Data Breaches Digest - Week 31 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 27th July and 2nd August 2026.

28th July

24,650 Internet-Exposed Baseboard Management Controllers (BMCs) Disclose IPMI Password Hashes Before Login

A-List Directors, Actors And Celebrities Exposed In Tribeca Film Festival Data Breach

Aerospace and defense giant RTX Corp. discloses data breach exposing social security numbers

AI Music Generating Platform Suno Data Breach Affects over 55 Million People

AI Supercharges Software Security Flaws, Sparking Record Surge in 2026

AI Surveillance Van at India’s Biggest Youth Protest in Decades Heads to Court

AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched

Angelina Jolie, Martin Scorsese and more celebrities' contact details exposed in Tribeca Film Festival data breach

AnMed Faces 72-Hour Ransomware Deadline as Hospital Systems Stay Down

Ariana Grande sues alleged hackers over unreleased music leaks

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

AusProof allegedly breached by M3rx ransomware

Australia: Energy giant took weeks to respond to major data breach

Australian Unmanned Aircraft System (UAS) supplier warns of suspected cyber attack

Bank of Baroda Confirms Cyberattack After Data Breach Claims

Bank of Baroda confirms data breach. Can the lender now face penalties?

Bank of Baroda Confirms Data Breach After Employee Email Hack; 1TB Data Alleged on Dark Web

Bank of Baroda (BoB) data breach: A look at India's biggest corporate cyberattacks

Bank of Baroda data breach: Beware of 'Digital Arrest' scam; here's how to safeguard your account

Bank of Baroda data leak: If you are BoB account holder, don't worry, here are 5 things you must know

Bank of Baroda data leak: Internal documents allegedly exposed after cyberattack

Bank of Baroda says cyber incident unlikely to materially impact operations; appoints CERT-In empanelled forensic agency

Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard

Call of Duty Mobile scam uses fake free points giveaway to hijack players’ accounts

Calphishing is challenging how we think about phishing

ChatGPT Joins Most Faked Brands Ranking in Phishing

Cl0p ransomware affiliate shows signs of exploiting PTC Windchill, FlexPLM flaw

Coca-Cola: Ransomware attack on Fairlife led to data leak

Coca-Cola Confirms Data Breach by Anubis Cybercrime Group

Coca-Cola Confirms Data Theft as Fairlife Ransomware Attack Escalates

Coca-Cola confirms hackers stole data in Fairlife ransomware attack

Coca-Cola restores most production capacity at dairy unit after ransomware attack

Coca-Cola Resumes Fairlife Production After Ransomware Attack

Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach

Coca-Cola-owned Fairlife restarts US production following ransomware attack

Confidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in Use

Connecticut Businesses Being Warned Of Phishing Emails Posing As State Registry

'Could even be from an earlier data breach at Defence Research and Development Organisation (DRDO)': 31 GB of 'stolen' sensitive data put up for sale on dark web

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

Critical TeamCity Flaw Could Let Unauthenticated Attackers Execute Server Commands

Critical vulnerabilities remain visible after ransomware disclosures

Crypto: Ethereum, Solana Top Hacker Targets 2026

Cyber Attack Impact: Coca-Cola’s fairlife Milk Production Hit by Ransomware Breach

Data breach at medical billing firm Medical Computer Business Services (MCBS) affects 1.26 million people

Data Breach Exposes De Niro’s Tribeca Film Festival. Hollywood A-Listers Hardest Hit

Did ransomware attacks really decline? Here are your business' 4 best defenses

Dismantled Kratos Phishing Kit Becomes Blueprint for Attacks on Microsoft 365 Users

Dismantled Kratos Phishing Kits Acting as Blueprint for Others to Attack Microsoft 365 Users

Dismantled Kratos Phishing-as-a-Service Kit Fuels Copycat Microsoft 365 Campaigns

Dutch ice arena Thialf hit by cyberattack; ransomware group threatens data leak

Exposed Baseboard Management Controllers (BMCs) hand out password hashes before login

Fairlife resumes majority of US production following ransomware attack

Fairlife resumes operations after ransomware attack

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections

FBI, LinkedIn Warn Job Seekers of Employment Scams and Exploitation

Federal judge throws out WhatsApp encryption lawsuit against Meta

Florida Substance Use Disorder (SUD) Treatment Provider Announces 145,700-record Data Breach

Hermes AI Agent Used in Cyberattack Targeting Thailand Finance Ministry

Holy Data Leak! Pope's Prayer App Exposes 700,000 Users in Security Breach

Hotel Wi-Fi Becomes a Phishing Trap: Attackers Hijack Gateways and Steal Microsoft 365 Accounts

Hugging Face breach reignites open-weights debate, raises liability questions

India’s Bank of Baroda confirms cyber incident after hackers claim data theft

India’s Bank of Baroda data breach exposes customer records after employee email compromise

Is your Bank of Baroda account at risk? Here's what the data breach means

Is your smart TV a secret proxy? LG to suspend rogue apps, Samsung sets impacted too

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

Loma Linda University Health Data Breach Exposes Protected Health Information

Medical Computer Business Services (MCBS) data breach: Over 1.2 million patients affected

Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats

Mirage Kitten’s New Malware Toolkit Targets Aerospace and Defense Across Middle East and Africa

Nearly a million customers caught in Origin data breach

New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

Nottinghamshire County Council apologises after parent email data breach

Nvidia launches Open Secure AI Alliance to improve AI safety

NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names

Operation BlueDash Maintains Redundant Remote Access Even After One RMM Tool Is Removed

Origin apologises after revealing 900,000 customers affected by data breach

Origin Confirms Data Breach - Hackers Accessed 900,000 Customers’ Data

Origin Energy believes 900,000 customers' data accessed in breach

Origin Energy confirms 900,000 customers hit in data breach

Origin Energy Confirms Around 900,000 Aussies May Be Affected By Data Breach

Origin Energy data breach affected 900,000 customers

Origin Energy Data Breach Affects 900,000 Australians

Origin Energy Data Breach Affects 900,000 Current and Former Customers

Origin Energy data breach affects 900,000 customers

Origin Energy data breach hits 900,000 customers: What you need to know

Origin Energy Data Breach May Affect 900,000 Customers

Origin Energy Hides Data Breach from 900,000 Customers for Weeks

Origin Energy knew of hack weeks before 900,000 customers impacted

Origin Energy says data of 900,000 Australians stolen in hack

Over 24,000 exposed server Baseboard Management Controllers (BMCs) leak password hash via decades-old flaw

Phishing attacks under the guise of ChatGPT are gaining momentum

Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques

Qilin Ransomware exploits Palo Alto Networks, Fortinet, Citrix, and Check Point VPNs

Ransomware Attacks Grow Faster and Smarter as AI Tools Spread Among Hackers

Ransomware actors are avoiding big business - on purpose

Ransomware attacks speed up as hackers use AI tools

Ransomware Attacks Surge as Hackers Exploit Software Supply Chains

Ransomware Gangs Now Kill Security Software Before Striking, Report Warns

Ransomware Group Claims Data Theft From Nexon, Authenticity Under Scrutiny

Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit

Romania Confirms Ransomware Attack Hit Property Records Agency

Romania confirms ransomware attack on cadastre agency, no timeline for full recovery

Russian hacker group Laundry Bear exploits Zimbra zero-click flaw to target Western government, critical infrastructure

Scammers Pose as ShinyHunters to Blackmail Data-Breach Victims With Fake Webcam Videos

Shadow AI incident response begins with logs that may already be gone

ShinyHunters claims Ernst & Young (EY) breach, warns all stolen data will be released

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens to Leak Stolen Client Tax Data

Stack Sports Data Breach Exposes Financial Account Information

Taiwan: Officials warn against AI-aided cybercrime

Taiwan Sounds Alarm on AI-Driven Cybercrime Fueling Ransomware Surge

Tanaka Dominates Data Leak Landscape With 25 Leak Posts

Tanaka dominates the data leak landscape with 25 leak publications

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

The Model Wasn’t Rogue. The Control Plane Was

Thriday customers hit with phishing email, dodgy link asking for bank details

UK and partners warn of zero-click phishing campaign targeting Western organisations

