Section
News
Reporting from the trade press, breach notifications and government press releases.
264 matching records, 11 with confirmed exploitation.
-
TSMC confirms employee data breach tied to cloud service provider
An investigation into the breach found that no TSMC systems were compromised but the information was “verified to match data stored in the system services of a cloud service provider, but is unrelated to the company’s operations…
-
Ransomware attack on Belarusian cloud firm disrupts businesses for days
ActiveCloud said hackers had breached its systems and encrypted parts of its cloud infrastructure, leaving customers unable to access key services for several days.
-
Microsoft Struggles to Restore Email and Other Services in a Global Outage
Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.” The post Microsoft Struggles to Restore Email…
-
Quantum Systems drones back in the air after malware scare
Germany's Bundeswehr lifted precautionary grounding after malicious update reportedly reached military servers
-
Attackers in Binance Breach Targeted Known Weakness, Missing Controls
Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.
-
Record number of cyber incidents reported to UK privacy regulator
British organizations have reported a record number of cyber incidents to the country’s data protection regulator this year, as cybersecurity firms blame data extortion and artificial intelligence for a surge in attacks.
-
Apify Confirms Customer Data Accessed in Cyberattack
The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data. The post Apify Confirms Customer Data Accessed in Cyberattack appeared first on SecurityWeek .
-
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks
Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets. The post SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks appeared first on…
-
Crackdown on UK medical record snooping after staff reported sneaking 300+ times this year
Watchdog wants assurances from 200 execs that employees aren't poking around patient files they have no business viewing
-
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure
Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame. The post Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure appeared first on…
-
Brit police watchdog says cops' use of facial recog risks wrongful arrests
New report calls for change, highlights hodgepodge governance and misunderstanding about tech’s limitations among officers
-
Citrix Patches 10 Critical NetScaler Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions. The post Citrix Patches 10 Critical NetScaler Vulnerabilities appeared first on SecurityWeek .
-
OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools
Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches. The post OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools appeared first on…
-
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process. The post Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ appeared first on SecurityWeek .
-
Worldwide Microsoft 365 outage disrupts Outlook, SharePoint, Teams, and more
A worldwide Microsoft 365 outage is having a severe impact on companies that rely on services like Outlook, Sharepoint, and Teams.
-
PHP2Shell Exploited in Destructive Check Point Gateway Attacks
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root. The post PHP2Shell Exploited in Destructive Check Point Gateway Attacks appeared first on SecurityWeek .
-
C++26 stumbles at finish line over Contracts dispute
ISO working group faces a fight over runtime checks, complexity, and the language's release timetable
-
Hackers Exploit New N-central Zero-Day Hours After PoC Publication
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges. The post Hackers Exploit New N-central Zero-Day Hours After PoC Publication appeared first on SecurityWeek .
-
CastleRAT - 179,745 breached accounts
In November 2026, Europol and international law enforcement partners dismantled infrastructure supporting several malware operations . Among them was CastleRAT, a remote access trojan (RAT) that enabled criminals to remotely…
-
Risky Bulletin: Chinese APT exploits SS7, Diameter to spy on targets
A Chinese APT exploits the SS7 and Diameter protocols, a remote code execution bug hits Apache, Brazil’s largest port suffers a cyberattack, and Europol takes down three malware operations. Show notes Risky Bulletin: Chinese APT…
-
FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency. The post FBI Says US Seized $1.2 Billion Worth of Cryptocurrency…
-
US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
The infrastructure, said to belong to APT38, contained footage used to fool victims over video calls. The post US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance appeared first on…
-
NATO issues and then withdraws Russian taxi app travel advice for defense industry conference
Despite longstanding concerns about the Kremlin’s access to the app’s data, NATO on Thursday issued guidance suggesting attendees of its flagship defense industry conference use the Russian-owned Yandex Go to reach the venue.
-
Getting Past the Post-Quantum Cryptography Discovery Phase
Most organizations haven't sorted out their cryptographic estate enough to even know where they'd start with post-quantum cryptography (PQC).
-
Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
The Department of Justice and FBI announced two separate actions in response to North Korea-linked cryptocurrency theft operations.
-
TSMC has reportedly leaked the personal data of 46,000 employees, but emphasized that no evidence of intrusion was found in the system.
