Data Breaches Digest - Week 28 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 6th July and 12th July 2026.

7th July

Accenture Data Allegedly Listed for Sale on Hacking Forum, 35GB Source Code Claimed Stolen

AI agent executes first known ransomware attack, but the humans haven’t left the building

An AI Agent Ran a Ransomware Attack Almost Entirely by Itself

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)

Australia records highest data breach notifications since 2018

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and Privileged Remote Access (PRA)

BeyondTrust Patches Critical Remote Support and Privileged Remote Access Flaws

BeyondTrust warns of critical flaws in remote access software

Canada's Spy Agency Reveals Secret Cyber Strikes on Drug Traffickers, Extremists and Ransomware Networks

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

Delivery drivers losing tens of thousands to phishing scam across Australia

Deutsche Bank data breach fears rise after ransomware group posts “evidence”

Device Code Phishing Abuses Microsoft OAuth 2.0 to Steal Tokens

Dutch spy agencies are training AI with citizens’ data, watchdog warns

EtherRAT Campaign Uses Fake System Administrator Teams Call to Compromise Employees

Fake Interview Phishing Campaign Impersonates Top Brands to Steal Gmail Credentials

FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member

First AI Ransomware Attack Still Needed Human Oversight

Five Eyes Intelligence warns of rising AI-Powered Cyber Attacks on Businesses and Governments

Gemini Live API Flaw Lets Attackers Inject Code Execution Through Unconstrained Tokens

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

Gmail Credential Phishing Campaign Uses Nested Redirects Across Legitimate Platforms

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Hackers Use uxtheme.dll Sideloading to Launch Cavern Agent on Compromised Systems

Hacktivists call out Trump by hacking and defacing US Army websites

Institute of Chartered Accountants of India (ICAI) denies data breach, calls hacking claims 'false and malicious'

Institute of Chartered Accountants of India (ICAI) Denies Student Records, Exam Data Breach; Warns Against Rumours

Iran-linked hackers used Israeli IT providers to target government bodies

Japanese Teen Arrested Over Bandai Channel ChatGPT-Assisted Cyberattack, Possibly Exposing up to 1.3 Million Users

Microsoft Edge Use-After-Free Flaw Lets Attackers Execute Code Remotely

New Januscape Linux flaw allows VM escape on Intel, AMD devices

Notorious hacker's arrest sparks backlash over Microsoft’s excessive device tracking

Researchers detect the world's first AI-driven ransomware attack: here’s what you need to know

Researchers Log the First Ransomware Attack Run Entirely by AI Agent

Researchers track down world's first AI agent ransomware attack, here's what you should know

South Korea: Unsolved Fraud Cases Surge 11-Fold Nationwide

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Teen allegedly used ChatGPT to wipe out 46,000 anime accounts

The ‘first’ AI-run ransomware attack still needed a human: New details emerge

UK cyber pledge draws only a handful of top firms despite ministerial appeal

UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories

US cyber agency uses Anthropic's Mythos to hunt for government code flaws

Where Organizations Fall Short with Multi-Factor Authentication (MFA)

Why Bangladesh’s new data protection law may fail to protect your data

Windows Device Identifier Helped FBI Trace and Arrest Alleged Scattered Spider Member

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Your Windows PC has a secret ID number, and Microsoft just used one to unmask a hacker

6th July

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

70,000 people affected in Singapore Land Authority (SLA) data breach

A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID

A new AI agent can hack systems and deploy ransomware without human intervention

AdaptHealth Data Breach Compromises Patient Personal and Health Info

AI agent carries out ransomware attack independently

AI agent completes full ransomware attack chain

AI Agent Conducts First Fully Autonomous Ransomware Attack

AI agent exploits Langflow in first fully autonomous ransomware attack

AI Agent Pulls Off Full Ransomware Attack Without Human Help, Researchers Say

AI Can Forge Documents in Minutes - “Looks Right” Is No Longer Enough

AI Independently Automated An Entire Ransomware Attack – Should We Be Concerned?

AI-Speed Attacks Are Forcing a Rethink of Incident Response

Attackers Use Password-Protected PDF Lures to Launch Microsoft Device Code Phishing

Australia: Data Breach Alerts Hit Record High in 2025

Australia: Film festival dumps address requirement after hack

Automated AI Phishing Networks Hijack Enterprise Systems Using Match Hype

Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

Bad Epoll Zero-Day Linux Kernel Flaw Lets Unprivileged Users Escalate to Root

Be careful entering one-time codes in Microsoft's login flow, you could be getting phished

Belgium: Police arrest 19-year-old suspected key player of international phishing network

Canada’s spy agency conducted state-authorized cyberattacks against drug traffickers and ransomware gangs

Canadian spy agency reports hacking three criminal groups in 2025

Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year

Centers for Dialysis Care Data Breach Impacts 8k People

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

ClickFix spear-phishing technique tops Q2 malware charts

Credit Acceptance Corp. Data Breach Exposes SSNs

Cyber Insurance Demand Jumps in 2026 as Ransomware Costs Keep Climbing

Cybersecurity Experts Warn: Your Biggest Risk May Be a Vendor, Not a Hacker

Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware

Department of Homeland Security (DHS) Confirms Breach of Homeland Security Information Network

Fake Booking.com travel credit scam targets travelers

Fake IT support calls on Microsoft Teams push EtherRAT malware

FIFA World Cup Phishing Scam Uses Fake Reward Pages to Steal Credit Card Data

Finding focus: Strategic approach to cyber security for small and medium companies

First 'agentic ransomware' run entirely by a large language model discovered

First AI-run ransomware attack highlights emerging cyber threat landscape

First Autonomous AI Ransomware Attack Confirmed by Security Researchers

First Fully Autonomous AI Ransomware Campaign Raises the Stakes for Enterprise Cybersecurity