Why the Origin Energy Data Breach is a Wake Up Call for Everyone

Your Private Claude Chats May Have Been Sitting in Google Search Results All Weekend

Zero Trust Network Access (ZTNA) Emerges as VPN Security Risks Put Federal Networks on Alert

27th July

6 in 10 manufacturers incur over $1 million in losses per cyber attack

23andMe hit With €2.4 Million fine after data breach affected Spanish residents

48% of Breaches Now Originate in the Supply Chain. It’s Time to Admit the Industry’s Approach Has Failed

75 million Revolut records allegedly for sale

79% of ransomware attacks begin with stolen credentials

A-list celebrities have contact details exposed in data breach

After ransomware attack, Fairlife resumes most US production

Agentic AI will Supercharge Cyber Threats. But Not in the Way You Think

AI makes ransomware more effective in 65 percent of cases

AI vs. AI: How Defensive Intelligence is Keeping Pace with AI-Powered Cyber Threats

All Microsoft users placed on red alert as worrying danger is back

Angelina Jolie, Robert De Niro Among Hollywood Stars Hit by Tribeca Data Leak

AnMed Cyber Attack Disrupts Phones and Internet at All Locations

AnMed given 72 hours to respond to demands in ransomware incident

Apple sued after alleged App Store crypto scam cost users $1.8 Million

Apple sued over fake App Store crypto wallet app stealing $1.8 Million in Bitcoin

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

Arkansas to receive share of $18 million 23andMe data breach settlement

Assume AI cybersecurity attacks are the future: 43% of companies have already experienced it

Australia: Nurse charged over data breach

Australia: Victorian heritage and restoration firm listed by The Gentlemen ransomware group

Australian mining firm West African Resources suffers alleged data breach

Bank of Baroda 1TB data leak: Is your money safe? Here's what customers should do now

Bank of Baroda 1TB data leaked, account details, names, numbers and Aadhaar available online

Bank Of Baroda Allegedly Hacked? X User Claims 1TB Customer Data Leaked On Dark Web

Bank of Baroda confirms data breach; cybersecurity experts see 1TB breach as ‘bad’ and ‘concerning’

Bank of Baroda confirms data breach, ’employee’s email account was compromised’

Bank of Baroda confirms data breach, says email account hacked

Bank of Baroda confirms data breach, says employee email account compromised in hack

Bank of Baroda data breach: How to check if your personal details were leaked

Bank of Baroda Data Breach Claim: 1TB Leak Allegedly Exposes Customer Account Details and Aadhaar

Bank of Baroda Data Breach Claim: What Customers Need To Know About The Alleged 1TB Leak

Bank of Baroda data leak: Hacker claims 1TB customer data breach

Bank of Baroda faces alleged 1TB data breach; Aadhaar, account and loan records reportedly exposed online

Bank of Baroda Flags Data Breach After Employee Email Compromised

Bank of Baroda hit by alleged 1TB data breach; sensitive banking records reportedly leaked on Dark Web

Bank of Baroda hit by alleged data breach; hacker claims 1TB of customer records leaked

Bank of Baroda hit by cyberattack; hacker leaks 1TB of data on dark web

Bank of Baroda initiates forensic investigation on data breach that leaked critical customer information

Bank of Baroda Investigates Alleged 1TB Customer Data Breach

Bank of Baroda On Alleged Data Breach: Employee Email Account Compromise Behind Incident

Bank of Baroda probes data breach; says core banking systems remain secure

Bank of Baroda says core banking systems secure after reported data breach

Binance Implements Monthly Phishing Simulations with Termination Penalties for Severe Failures

Botnets powered by residential proxy networks are growing

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

ChatGPT joins the most impersonated brands in phishing attacks

Claude AI shared chats indexed by Google - see if your conversations were exposed

Claude chats and workspaces turn up on Google, revealing avoidable privacy flaw

Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack

Coca-Cola confirms data theft in Fairlife ransomware attack

Coca-Cola resumes Fairlife milk production after hackers shut down plants

Coca-Cola's Fairlife Milk Production Resumes as Hackers Tout 1TB Data Theft

Coca-Cola’s Fairlife resumes operations after attack

Cosmetics Giant Estée Lauder Discloses a 10-Month Old Data Breach

Cruciferra Crypter Uses Bring-Your-Own-Vulnerable-Driver (BYOVD) and Process Ghosting to Hide Windows Malware

Customer data from India's Bank of Baroda leaked online

Cybersecurity Agencies Warn Businesses of Rising AI-Powered Phishing Attacks

Data Breach at Bank of Baroda: What was the reason behind data compromise at public bank?

Data breach at Defence Research and Development Organisation (DRDO)? 31 GB of allegedly stolen sensitive data for sale on dark web for $8,000

Data Breach Exposes Personal Contact Info of Hollywood Celebrities

Data breach in Bank of Baroda? 1TB of customer details, Aadhaar, phone numbers leaked on darknet

DentaQuest Data Breach Potentially Impacts Over 23 Million People

DentaQuest disclosed a data breach that impacted 23 million+ individuals

Don’t Blame the Rogue Agent. Follow the Humans

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

Employee email compromise led to unauthorised data release, core banking systems secure, says Bank of Baroda

Ernst & Young data breach claimed by ShinyHunters extortion gang

Ernst & Young (EY) Data Breach Claimed by ShinyHunters Hacker Group

Fake Steam ‘Fixes’ Distribute XMRig via the ClickFix Technique, Quietly Turning Gamers’ PCs Into Cryptominers

Fast Food Restaurant Chain Chick-fil-A Suffers Data Breach from Credential Stuffing Attacks

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

GitHub delays version updates so malware gets caught first

Google changes how it names cyber threat actors

Google Indexed Claude AI Shared Chats Before Results Were Removed

Google Is Giving Hacker Groups New Names That Reveal Who They Are and Why They Attack

Google’s solution to hacker name confusion? Yet another naming system

Hacker Breaches Bank Of Baroda System; Puts 1TB Data On Dark Web

Hacker claims deal struck with Origin over data breach

Hacker who targeted over 500 Snapchat accounts sentenced to over 6 years in prison

Hackers target US firms in FastJson RCE zero-day attacks

Hackers used autonomous AI agent to spy on Thailand's finance ministry

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

Hackers used Telegram phishing campaign to target exiled Belarusian activist

Health system in South Carolina, Georgia closes offices after malware affects networks

Hilldun Data Breach Exposes Social Security Numbers

House Lawmakers Propose Mandatory Kill Switches for Frontier AI Systems

How HalluSquatting Attacks Trick AI Coding Assistants into Running Malicious Code and the Safeguards Enterprises Need

How the Gentlemen Ransomware Group Built a Multi-Region Attack Machine in H1 2026

India Becomes Second-Most Targeted Nation in APAC as Cyberattacks Surge in H1 2026

Indian Bank of Baroda Customer Data Leaked on Dark Web

Is open source the answer to rogue AI agents? Nvidia's new alliance says yes

LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations

Major Bank of Baroda data leak? Ransomware group claims to have stolen 1TB of customer data

Man Sentenced to Six Years for Phishing Snapchat Accounts of Hundreds of Women

Man uses GrapheneOS feature to wipe his phone during border search

Massive Tribeca Data Breach Exposes Contact Details of Hollywood Elites

Medical Computer Business Services (MCBS) Data Breach Affects 1.2 Million Individuals

Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

New Certighost Proof-of-Concept (PoC) exploit lets attackers hijack Windows domains

New Dysphoria DDoS botnet spreads to 200k devices worldwide

NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NVIDIA-labs OO Agents (NOOA) Framework

Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out

Nvidia Forms Open AI Security Group in Wake of Hugging Face, OpenAI Incident

Nvidia, SpaceX, Microsoft launch AI safety initiative as OpenAI cyberattack fallout continues

OnTrac parcel delivery company reports customer data breach

OpenAI Cyber Attack on Hugging Face sparks AI Security Alliance backed by Nvidia, Meta, and Others