The following is an automated Google translation of an article that originally appeared in Chinese. Jian Yongxiang reports: TSMC, the world’s leading semiconductor foundry, has been hit by a major cybersecurity incident. Hackers…
-
Resource: DysruptionHub’s Cyber Incident Registry completes its historical backfill
More than 600 researched profiles now connect past coverage with ongoing follow-up, alongside new ways for Sustainers to follow the reporting. Joseph Topping reports: DysruptionHub’s Cyber Incident Registry now contains more than…
-
Ransomware Without Data Theft Can Still Trigger Mandatory Breach Reporting Under India’s DPDP Law: K7 CyberSecurity
CXO Today reports: A ransomware attack that locks up corporate systems can legally qualify as a reportable personal data breach in India—even if hackers never steal a single file. According to a media background briefing released…
-
Cyber Experts Weigh In: How to Fight Artex & AntiFox
Cybercriminals using agentic pen-testing tools is a proverbial genie out of the bottle at this point, so enterprises need to get a defense plan in place right away.
-
Rogue remote-access campaign spread through ScreenConnect add-on, researchers say
ConnectWise disabled five third-party extensions across about 400 partner environments after researchers linked a worm-like toolkit to one of them. The post Rogue remote-access campaign spread through ScreenConnect add-on…
-
Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams
Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack. The post Microsoft 365 Outage Disrupts…
-
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
Meanwhile, a group of nonprofits sue AI giants and cite AI-driven cyberattacks
-
Extortion Group Luna Moth Flits Into Law Firms a Second Time
The cybercriminals are retargeting law firms that refused to pay its first ransom, with a social engineering con aimed at stealing Microsoft access tokens.
-
Lego marketplace BrickLink in pieces after 'unusual activity' takes it offline for almost a week
Lego fans demand answers as outage approaches a week with no confirmed cause
-
Major Microsoft Outlook Outage Leaves People With Email Jobs Unable to Email
Microsoft says its systems are experiencing “elevated loads” as the company races to end an outage impacting its business and enterprise customers.
-
United to block customers from using AI agents, citing cyber threats
“Sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in unintended purchases" and more, United Airlines said.
-
Shipping giant Maersk says recent cyber incident affected legacy system
The incident is the latest in a string of attacks on ports and other shipping organizations worldwide, with Brazil’s largest port hit with ransomware last week.
-
Software Samaritan revamps borked Indian certs to block smart TV ads
A little tinkering can black hole obnoxious Samsung TV ads and some tracking, until a firmware fix ruins the fun
-
United Airlines blocks AI agents from booking flights, citing cybersecurity risks
The airline said it will not allow customers to use AI agents to book flights and manage reservations.
-
Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders
CyberScoop is exclusively reporting on the letter to the Hill on the controversial snooping authorities under the Foreign Intelligence Surveillance Act. The post Don’t put Section 702 spying law renewal in defense bill, groups…
-
International operation dismantles malware networks, exposes 6.4 million stolen credentials
The Operation Endgame action dismantled the loaders, remote access trojans and infostealers that give ransomware gangs their way into corporate networks. The post International operation dismantles malware networks, exposes 6.4…
-
European authorities take down SteaIC malware servers for second time this year
German authorities on Thursday said investigators traced the rebuilt network to the Virtualine bulletproof hosting provider, seized by the FBI in October, with the assistance of police in Frankfurt and the Dutch National High…
-
ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations
Abuse of an independent third-party tool led to breaches at ScreenConnect customers, confirmed the software's maker, ConnectWise. Cybersecurity researchers had spotted intrusions at nearly 50.
-
Police dismantle Gootloader, CastleRAT, StealC malware infrastructure
Sergiu Gatlan reports: Europol and law enforcement partners from nine countries have seized hundreds of servers and domains used by the Gootloader, CastleRAT, and StealC malware operations. Gootloader is a malware loader active…
-
Hong Kong Sogo data breach puts personal information of 820,000 members at risk
Danny Mok reports: Major Hong Kong retailers Sogo and Chow Sang Sang have disclosed separate data breaches after unauthorised parties accessed their systems, potentially exposing the personal information of customers, including…
-
Unocoin Goes Dark As 81,000 Wallets Show Zero Holdings
Damilola Esebame reports: Indian cryptocurrency exchange Unocoin said it discovered unauthorized access to its servers on 9 November and temporarily disabled user logins while its security team investigated. In its public notice…
-
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled. The post Apache Patches Critical HTTP Server RCE Found by Anthropic, Google appeared first on…
-
AI found widespread IoT vulnerabilities more quickly and cheaply than humans could
The newly discovered vulnerabilities illustrate AI’s growing power — as well as critical infrastructure’s continuing weaknesses.
-
Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
This is Fireworks' second data breach in as many months.
-
Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era
Upgrade, migrate, but don't prevaricate – time has run out
-
Hijacked email accounts complicate investigations into European bomb hoaxes
Bomb threats sent to thousands of schools across Europe this week came from a compromised email account at a Taiwanese university, the latest incident in a series of hoax threats that have targeted airports and newsrooms using…
-
LEGO’s BrickLink taken offline: What users should know
BrickLink, the LEGO marketplace, has gone offline after detecting unusual activity, without disclosing whether customer data was affected.
