What Enterprise AI Agents Can Do appeared first on SecurityWeek .
-
Microsoft Patch Tuesday fixes Outlook flaw already under attack
Microsoft has fixed an actively exploited Outlook vulnerability. Check for Office updates separately.
-
Dreeze Emerges From Stealth With $33M to Rebuild Cloud Apps After Cyberattacks
Created by Zerto and Kashya veterans, the startup has launched a platform designed to recover whole cloud applications. The post Dreeze Emerges From Stealth With $33M to Rebuild Cloud Apps After Cyberattacks appeared first on…
-
ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy. The post ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure appeared first on SecurityWeek .
-
Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities
The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data. The post Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities appeared first on SecurityWeek .
-
Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD
Intel and AMD disclose more than 200 vulnerabilities, including critical flaws in Intel TDX software and numerous AMD graphics bugs. The post Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD appeared…
-
Recently Patched Barracuda Vulnerabilities Exploited in Attacks
The security defects could allow attackers to bypass authorization and gain root access to devices. The post Recently Patched Barracuda Vulnerabilities Exploited in Attacks appeared first on SecurityWeek .
-
YouHack - 7,160,849 breached accounts
In May 2013, the Russian-language hacking forum YouHack suffered a data breach that was later redistributed as part of a larger corpus of data . The breach exposed 107k forum members' email addresses, usernames, IP addresses and…
-
Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms
Apple has patched Bluetooth and AirPlay pairing flaws, iMessage vulnerabilities, and an exploited Brotli bug across its platforms. The post Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms appeared first…
-
OpenAI builds a kill switch for its research models
How much damage can a rogue agent do in 35 seconds? Asking cos that’s how long it might take to shut one down
-
Risky Bulletin: France blames Iran for supermarket freezer hacks
France blames Iran for supermarket freezer hacks, the White House nominates Palantir’s CISO as CISA director, another Russian cloud provider gets hacked, and N-able takes down its SaaS platform after a researcher discloses 33…
-
СберСпасибо (SberSpasibo) - 3,288,711 breached accounts
In March 2023, data allegedly taken from СберСпасибо (SberSpasibo), the loyalty program of Russian bank Сбербанк (Sberbank), was published online . The data contained records relating to 48M users, including 3.3M unique email…
Reuse this view
Same filters as JSON: /api/items?category=news&window=7d&sort=newest&limit=100. RSS for this section: feed.xml.