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

Origin Says Data Breach Affected About 900,000 Current and Former Customers

Origin Energy Data Breach Exposes Customer and Partial Card Details

Phishing attacks on insurance companies evolve to real-time account hijacking

Phishing the agent: Why identity controls are essential to secure and manage AIs

Pierce County Library System settles lawsuit over data breach affecting 340,000

Police curb voice phishing in South Korea, cut cases and losses by half

Pope’s prayer app leaks 700,000 user emails

Proofpoint research finds UK organisations continue to pay ransomware demands despite warnings

Proof-of-Concept (PoC) exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

PTC Windchill Vulnerability Exploited in Ransomware Campaign

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Ransom gang targets Dutch ice arena Thialf in cyberattack

Ransomware Activity Climbs as Supply Chain Attacks Increase in Scale

Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate Networks

Ransomware groups expand operations as software supply chain attacks accelerate

Ransomware Groups Increasingly Deploy EDR Kill Techniques

Revenge is Sweet. Conviction is Sweeter

Romania: The government is preparing to restart the e-Terra information system, affected by a cyber attack, without being able to provide an exact date. The cadastral database has not been compromised

RTX Data Breach Exposes Social Security Numbers

ShinyHunters’ Name Gets Hijacked for a New $2,000 Sextortion Scam

SourTrade Malvertising Campaign Secretly Builds Malware in the Browser

South Carolina beach town loses $500,000 in phishing scam

South Korea: Banks push back against proposed no-fault compensation for voice phishing victims

South Korea: Nearly 100,000 cyberattacks hit foreign ministry, affiliates in 6 months

Steam forums used for ClickFix cryptominer attacks

Steam Workshop maps for Meccha Chameleon found delivering malware

Suspicion Grows About OpenAI’s Tale About Its Rogue Hacker AI

Taiwan: Digital Ministry warns against ransomware attacks

Taiwan cyber agency warns of growing ransomware threats

Tech giants form alliance to put open AI in cyber defenders’ hands

Telegram phishing campaign targeted exiled Belarusian activist, Russians and Kazakhstanis

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

Thailand Securities Depository (TSD) investor data breach cue for Securities and Exchange Commission (SEC) action

The containment paradox: Why your ransomware playbook has the wrong people in charge

The enduring mystery of hacker Phineas Fisher

The Pope's Official Prayer App Has Been Leaking the Private Data of 700,000 Users for Months

Tribeca Film Festival Data Breach Exposes Celebrity Contact Details

Tribeca Film Festival data leak exposes Hollywood stars, including Angelina Jolie and Robert De Niro

Two Old Oj Flaws Chained to Trigger GitLab Remote Code Execution

UK court rejects Bahrain immunity claim in spyware case

‘Unprecedented event’: Hugging Face CEO demands answers from OpenAI after AI agent-driven cyber attack

Vanderbilt Health Data Breach Compromises Patient Information

Vatican scrambles to patch 'phishing goldmine' app promoted by the Pope

What to look for in antivirus software without the jargon

What to know about the Origin Energy hack (even if you aren’t a customer)

Which New Zealand companies are most likely to be targeted by Ransomware hackers?

Ransomware Operator Claims - Week 29 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 13th July and 19th July 2026, kindly assisted by our partners.

DBD discovered and researched 183 Ransomware Victims over 47 Countries and Islands claimed by 38 Data-Leaking Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 30 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 20th July and 26th July 2026.

26th July

Angelina Jolie among Hollywood stars hit by 'huge data breach after contact details exposed', cybersecurity expert claims

Australia: Nurse charged over alleged data breach

Binance fires employees who repeatedly fail its monthly fake phishing attacks

Chaos Ransomware’s msaRAT Hides Its C2 Inside Your Own Browser

ENCFORGE Ransomware Targets AI Models After Langflow RCE Exploit

ExfilSquad ransomware: 14 alleged victims in one day - Microsoft, Zenith Bank, Frontier Airlines on the list

GitHub, PyPI add time-based defenses against supply chain attacks

Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hack

India: Student denied Indian Institutes of Technology (IIT) cybersecurity seat hacks IIT Madras and IIT Kanpur

Israel: New scam flooding phones - Fake Electric Company refund links

Lifespark Data Breach Exposes Social Security Numbers & Health Info

Microsoft tops phishing brand rankings as ChatGPT enters top 10

North Korea arrests former cyber elite for hacking state banks

North Korea’s BlueNoroff Targets Crypto Users with Fake Zoom and Teams Phishing Campaign

OpenAI didn't realize its AI agent hacked Hugging Face for days, report says

Origin Energy confirms customer data leak; hacker says I've dumped over 2 million records

Phineas Fisher: The Mysterious Hacker Who Brought Spyware Makers to Their Knees

Ransomware no longer breaks in. It logs in

Robert De Niro, Angelina Jolie Among Stars Whose Contact Details Were Leaked in Alleged Tribeca Film Festival Data Breach

South Korea: Cash Couriers in Prosecutor-Impersonation Voice Phishing Scheme Given Prison Terms

Spotify Email Scam: Criminals Send Cloned Site to Put You at Risk; Know How to Be Safe

Up to $5,000 Per Person Incoming After AI Firm Accused of Exposing 480,000 People in Data Breach

25th July

79% of ransomware attacks now originate from compromised identities

Angelina Jolie among Hollywood stars to have private details leaked online in data breach, cyber-security expert claims

Australia: New South Wales nurse charged after probe into alleged data breach

Australian energy provider Origin Energy disclosed a data breach impacting customer data

Chaos Ransomware Uses msaRAT to Hide Traffic in Chrome and Edge

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

DentaQuest breach notices sent to 15 million after health data theft

DevMan Ransomware-as-a-Service (RaaS) portal: ransomware platform with builders, victims and payments

DevMan Ransomware-as-a-Service (RaaS) Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

Eyemart Express Announces Data Breach

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

From Phishing to Persistence: Lessons from the CrySome RAT Infection Chain

Hackers Use Stealer Logs to Bypass MFA and Launch Ransomware Attacks

Handala Hacker Group claims cyberattack on U.S. communications infrastructure

Malicious sites use JavaScript to build malware in browser memory

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

OnTrac data breach: customer notification after a network breach

Researcher Publishes GitLab RCE Proof-of-Concept (PoC) Letting Authenticated Users Run Commands as Git

Scrappy RAT Malware Targets Billions Of Chrome And Edge Users

ShinyHunters data leaks fuel $2,000 sextortion email scam

Stealer Logs Fuel Ransomware Attacks by Exposing Credentials and Bypassing MFA

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

The hacker who humiliated spyware makers and was never caught

Vatican prayer app exposed names and emails of 700,000+ users

Warning shot or publicity stunt - how worried should we be about the OpenAI hack?

Why SMS scams trick up to 5 times more people than email phishing

24th July

2.2 Million Vehicles Exposed to KARR Bluetooth Security Flaw

Agentic AI’s Next Breach Won’t Start in the Model. It Will Start in the API Path

AI Enhanced Two Thirds of Ransomware Attacks

AI is making ransomware more effective for 62% of Indian organisations

AI makes ransomware more effective in Australia

AI Without Guardrails Is Driving a New Era of Cybercrime

AI-Driven Bug Hunting Triggers Record 1,449 Security Patches from Oracle

Alleged hacker says two million Origin Energy customer records will not be leaked, claims they have 'settled privately' with the electricity giant

Android users getting bombarded by ads after every call: new fraud trend uncovered

Anubis Ransomware Group Claims Fairlife Hack and Threatens 1TB Data Leak

Apple dismisses Apple Gatekeeper flaw warnings from security pros

Australian Energy Giant Origin Confirms Data Breach Exposes Customer Data

Australian Signals Directorate (ASD), National Cyber Security Coordinator warn of ongoing Russian phishing campaign

Bad news - paying a ransomware demand might cause hackers to come back and ask for more

Be skeptical of OpenAI’s rogue hacker agent story

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

Borneo: Public warned of phishing emails impersonating Sarawak Energy, Sesco

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks

ChatGPT joins Microsoft's phishing nightmare as fake OpenAI scams surge

Chick-fil-A data breach affects more than 13,000 customers

Chick-fil-A Notifying Customers of Data Breach; Automated Attack Hit Accounts in June, Personal Information May Have Been Exposed