-
Nvidia’s Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO
Nvidia gets a new chief executive, days after former CEO Jensen Huang admitted to a romantic affair with an alleged Chinese spy.
-
Apple’s HomeView Tries Face Authentication Without FaceID
Apple’s FaceID has long provided robust authentication. But for its smart home device, HomeView, the company is betting on new “person recognition” technology that has yet to be challenged in the wild.
-
Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160. The post Chrome, Firefox Updates Patch Over 180 Vulnerabilities appeared first on SecurityWeek .
-
Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign
Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories. The post Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign appeared first…
-
Romania says it stopped Russian cyberattack targeting government emails
Romania's intelligence agency said it stopped a cyber-espionage campaign by Russian state-linked hackers before the group exfiltrated sensitive data.
-
Daylight Lands $80 Million for AI-Powered Security Operations
The company plans to accelerate product development, hire new talent, expand its US presence, and enter new markets. The post Daylight Lands $80 Million for AI-Powered Security Operations appeared first on SecurityWeek .
-
Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
ConnectWise disables third-party extensions in 400 environments as bughunters uncover auth hole may let crims bypass MFA
-
Kazakhstan-linked hackers used AI agent to spy on Central Asian governments
Suspected Kazakhstan-linked hackers used an artificial intelligence agent to help spy on Central Asian governments, steal sensitive documents and infiltrate critical infrastructure networks, according to new research.
-
Study Provides Insights into Impact of Cyberattacks on Hospital Care
Steve Alder reports: A recent analysis by The Health Management Academy of cyberattacks on U.S. hospitals provides insights into the extent to which patient care is being disrupted by cyberattacks. A growing body of research…
-
Active ScreenConnect attacks breach MSPs, impact dozens of organizations
Lawrence Abrams reports: ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer…
-
Inside an AI Attack Against a US Retailer
Alexander Culafi reports: A threat actor deployed an AI model during a stalled cyberattack and rescued the campaign, achieving lateral movement in the process. The attack, detailed today by Symantec, targeted an unnamed US retail…
-
Who Runs the Ransomware Group Qilin?
Brian Krebs reports: The cybercrime group Qilin has emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make…
-
JPN: Muji operator apologizes for data breach
NHK World reports: The operator of the Muji chain of retail stores is one of the latest Japanese companies hit by cyberattacks. Its president has apologized for breaches of customer data, including more than a million credit card…
-
SG: AIC hit by cybersecurity incident, personal data of over 4,000 healthcare and community care employees possibly affected
Sean Ler reports: Singapore’s point agency coordinating the delivery of aged care services — the Agency for Integrated Care (AIC) — has been hit by a cyberattack, with personal data of up to 4,064 employees at public healthcare…
-
Another Way Police Are Locating People from Their Smartphones
Penlink’s Webloc is an application that locates people using information from the weather, gaming, email, and religious apps on their phone. It’s sold to the police. The tool collects vast quantities of location data from…
-
European tech buyers add digital sovereignty to cyber shopping list
Sales from EU HQ'd vendor rocket in two years. The Trump affect? Yes but NIS2 and DORA are factors too
-
Notion Customer Data Compromised in Fireworks AI Hack
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable. The post Notion Customer Data Compromised in Fireworks AI Hack appeared first on SecurityWeek .
-
Inside an AI Attack Against a US Retailer
When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
-
Why scammers want you to allow push notifications
Browser push notifications are a common nuisance, and they can make people think their device is infected with adware.
-
Hackers Deploy Malware in Fresh ScreenConnect Campaign
The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication. The post Hackers Deploy Malware in Fresh ScreenConnect Campaign appeared first on SecurityWeek .
-
Hackers Target N-central Zero-Days as N-able Rushes Patches
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones. The post Hackers Target N-central Zero-Days as N-able Rushes Patches appeared first on SecurityWeek .
-
London hotel put admin login for booking website on whiteboard behind the front desk
You could check out more than your room
-
Critical Red Hat Quay Vulnerability Could Expose Private Container Images
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access. The post Critical Red Hat Quay Vulnerability Could Expose Private Container Images…
-
FBI agent stole $2.47m in crypto from criminal wallets
A former FBI supervisor memorized cryptocurrency wallet recovery phrases to steal millions, then confessed because it was “eating him up inside.”
-
Maersk Confirms Data Theft Amid $5 Million Extortion Attempt
The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems. The post Maersk Confirms Data Theft Amid $5 Million Extortion Attempt appeared first on SecurityWeek .