China-linked phishing scam impersonates Income Tax department, probe reveals

CISA, FBI Issue Warning of Ongoing Cyber Exploitation from Iran

Cl0p ransomware launches new large-scale data theft campaign

Clop ransomware targets Windchill, FlexPLM in data theft attacks

Clover Health Data Breach Exposes Sensitive PII and PHI

Coca-Cola subsidiary hit by ransomware attack

Coca-Cola’s Fairlife Ransomware Shutdown Exposes a Critical Milk-Tanker Continuity Gap

Craneware Healthcare Data Breach Puts 2,000 Hospitals at Risk

Cure Dental Data Breach Impacts Current and Former Patients: PII Exposed

Cybersecurity threats escalate with ransomware, data breaches and online fraud

Data Breach Confirmed After Australian Energy Giant Origin Is Hacked

Don't take the bait; how to spot and avoid phishing scams

EMEA healthcare’s supply chain on ransomware gangs' radar

EU Sanctions 5 Iranian Judges, 1 Hacker

EU sanctions Iranian hacker Nima Salehi as regime crackdown intensifies

European Union imposes sanctions on five Iranian judges and hacker for human rights violations

Eyemart Express confirms data breach involving customer data

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

Flock cameras used for “radical policing” of 150 universities and colleges

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Hanscom Federal Credit Union Data Breach Exposes Medical Records

Hermes AI agent used to automate attack on Thai Finance Ministry

Hotel Wi-Fi as New Attack Surface: DNS Poisoning Campaign Steals Microsoft 365 Logins Without a Single Click

Hotel Wi-Fi DNS Poisoning Attacks Hijack Microsoft 365 Accounts Without Phishing

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

How a Chinese AI model stopped OpenAI’s ‘unprecedented’ cyber attack

Illinois Man Pleads Guilty to Phishing 4,500 Snapchat Users to Steal Private Photos

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Lampion Malware Targets Portuguese Users With Multistage Phishing and 750MB RAT Payload

Man gets six years for hacking 750 women's Snapchat accounts

Microsoft Detects 7.6 Billion Email Phishing Threats as Teams Vishing Attacks Increases 10-Fold

Microsoft tops brand phishing list in Q2 2026 report

Mount Royal University student portal reopens after June cyber attack

National Cyber Security Centre (NCSC) issues alert over 'zero-click' phishing campaign hitting enterprises

National Security Agency (NSA) Issues Advisory on Russian Phishing Campaign Targeting Zimbra Users

Navigate Data Breach: Social Security and Driver's License Numbers Exposed

NCC Group reports ransomware rise as supply chain risks grow

No honor among thieves: Voice phishing ring allegedly ripped off by plants from splinter gang

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Not just phishing: The scams to watch for if you're an Origin Energy customer

One Country Absorbed Nearly Half of the World’s Ransomware Attacks in Just Six Months - The United States

OnTrac notifies customers of data breach after network hack

OpenAI Model Launches Cyber Attack on Hugging Face, Startup Fights Back with Chinese AI Model

OpenAI’s Unintended Attack Against Hugging Face is a Warning of What is Coming

Origin Energy Confirms Customer Data Breach

Origin Energy confirms data breach impacting millions of customers

Origin Energy Sector Data Breach Widens to 5 Million Customers

Pennsylvania Healthcare Provider Agrees to $3,000,000 Settlement Over Data Breach That Impacted 624,496 People

Philippine National Police (PNP) intensifies fight vs QR ‘phishing’

Phishing Campaign Targets Global Institutions with Fake Procurement Emails

Phishing campaign targets universities and EU bodies

Ransomware Attacks Targeting Universities on the Rise

Ransomware Attacks Using Corporate Printers Found in LATAM

Ransomware Death: When Cyberattacks turn Fatal

Ransomware gangs go after EMEA healthcare’s supply chain

Ransomware groups are hammering your vulnerable VPNs

Ransomware in 2026: More groups, more victims, no slowdown

Ransomware is the Scoreboard for Defensive Architecture

Rhode Island Department of State warning about voting information phishing scams

Russia’s new ‘zero-click’ phishing campaign targeting Western organisations

Russian APT Laundry Bear perfects zero-click phishing attack

Russian hackers exploit unpatched Zimbra servers to steal emails

Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks

Russian State-Supported Cyber Actors Conduct Phishing Campaign, CISA Warns

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

Sheboygan says 'phishing scheme' differs from 2024 breach

South Korea: Data breach hits Seoul bike-sharing service

South Korea: Foreign Ministry plans to change diplomats' email addresses after data breach

South Korea to change e-mail addresses of diplomats after cyberattack

Star Health Data Breach: Supreme Court Urges Insurer To Explore Amicable Resolution With Cybersecurity Expert

Swiss train maker refuses to pay hackers, citing minimal data impact

Tego AI Discloses Second Claude Flaw in a Week: Hidden Link Silently Sends Files to Attackers

Texas dental practice suffers data breach

Texas-based Eyemart Express warns customers of data security event

Thailand Securities and Exchange Commission (SEC) Files Criminal Complaint Against Bitkub Over 2021 Cyberattack

The automotive software vulnerabilities hiding in your dashboard

The best-funded companies open the most phishing attachments

The Origin Energy breach has been unusual - but there are ways to better protect your data

The Reasoning Gap: Your Organization’s Secret Invasion Is Already Underway

Thialf ice skating stadium hit by ransomware attack

Two Thirds Of Australian Organisations Hit By Ransomware Say AI Made Attacks More Effective

Tycoon2FA Dismantling Reduced Phishing Attacks by 92%

Tycoon2FA takedown reshapes the phishing landscape

UK and partners expose Russian state-backed ‘zero-click’ phishing attack

UK issues alert over Russian zero-click email attacks

Upbound Group says data breach fueled $13 million in fraudulent leases

US accuses American of allegedly wiping his phone using a ‘duress’ password during border search

US Border agents can check anyone’s phone without a warrant, Fourth Circuit says

Vatican’s ‘Click to Pray’ app leaks personal data of hundreds of thousands

Virginia Transportation Data Breach Exposes Social Security Numbers

Zimbra Half-Click Webmail Zero-Day Exploited by Russian Spies to Steal Emails, Credentials

Zoll Medical to pay $3.5 million to resolve data breach class action

23rd July

10-month cyber attack exposes personal data of South Korean diplomats

62% of Indian organisations affected by ransomware say AI made attacks more effective

79 Percent of Ransomware Attacks Begin with Stolen Identities

37,000 Vulnerabilities in Six Months: Cyber Threats Accelerate

AI agent turns rogue in landmark cyber attack

AI Agents Now the Enterprises Fastest Growing Exposed Attack Surface

AI-Driven Ransomware Operator JADEPUFFER is Now Targeting the Files That Keep AI Systems Running

Apple Fixes Hide My Email Bug After Yearlong Delay

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Australia: New South Wales accounting and advisory firm allegedly hit by SafePay ransomware

Australia's Origin Energy confirms customer data breach

Australian energy provider Origin says data breach exposes client data

Chaos ransomware deploys browser-based msaRAT to evade network detection

Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

ChatGPT joins the phishing target list, signalling a new security challenge for CIOs

ChatGPT now ranks as one of the most impersonated brands in phishing attempts

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point warns of SmartConsole zero-day exploited in attacks

Chick-fil-A Confirms Customer Data Accessed in Cyberattack

Chick-fil-A Confirms Data Breach After Credential Stuffing Attack Exposes Customer Personal and Payment Data

Chick-Fil-A Data Breach Exposes Information From New York Customers

Chick-fil-A Data Breach Exposes Personal Information and Stored Account Credit

Chick-fil-A reward members in several states warned over data breach

Chick-fil-A warns customers following data breach in 10 states

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Companies are still paying ransoms to cyber criminals despite official advice

Credential stuffing attack triggers Chick-fil-A customer data breach

Cyber threats escalate across the Philippines as AI-driven fraud grows

Dolphin X: New Windows Stealer Uses AI to Rank Which Victims Are Worth Robbing

Ernst & Young (EY) Latest Data Breach Comes With a Fun New Game: Guess the Client

Estée Lauder Companies hit by data breach targeting HR operation software

Fake Claude app promoted by Bing ads pushes SectopRAT malware

First day of school pushed back in Tennessee County due to cyber attack

From 16,619 phishing attacks to AI-driven fraud: cyber threats intensify across the Philippines in H1 2026