-
Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates
Couldn’t get the hardware it needed to generate certs, so tried to code a workaround
-
Srsly Risky Biz: Iranian hacks with Russian characteristics
Tom Uren and Amberleigh Jack talk about the French government attributing freezer hacks to cyber units within the Iranian Revolutionary Guard Corp. This surprises Tom, because the hacks were entirely consistent with Russian…
-
Chinese AI Project Scouts Spies in Taiwan Chip Industry
The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Lite.
-
Japan Pushes Emergency Funding for Cybersecurity as AI-Assisted Breaches Rise
The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government's new active cyber-defense powers.
-
AIを活用したサイバー攻撃の増加を受け、日本がサイバーセキュリティへの緊急資金拠出を推進
この対策パッケージには、官民合同のサイバー対応チーム、経済省が主導するAI専門チーム、および政府の新たな能動的サイバー防衛権限の行使に関する裁量の拡大が含まれている。
-
AU: Hacker claims to have sold stolen exams to students — but marked them for identification purposes?
Aimee Edwards reports: Victoria’s Year 12 exams have been thrown into turmoil after the state’s curriculum and assessment authority website was hacked. A bizarre message appeared on the Victorian Curriculum and Assessment…
-
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data
Pierluigi Paganini reports: A.P. Moller Maersk, the Danish shipping giant, says it identified an IT security incident involving unauthorized access and data extraction from one of its local legacy systems, one inherited from a…
-
Attackers Say 'Hello' to a Different Scale of Cloud Attack
Researchers dubbed an attack chain "Greeter" after discovering that attackers deliberately covered their trail by leaving "hello" messages in logs.
-
AI Raises the Stakes for Cyber Resilience
An organization's ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business enablement.
-
As Test Takers Turn to AI for Answers, Exam Security Must Catch Up
It's hard to detect whether someone is using artificial intelligence (AI) to cheat on IT certification exams, but new tools and processes are emerging to boost trust.
-
N-able Takes N-central Platform Offline After Discovery of 33 Flaws
The RMM provider also released a hotfix as a recommended mitigation to address public exploits for the alleged zero-days, which allow for attacker takeover.
-
Vanderbilt restores systems after cyberattack as hackers claim data theft
Vanderbilt University is restoring campus technology, but has not confirmed the attackers’ claims of stolen student and employee data.
-
Who Runs the Ransomware Group Qilin?
The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security…
-
Iran-backed network directed London attacks over FaceTime, US prosecutors say
An indictment unsealed Tuesday says the broader campaign, targeting Jewish and American sites, included attacks on synagogues in Belgium, the Netherlands and London, and U.S. bank buildings in Amsterdam and Paris.
-
The $26 Million Cyber Heist Rocking a Small New Jersey Town
Scott Calvert reports: This historic village, established in 1697, drips with charm. White clapboard houses on Main Street proclaim their vintage—“Built by John Nesbit 1804” reads one plaque—and locals proudly share that George…
-
N-able issues hotfix after researcher dumps PoCs in disclosure spat
The company briefly disabled access to its RMM platform after an independent researcher warned of critical flaws.
-
Critical Xen Orchestra Flaws Exploited in Attacks
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes. The post Critical Xen Orchestra Flaws Exploited in Attacks appeared first on SecurityWeek .
-
CISA sets operational priorities for partnerships, risk assessments and systemic action
An internal memo from CISA’s acting chief instructs senior leaders to keep the new priorities in mind with every choice they make.
-
Ca: York University Breach Exposes 19 Years of Student Health and Financial Data
Garrett Cole reports: Toronto’s York University has confirmed a major cybersecurity incident that resulted in the unauthorized theft of sensitive personal, medical, and financial records submitted across departmental webforms…
-
Hotel giant Wyndham exposed customer data after app security lapse
It’s been a while since hotel and resort giant Wyndham has shown up on DataBreaches.net. There was one report in 2024, but prior extensive coverage involved their historic litigation with the FTC following a breach. Now Zack…
-
Grok’s security blind spot exposed users and Musk’s company secrets
Paulina Okunytė reports: More than 35,000 apps created with Elon Musk’s AI assistant Grok were accessible to anyone on the internet, exposing corporate secrets and sensitive personal data, security researchers find. […] Claroc…
-
2013 breach at Russian cybercrime forum resurfaces with millions of victims’ credentials
Connor Jones reports: A 2013 breach of Russian-language cybercrime forum YouHack exposed its members’ login details – and millions of credentials they had posted about other victims, according to newly cataloged data. Have I Been…
-
Cyber threat prompts New Plymouth School District in Idaho to cancel classes
DysruptionHub reports: New Plymouth School District in Idaho canceled classes at all three schools after detecting a cyber threat in the district’s network Tuesday morning. “At this time we are not using computers or the district…
Reuse this view
Same filters as JSON: /api/items?category=news&window=7d&sort=newest&limit=100. RSS for this section: feed.xml.