Hacker Attack Wipes Romania’s Property Registry, Freezing Real Estate Market

Hackers abuse Notepad++ plugins to stealthily install malware

Hackers Exploit Security Weaknesses to Compromise South Korean Diplomats’ Personal Data

Hackers Lurked for 10 Months Inside South Korea Diplomatic System

Heart Care Centers of Illinois Discovers Historic Phishing Attack Exposed Patient Data

HermeticReader Flaw (CVE-2026-48294) in Adobe’s Acrobat Extension Exposed WhatsApp Chats to Any Website

Hong Kong bucks APAC trend as targeted cyberattacks outpace ransomware

How AI guardrails are impeding the work of offensive cybersecurity researchers

How attackers hosted a fake Claude download page on the claude.ai domain

India: China-linked phishing scam impersonates Income Tax department, probe reveals

India ranks second in APAC for ransomware attacks in H1 2026

International alert spotlights Russia-linked attacks on Zimbra webmail

Iran-linked hacker group threatens wider cyberattacks on US critical infrastructure

Iranian Hackers Target Siemens and Schneider Industrial Systems

Kaspersky Warns of a Phishing Campaign Abusing Microsoft Authentication Mechanism

LAPSUS$ Announces Permanent Shutdown, Claims Mercor Data Sold to Chinese Buyers

Linux Security Teams Face Unprecedented Strain After Surge in Kernel Vulnerabilities

Login Theft Becomes Top Factor In Ransomware Attacks

Major Australian energy supplier confirms customer data compromised

Microsoft Leads Q2 2026 Brand Phishing as ChatGPT Emerges as a New Phishing Target

Montenegro: Phishing Campaign Misusing the Names of the Central Bank and Western Union

Months-long breach exposes South Korean diplomats’ personal data

Multi-patch vulnerability fixes can leave open source exposed

New Dolphin X malware uses AI to rank high-value targets

New Dolphin X Stealer Employs AI Profiling to Prioritize Targets

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

New RefluXFS Linux flaw lets attackers gain root privileges

New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

Omnicell Data Breach: Everest Ransomware Group Claims 1TB Stolen from the Healthcare Automation Firm

One Password Mistake Helped Hackers Access Chick-fil-A Account

OpenAI and Hugging Face Investigate AI Models’ Cyber Breakout

OpenAI models going rogue is “a wake-up call” says co-founder of Hugging Face, and will become the “most common” type of cyber attack

OpenAI says AI agent escaped security test, hacked Hugging Face systems in ‘unprecedented’ cyber-attack

Oracle July 2026 Patch Fixes 1,434 CVEs Across 334 Products

Origin Energy confirms customer data breach after unauthorised access

Origin Energy confirms data breach

Origin Energy confirms data breach, apologises after hacker claims to have accessed records of 2 million customers

Origin Energy confirms data breach, apologises to customers

Origin Energy data breach: Credit card, bank details included in data breach as Origin confirms incident

Origin Energy investigates potential data breach after warning millions of customers

Origin Energy investigating customer data breach

Origin Energy probes potential data breach, engages cybersecurity experts

Origin Energy reports customer bank, credit card details caught up in data breach

Origin Energy reports cyber attack, customer data stolen in network breach

Philippine National Police (PNP) warns against QR Code phishing scams

Proofpoint survey reveals Ransomware Gangs frequently Re-Extort Victims after initial Ransom Payment

Proton warns how smart TVs spy on you: here’s how to stop them

PyPI hardens package security with new upload restrictions

Ransomware Attack at Coca-Cola’s Fairlife Dairy Company Halts U.S. Operations

Ransomware Attack Puts a Chill On Japanese Frozen-Food Chain

Ransomware group Anubis claims Fairlife hack

Ransomware in 2026: Same Business, New Rules

Ransomware succeeds by exploiting people's trust, not just systems

Rochester Institute of Technology (RIT) warns of rising phishing scams targeting college students and financial aid

Russia-backed threat actor targets Western organizations in phishing campaign

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations

Russian hackers exploit Zimbra zero-click flaw for email theft

Russian spies feast on NATO member data through flaw many haven't patched

Russian-linked hacker group claims attack on major Japanese frozen food company

Shadow AI is becoming enterprise security’s biggest blind spot

South Africa: Rectron Implements Recovery Measures Following Cyber Incident

South Korea: Foreign ministry plans to change diplomats' email addresses after data breach

South Korea: Seoul's 5,000 won compensation fuels anger after bike-sharing service data breach

State Department imposes visa restrictions on foreign cyber scammers

Sumner County Schools delays start of year after network data breach

Suno data breach exposed personal information of more than 55 million users

Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack

Swiss train maker Stadler refuses Everest $12 million ransomware demand

Swiss train maker tells ransomware crooks to get off at the next stop

The AI code vulnerabilities that grow with your app

The Five Most Common AI Governance Mistakes Organizations Make

The silence after the breach is the part you control

TikTok and Apple caught red-handed sending user data overseas without consent

Two Thirds of Australian Organisations Affected by Ransomware Say AI Made These Attacks More Effective

Two-Thirds of Ransomware Victims Say AI Boosted Attack Effectiveness

Ubuntu fixes 3 flaws that could let attackers become admins

US government says Iran-linked hackers are disrupting American water and energy providers

Weeks after cyberattack, Evanston Township High School (ETHS) students receive phishing scam emails

What Is Cryptocurrency and How Does It Actually Work?

When AI Becomes the Hacker: What the OpenAI–Hugging Face Breach Means for Your Organization

When the Responder Is the Threat - Ransomware Negotiators, Insider Trust, and Incident Response Ethics

22nd July

$3 Million Settlement Agreed to Resolve Healthcare Services Group Data Breach Litigation

23andMe pays Georgia after data breach exposed genetic info of 171,000 Georgians

23andMe Reaches $18 Million Settlement Over Data Breach Affecting 6.9 Million Customers

55 Million Impacted by Suno Data Breach

A bizarre new malware campaign hacks your printer and forces it to print out ransomware demands

A critical vulnerability in WordPress has led to a wave of hacker attacks

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Adobe Chrome extension flaw let sites access private WhatsApp chats

AI can’t fix cybersecurity’s hiring problem

AI models cheat on cybersecurity evaluations, then fail to admit it

AI Music Platform Suno Hit by Massive Data Breach Exposing 55 Million Users, Fuels Copyright Controversy

Another SharePoint RCE exploited: Patch, then rotate your machine keys (CVE-2026-50522)

Anubis Ransomware Gang Claims Coca-Cola’s Fairlife Breach, Threatens to Leak 1TB of Data

Anubis ransomware gang claims Coca-Cola's Fairlife in data extortion threat

Apple Faces Lawsuit Over Hide My Email Privacy Vulnerability

AT&T phishing campaign exploits website redirect vulnerability

Attend Northwest Iowa Community College? You may have been affected by a data breach

Authorities Dismantle Kratos Phishing-as-a-Service Platform and Seize 200 Servers

Authorities Shut Down Phishing Empire Launching 15,000 Attacks Every Month

Beyond backups: creating a ransomware recovery process for data in AI environments

Breached! Origin Energy discloses data breach to Australian Stock Exchange (ASX)

Calls for Guardrails Grow as OpenAI Discloses ‘Unprecedented’ Autonomous Cyber Attack

ChatGPT maker's rogue AI acted on its own in 'unprecedented' cyber-attack

Chick-fil-A alerts D.C., Maryland and other customers to data breach

Chick-fil-A confirms data breach following suspicious account logins

Chick-fil-A customers in 10 states may have been part of data breach, company says

Chick-fil-A customers’ information exposed in data breach

Chick-fil-A data breach: What customers need to know

Chick-Fil-A Data Breach Exposes Customer Payment Data

Chick-fil-A Data Breach Exposes Sensitive Information on Customer Accounts

Chick-fil-A data breach hits customers in 10 states

Chick-fil-A discloses data breach after credential stuffing attacks

Chick-fil-A One Data Breach: Credential Stuffing Hits Loyalty App a Second Time

Chick-fil-A reveals data breach - customers warned hackers may have accessed their account info

Chick-fil-A says some customers’ information exposed in data breach

Chick-fil-A Sends Data Breach Notifications After Password Attacks

CISA orders urgent action on actively exploited Langflow RCE flaw

Clover Health Reports Data Breach After Cyber Intrusion

Community Health Center of Buffalo Data Breach Exposes Social Security Numbers

Compromised Credentials drive most Ransomware Attacks as new Cyber Threat groups continue to Emerge

Craneware Group Data Breach Potentially Impacts Employee and Customer Data

Credential stuffing attack at Chick-fil-A comes with data breach notice for customers

Critical Langflow vulnerability fully opens doors to hackers and is under active exploitation

Cyber Attack on Major Japanese Refrigerated Logistics Provider Disrupts KFC and Other Food Chains

Data Breach: ‘Chick-fil-A One’ Loyalty Accounts Hit By Credential Stuffing Attack

Data Breach at Largest Indian Nuclear Power Plant Leaks Sensitive Files

Data breach at Suno affects over 55 million users

Data breach delays start of Sumner County school year

Employees Are Misusing AI tools at Work: Making ROI Hard to Measure and Risking Data Leaks

Ernst & Young (EY) tells clients of third-party data breach

Estée Lauder Notifies Employees Following Oracle E-Business Data Breach

Experts warn paying ransomware ransoms prompts repeat extortion

Fake password-manager alerts could put your vault at risk

Federal agencies broaden alert on Iran-linked Operational Technology (OT) attacks

French fleet manager data leak allowed unlocking of doors, disabling vehicles

German and U.S. authorities dismantle Kratos phishing kit, arrest developer in Indonesia

German law enforcement claims to have ‘dismantled’ mega phishing-as-a-service group Kratos

Glassnode Investigates Customer Data Exposure, Warns of Phishing Risks

GO2 Health confirms limited data breach, patient data remains largely secure

Greedy ransomware crews return for seconds after victims cough up first extortion payments

Hacker breaches South Korean database of nearly all diplomats

Hacker group Ransomhouse claims cyberattack on Japan food giant Nichirei

Hacker group Ransomhouse claims cyberattack that disrupted KFC and other businesses

Hacker group RansomHouse claims responsibility for cyberattack on Nichirei

Hacker Used Steam Games to Steal $220K in Cryptocurrency

Hacker Wipes Romania’s Land Registry, Freezing the Property Market

Hackers Abuse Compromised Outlook Accounts to Steal MFA-Protected Microsoft 365 Sessions

Hackers Clone Microsoft Login Portals to Capture Credentials and Session Tokens in Real Time

Hackers Deface Kenya President William Ruto’s Website, Demand $330K Ransom

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

Hackers Use Procurement Phishing and Adversary-in-The-Middle (AiTM) Kits to Hijack MFA-Protected Microsoft 365 Sessions

How Agentic Ransomware is Changing Enterprise Cybersecurity

How OpenAI’s human mistake led to the AI-powered hack on Hugging Face

Hugging Face ‘hacker’ was rogue OpenAI model

If you pay a hacker’s ransom, chances are that they’ll come back for more

Illinois Man Sentenced to Over 6 Years for Hacking Hundreds of Women’s Snapchat Accounts via Phishing to Steal Women’s Pictures

It’s Past Time to Rethink Cyber Resilience

JADEPUFFER agentic ransomware returns, targets AI assets with ENCFORGE payload

Japanese food logistics giant recovers as extortion group claims cyberattack

Kali365 Phishing Kit Abuses Microsoft Device Codes to Hijack Microsoft 365 Accounts

Kratos Phishing Kit Dismantled: 200 Servers Seized, MFA-Bypass Tool Killed

Mary Bird Perkins: Data Breach Exposes Personal and Health Information of Patients

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

NAS Recovery Solutions Data Breach Affects 7k: Personal Information Exposed

Nearly half of organisations falling victim to ransomware encryption pay up, says report - although half of those often negotiate the payment down first

New Data Shows Suno Breach Affected 55 Million Accounts

New InfraTrust report reveals infrastructure flaws admins should patch first

New Kimsuky campaign compromised South Korean software vendors

New ransomware group uses printers to deliver ransom notes

New Ubuntu Desktop Vulnerability Turns Local Access Into Root Control

Nichirei System Outage: Ransomware Group "RansomHouse" Claims Responsibility, Possibly Same Group Behind ASKUL Attack

Odyssey-Themed Scams Appear Within Hours of Film’s Release

OpenAI: Our models breached Hugging Face during a cyber capability test

OpenAI Claims Its AI Models Went Rogue and Hacked Another Company

OpenAI models behind breach of Hugging Face systems, companies say

OpenAI Models Escaped Test Environment and Breached Hugging Face

OpenAI Reveals Its AI Model Went Rogue And Launched ‘Unprecedented’ Cyber Attack

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

OpenAI says its AI models hacked Hugging Face during testing

OpenAI says its AI went rogue and launched 'unprecedented' cyber-attack

OpenAI’s Own AI Models Escaped Their Sandbox to Hack Hugging Face and Cheat a Benchmark

Origin Energy Customers Affected by Potential Data Breach

Origin Energy customers face potential data leak as hacker issues ultimatum

Origin Energy faces potential data breach as hackers claim millions of customer records

Origin Energy investigates alleged cyber attack after hacker claims to have stolen data of two million customers in ransom bid

Origin Energy investigates breach as hacker claims data of millions

Origin Energy Investigates Data Breach After Hacker Claims Access to 2 Million Customers’ Information

Origin Energy investigating 'potential' breach of Australian customers' data

Origin Energy investigating 'potential' customer data breach

Origin Energy investigating potential data breach ‘as a matter of urgency’

Pakistan: Punjab Busts International Tycoon2FA Phishing Syndicate Behind 96,000 Fake Banking Apps, Two Arrested

Phishing attack on behalf of Nova Poshta: scammers send letters about "tax audits"

Phishing campaign targets global institutions with fake procurement emails

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns

Police Dismantle Kratos Phishing-as-a-Service Platform and Take Down Over 200 Servers

Proofpoint Research Finds 65% of Organizations Affected by Ransomware Say AI Made Attacks More Effective

Ransomware: Building better cyber-recovery metrics

Ransomware Attacks Are About Embarrassment, Cyber Expert Says

Ransomware Attacks Rise 3% in Q2 as Supply Chain Compromises Escalate, NCC Group Warns

Ransomware Does Not Pause While You Figure Out Who Is in Charge

Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife

Ransomware increasing across all metrics in 2026

Ransomware Statistics: Costs, Trends & Attack Data

Ransomware, Spies and Hacktivists Converge on UK and Ireland, New Threat Report Warns

Researchers Find Self-Hosted Guardrail-Free AI Models Multiply Attack Variants Faster than Signature-Based Defenses Can Track

Russian Hacker Jailbreaks Claude to Turn into an AI-Powered Penetration Testing Platform

Russian-Linked Hacker Group Claims Attack on Nichirei; Internal Data Released on Dark Web Site

Russian-Speaking Hacker Jailbreaks Claude Opus to Build AI Pentesting Tool

Saint Pete MRI Discloses Data Breach Exposing Patient Information

Security Experts Discuss the Evolution of JADEPUFFER

Security teams keep finding critical flaws after scheduled testing ends

Settlement over 23andMe data breach to bring Alabama more than $260,000

South Africa: ICT distributor Rectron suffers cyber attack

South Korea: National Diplomatic Academy Data Breach Undetected For 10 Months

South Korea discloses data breach impacting diplomats worldwide

Southern Door County School District increases cybersecurity measures after phishing scam last year

Southern Door Schools make changes, regains $68K lost to phishing scam

Stadler Rail refuses to pay $12.3 million ransom after ransomware attack

STIIIZY Handing Over $2,950,000 To Settle Data Breach Class Action Lawsuit

Suno admits data breach that reportedly leaked 55.3 million users’ data

Suno data breach affecting 55 million users reveals how AI giant was scraping songs illegally for training

Suno’s Data Breach Exposed 55 Million Users' Information, but the AI Song Generator App Didn’t Tell You

Supply Chain Threats Escalate as Global Ransomware Activity Rises Month on Month

Swiss rail giant Stadler rejects $12.3 Million ransom demand after cyberattack

Texas Chick-fil-A customers’ data breached in cyberattack

The 72-Hour Rule: CISA Just Turned Patch Management Into a Ticking Clock

Third-Party SDKs Raise Privacy Questions for Apps Marketed to U.S. Military

Threat group claims credit for ransomware attack on Coca-Cola’s dairy unit

TPIS Industrial Services Data Breach Impacts 2k: Social Security Numbers Exposed

TrickBot Ditches HTTP for DNS Tunneling in Latest Variant

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

TruStage Discloses Data Breach Potentially Affecting Millions of Credit Union Customers

Ubuntu snap-confine Vulnerability Enables Local Root Access

Upbound says hack caused $13 million in fraudulent Acima leases

Way Finders Data Breach Exposes Social Security Numbers

When the Hacker Does Your Legal Risk Assessment for You

Why Are Businesses Still Paying Ransoms If Hackers Keep Demanding More?

Why misconfigured clouds are a hacker’s easiest target

Why Modern SOCs Need Multi-Layered Detections

Why phishing detection alone won’t save K-12 school districts anymore

21st July

23andMe settles multistate data breach lawsuit for $18 Million

79% of ransomware attacks now originate from compromised identities

79% of Ransomware Attacks Start with Compromised Identities

90,000 Flock cameras have quietly gone up in the US: What they track and how to check your city

A New Ransomware Threat Actor Emerges Every Week

AgentBaiting: Fake AI Skills Trick Claude Code, Gemini, and ChatGPT Into Spreading Malware

AI agents are still logging in as humans

AI agents tricked into recommending malicious GitHub repositories

AI firm ORO says North Korean hacker stole $600K worth of crypto

AI music generator Suno breach affects 55 Million users, per Have I Been Pwned

AI-generated reports push GNOME to shorten its disclosure window

AI-Only Cyberattack Hits Hugging Face, Offering First Real-World Example Of Feared 'Agentic' Threat

Akamai Warns of Fraudulent AI Agent Activity Aimed at E-Commerce Sites

Alkegen Data Breach Exposes Personal and Protected Health Information

Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak

ApolloMD Agrees to Pay $4.02 Million to Settle Data Breach Lawsuit

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Asia-Pacific cyber threats rise on AI & geopolitics

Australia: GO2 Health medical clinic in Brisbane waited almost three months to alert patients it was hacked

Australia: New South Wales (NSW) accounting and advisory firm allegedly hit by SafePay ransomware

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

Coca-Cola Fairlife hack claimed by Anubis ransomware

Coca-Cola Fairlife ransomware attack halts production as cyber threats to operations grow

Craneware Confirms Data Theft After Cyberattack, Investigations Underway

Craneware Exposes Significant Data Theft in Monday Data Breach

Critical Palo Alto VPN bug now exploited by Qilin ransomware gang

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public Proof-of-Concept (PoC)

Critical SharePoint RCE flaw exploited to steal machine keys

Critical wp2shell WordPress flaws exploited to install webshells

Cyberattack Halts Coca-Cola’s Fairlife Productions

Ernst & Young breach exposes client tax data - find out if you're at risk and what to do next

Estée Lauder Confirms Data Breach: SSNs, Passport Numbers, and Health Data Exposed via Oracle EBS Exploit

Estée Lauder Confirms Cyberattack Affecting Personal Information

Estée Lauder discloses data breach tied to Oracle EBS vulnerability

Europe’s top carpooling platform BlaBlaCar was breached, hackers claim

Fairlife hits pause on US production after ‘ransomware event’

Fake FBI agents target people who already got scammed

Fake FBI Agents Use Internet Crime Complaint Center (IC3) Complaints to Target Scam Victims

Fake Troubleshooting Prompts Trick Online Banking Users in Spain and Portugal into Installing Trojans

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

FBI Warns of Deepfake Videos Impersonating Internet Crime Complaint Center (IC3) Leadership

Federal Trade Commission (FTC) warns of phishing scam involving fake letters about unclaimed insurance money

German authorities dismantle Kratos phishing-as-a-service infrastructure

Global car rental service data leak exposes thousands of drivers

Got an email from X about a suspicious login? It can be a phishing scam

Government ransomware attacks rose 13% globally to 187 incidents in first half of 2026, with The Gentleman most active

Hacked! Ernst & Young informs clients of third-party data breach

Hacker Turns AI Jailbreaks Into Offensive Attack Platform

Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn

Hackers Exploit Palo Alto PAN-OS Flaw to Deploy Qilin Ransomware

Hackers Exploiting Palo Alto’s PAN-OS Vulnerability to Deploy Qilin Ransomware

Healthcare Software Provider Craneware Announces Data Breach

Here’s How A Hacker Allowed Google’s AI To Do 89% of the Crime

How AI and ransomware are reshaping cybersecurity

How ransom attacks on small businesses open doors to larger organisations

Hugging Face confirms data breach by AI agent: Why it has sparked a debate on cyber guardrails

JADEPUFFER Deploys ENCFORGE Ransomware Built to Destroy AI Models and Training Data

JadePuffer returns with ransomware built to target AI models and infrastructure

Kaspersky Warns of Printer-Based Ransomware Tactic in LATAM

Kentucky part of multi-state 23andMe data breach settlement

Kenya probes hack of president's website after bitcoin ransom demand

Kratos phishing-as-a-service kit loses its battle with international law enforcement

Major US hospitals partner Craneware confirms data breach

Makeup giant Estée Lauder says hackers accessed Social Security numbers

Malaysia: Telco identifies suspect in data breach as Malaysian Communications and Multimedia Commission (MCMC) demands full report

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

New Zealand: Ministry apologises after data breach affects 276 student records

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs

OpenAI and Hugging Face partner to address security incident during model evaluation

OpenAI says Hugging Face was breached by its pre-release models

Paidwork Data Breach Exposes 23.3 Million Accounts, Banking Data and bcrypt Password Hashes

Patients sue diagnostics company over data breach

PhishByte warns Essential Eight misses phishing risk

Police dismantle Kratos phishing platform, arrest developer

PR3TACK preemptive framework maps threats before attackers use them

Prints of darkness: Hackers printing demands during ransomware campaigns across Latin America

Qilin exploits Palo Alto Networks GlobalProtect VPN firewalls

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access

Qilin Ransomware Claims 1,358 Victims as Global Attacks Reach New Record

Ransomware detections among Indian SMBs rise in Q1 2026

Ransomware Is Accelerating, But It's Not Because of AI

Ransomware victims fail to fix flaws that exposed them

Received a ‘KrisFlyer Anniversary Draw’ e-mail? It could be a phishing scam, Singapore Airlines warns

Research says JadePuffer Ransomware wipes off data on AI Model Infrastructure

Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros

Reynella East College updates parents, carers following June data breach

Russian Hacker Turns Jailbroken Claude Into Pentest Platform

Scammers Are Impersonating Internet Crime Complaint Center (IC3) Using Fake Profiles and AI-Generated Videos, FBI Updates Warning

Singapore Airlines warns against phishing scam in 'KrisFlyer Anniversary Draw' emails

SonicWall SMA zero-days were exploited weeks before disclosure

South Korea: Seoul Notifies 4.62 Million of Ttareungyi Data Breach, Offers Free Passes

South Korea: Seoul to compensate 4 million bike-sharing users after data breach

South Korea Confirms Cyberattack on Diplomatic Academy, Data of 6,000 Diplomats at Risk

Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack

SportsMed Physical Therapy Data Breach Exposes Health Information

Suno Data Breach: 55 Million Emails and Stripe Records Exposed

The Procurement Trap: Inside an AiTM Campaign Targeting Global Institutions

UK government scraps plans for digital ID cards after millions of Brits opposed

Understanding Illicit Ecosystems: Inside Rehub’s Rise as a Primary Ransomware Marketplace

US Hospital Finance Software Provider Craneware Reports Data Theft

'Was this you?': Scammers using phishing techniques to hijack X accounts

Websites hacked with a single HTTP request: WordPress critical exploit was developed with ChatGPT

Windows LegacyHive zero-day flaw gets free, unofficial patches

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities

20th July

23andMe Pays $18 Million to Settle Multistate Data Breach Lawsuit

271 million Uber Eats and Starbucks records surface on hacker forum: Should you be worried?

AI agents just doubled inside the enterprise. Confidence rose faster than control did

An AI agent breached Hugging Face before an AI defender caught it: What users should do next

Attackers Combo Up Evasion Tactics for BEC Phishing

Australia: Crypto scam losses of $1.47 million in five days sparks Queensland police alert to new phishing threat

Centers Laboratory Discloses Data Breach Affecting 542K Individuals

Chinese police repatriate key suspect in phishing and Trojan virus case from Vietnam

Clover Health hit with data breach

Clover Health reveals data breach in SEC filing

Coca-Cola Company’s Fairlife targeted in ransomware attack

Coca-Cola’s Fairlife halts U.S. production after ransomware attack

Community College of Beaver County (CCBC) Data Breach Exposes Social Security Numbers and More

Craneware confirms data breach after cyberattack

Craneware Confirms Data Breach, Employee Records Among Exposed Data

Craneware reveals cyber attack with employee and customer data stolen

Critical ServiceNow code execution flaw now exploited in attacks

Cruciferra Crypter Uses Process Ghosting to Evade Detection

CVE-2026-42533 Exposes Critical Pre-Auth nginx RCE Flaw

Cyber Attack Against Major Milk Producer Could Lead To A Milk Shortage

Cyberattack hits Coca-Cola's $4 billion dairy brand, suspends US production

Cyberattack pauses Fairlife’s production, working to learn about impact on Webster plant

Data breach hits well-known AI company: ‘Sorry for any disruption’

DocuSign Phishing Kit Delivers RMM Tools to Windows and macOS

Don’t run into these ‘Gentlemen’. More on this Ransomware gang

Ecopetrol confirms ransomware attempt, data stolen from 3,300 accounts

Edinburgh-based healthcare firm 'hit with cyber attack' as hackers steal data

Ernst & Young Data Breach Affects Personal, Financial Information

Ernst & Young data breach exposes personal and financial information of tax clients

Ernst & Young reveals data breach following hack on support system

Estée Lauder discloses data breach via Oracle E-Business flaw

Experts Advise iPhone Users to Turn Off AirPlay to Prevent Hacker Threats via Public Wi-Fi

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

Fairlife Ransomware Attack Hits Production Systems, U.S. Operations Suspended

Fairlife shortage looms after ransomware hits Coca-Cola plants

Fairlife stops US milk production after ransomware attack

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Family Partnerships Data Breach Exposes SSNs and Financial Account Information

FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case

Free Archive Program 7-Zip Can Be Hacked With a Malicious File

‘Frustrated and stressed’: Thousands impacted by cyber attack at Calgary university

Governments Weigh Ransomware Payment Bans as Hackers Grow Bolder

Hacker stole from Steam users for years, got caught because he ordered food online

Hacker wipes European country’s entire land registry database, paralyzing real-estate market

Hacker wipes Romania's entire land registry database

Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

Hackers Are Hiding Invisible Text in Phishing Emails to Fool AI Security Tools

Hackers steal $23.7 million in crypto from Ostium in off-chain attack

Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies

Hackers were inside South Korea's diplomat training system for 9 months

Health tech firm Craneware admits “significant volume” of customer and employee data exposed in cyber attack

Health tech firm Craneware says customer and staff data stolen in cyber attack

Healthcare phishing breach exposes SSNs, medical records for 15 months

Healthcare ransomware attacks up 14% in first half of 2026

Heart Care Centers of Illinois Data Breach Compromises PHI and PII

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel

How receding Ransomware payments are reshaping the Economics of Cyber Extortion

Hugging Face: We Used AI to Catch the First Confirmed AI Agent Breach of a Major AI Platform

Hugging Face breach reveals why defenders need their own AI models on standby

Hugging Face breached by autonomous AI agent

Hugging Face confirms breach affected internal datasets and credentials, urges users to take action

Hugging Face Confirms Data Breach Caused by Autonomous AI Agent

Hugging Face Hacked in Autonomous AI Attack

Hugging Face Says Autonomous AI Agent System Breached Production Infrastructure

Hugging Face says it resorted to a Chinese AI model to battle a fully autonomous cyberattack because U.S. model guardrails stymied its defense

Hugging Face warns an autonomous AI agent hacked its network

Identity-based attacks overtake software flaws as leading ransomware entry point

India: Data breach exposes documents tied to Kudankulam nuclear plant expansion

India says allegedly leaked nuclear plant files pose no safety risk

Information Commissioner Notified After Data Breach Concerns At Former West Sussex County Council Buildings

Italy fines WINDTRE €1.7 million over security flaws behind two data breaches

Jadepuffer: Agentic attack evolves to destroy AI models

JadePuffer agentic attacks now target AI model data with ransomware

JadePuffer Returns With Ransomware Designed to Wipe AI Models

Kenya restores presidential website after cyber attack

Kenya’s Presidential Website Hit by Cyber Incident, Government Says No Data Was Stolen

Kentucky included in settlement with 23andMe following 2023 data breach

LG Monitors Spotted Installing Adware-Like App on Windows PCs

Little Flower Data Breach Exposes Health Information and SSNs

Minnesota Health Insurance Network Data Breach Exposes PHI and PII

Mythos Didn't Break Your Security Program. Your Exposure Window Could

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

New X phishing scam uses fake login alerts to steal your account

Oak Hill Data Breach Exposes SSNs and Medical Information

One threat that infiltrated the ANC, Anglo American, Mediclinic, South African Airways, and Pick n Pay

Paidwork breach exposes sensitive data of 23 million user

Paidwork Data Breach Exposes 23 Million User Records, Have I Been Pwned (HIBP) Says

Plugging an LG monitor into a Windows computer installs a potentially unwanted program

Police Chiefs Cite Transport for London (TfL) Hack in Push for Cybercrime Risk Orders

Qantas goes unpunished for staggering data breach

Ransomware attack disrupts fairlife’s US production

Ransomware attack forces Coca-Cola to suspend US production at dairy unit

Ransomware attacks hit SMBs harder than ever as cybercrime gang rivalry heats up

Ransomware detections on Indian SMBs is on the rise

Researchers Build WordPress Exploit Using OpenAI's GPT

Resource Center of Dallas Data Breach Affects At Least 9k Individuals: SSNs Exposed

Romania races to restore land registry after cyberattack disrupts property market

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

Sefas Innovation Data Breach Impacts Banks: Personal and Financial Info Exposed

ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

Software provider to more than 2,000 US hospitals says hackers stole employee and customer data

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

South African industrial giant that makes chemicals targeted by one of the world’s most notorious ransomware groups

South Carolina will receive $280,000 in 23andMe settlement after data breach

Thailand: Base-education hacker arrested in Phuket

The Gentlemen deploys new malware to take control of systems before encryption

The New Cyber Frontier: Ransomware Surges as AI Deepfakes Expose Corporate Vulnerabilities

The Odyssey piracy scams surface hours after its theatrical debut

The Rise of Calendar Phishing

The Windows 10 hangover is becoming a security problem

Threat Actors Allegedly Listed Starbucks Data on Hacker Forums

U.S. court seizes $8.37 million in crypto from ransomware negotiator accused of aiding hackers

U.S. Prosecutors Charge Russian Trio in Cybercrimes Causing More Than $62 Million in Losses

United Arab Emirates: Dubai Police Warns Against Online Scams Promising Work and Visit Visas

Unpatched SharkNinja flaw turns vacuum cleaner into a spy, reveals house maps, WiFi passwords

Why Security companies can’t create an invincible Vaccine against Ransomware

WordPress Critical RCE Security Flaw a Threat to Millions of Websites

WordPress urges immediate update: hackers are gaining full control with a critical exploit

World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent

wp2shell: The Unauthenticated WordPress Exploit That Needs No Login, No Plugins, Just a Vulnerable Core

X users are being hit by fake login alerts: the phishing emails look real

Zero-Day Hack Exposes South Korean Diplomatic Academy to Massive Data Breach