Gaslight Malware Abuses Prompt Injection to Trick Automated AI Cybersecurity Agents

Gibraltar: Attorney General denies Royal Gibraltar Police (RGP) request to prosecute former Police Commissioner for possible data breach

Go-Based Gentlemen Ransomware Uses PsExec, WMIC, and PowerShell Remoting for Network Propagation

Hackers Use Fake World Cup Reward Pages to Capture Names, Addresses, PAN, CVV, and Expiry Data

Hackers Use Trusted Microsoft Domain and One-Time Codes to Hijack Corporate Accounts

Henry Rossi Data Breach Exposes Social Security Numbers

Hong Kong: Two investors lost over $550k in fake Futu Securities phishing attack

How to prioritize AI agent security by business impact

INC Ransom Adds City of Acworth, Georgia, and City of Oak Park, Michigan, to Dark Web Leak Site

Indirect Prompt Injection Attacks Hide Malicious Instructions in Websites to Target AI Agents

Indirect Prompt Injection in Web Content Targets AI Agents

Institute of Chartered Accountants of India (ICAI) Dismisses Chartered Accountant (CA) Exam Data Breach Claims, Calls Viral Notice 'False and Malicious'

Institute of Chartered Accountants of India (ICAI) dismisses claims of data breach, says members' and students' records remain secure

Institute of Chartered Accountants of India (ICAI) dismisses viral 'data breach' notice as fake, says records of students and members remain secure

INTERPOL Report Warns of Sharp Rise in AI-Powered Cybercrime Across Asia-Pacific

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

JadePuffer: The First Complete LLM-Driven Ransomware Attack

JADEPUFFER AI Can Break into Servers and Launch Ransomware All on its Own, Researchers Warn

JadePuffer Demonstrates How AI Agents Can Automate Ransomware Attack

JadePuffer seen in the wild: it may be the first fully autonomous ransomware

Japanese teen arrested over cyberattack that disrupted anime streaming service

Kaspersky Details Microsoft Device Code Phishing Attack Using OAuth Flow

KDDI Suffers Massive Data Breach: Up to 12.23 Million Email Addresses, 7.61 Million Passwords Leaked via ISP System Vulnerability

Lake Region Healthcare Data Breach Exposes Social Security Numbers and Health Information

Major medical device manufacturer notifies nearly 4 million of breach

Max severity Adobe ColdFusion flaw now exploited in attacks

Meet JadePuffer: The AI Ransomware That Can Hack Systems Without Human Help

Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page

Microsoft device telemetry key to unmasking alleged Scattered Spider hacker

ModSecurity Flaws Let Attackers Bypass WAF Rules and Request-Body Inspection

Moody Bible Institute Data Breach Exposes 2.3 Million Email Addresses

Moody Bible Institute data breach exposes 2.3 million individuals

Moody Bible Institute Data Breach Exposes 2.3 Million Users’ Personal Data

National Crime Agency (NCA) Issues Warning to Parents As Shared Child Photos Exploited by AI Tools

New AI agent can hack systems and deploy ransomware without human help

New ClamAV security patch closes seven scanner bugs dating back two decades

New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors

New Java-Based QuimaRAT Malware-as-a-Service (MaaS) Built to Run on Windows, Linux, and macOS

New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

Nissan data breach in Oracle PeopleSoft attack offers cybersecurity lessons

'No hacker needed': New AI ransomware can automate database attacks from start to finish, warns cybersecurity firm

NTN Bearing Data Breach Compromises Information of Individuals in U.S.

OAuth, guest accounts, and weak MFA drive SaaS risk

One of Windows' most hated features just helped catch a 19-year-old hacker

Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

Opera GX Flaw Let Sites Auto-Install Mods to Steal Data

Opera GX Universal CSS Injection Flaw Enabled Zero-Click XSLeak Attacks

Ousaban Banking Trojan Uses Daily-Changing DDNS Domains to Hide C2 Infrastructure

Pennington County, South Dakota, Closes Public Offices July 6 After Cybersecurity Incident Ahead of July 28 Runoff Election

Personal details of about 70,000 people exposed in Singapore Land Authority (SLA) cloud security incident, investigations ongoing

Phishing Campaigns Now Adapt to Victims’ Devices, Raising the Stakes for Enterprise Security

Phishing poses as big-brand job interview to steal Google accounts

Ransomware Campaign Uses Fake Interpol Notices to Target Small Businesses

Ransomware without borders: Why cyber resilience has become a global business imperative

RedLine C2 Pivot Reveals Seven Fraudulent Domains Used in Maritime Phishing Attacks

Renting The Exploits: How Fraud-As-A-Service Platforms Turned Digital Crime Into A Subscription Business

Researchers Claim First Fully Agentic Ransomware: JadePuffer

Researchers Discover First Documented Case of Agentic Ransomware

Researchers Uncover First Fully Agentic AI Ransomware Attack

Russian hackers expose UK government logins in FortiBleed credential breach

Securing the inbox: Where identity, brand and security meet

Seven FatFs Vulnerabilities Exposing Embedded Devices to Code Execution

SilverFox ValleyRAT Campaign Uses Eight-Stage Chain to Deploy Kernel Rootkit

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Software Is Now Written at the Speed of Thought. Security Isn't

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

Sysdig clocks first documented case of agentic ransomware

T.A. Solberg Data Breach Exposes Social Security Numbers and Health Information

Teenage Hacker Arrested After Using ChatGPT To Crash Major Streaming Network

The Biggest Cybersecurity Mistake Many Small Businesses Don't Realise They're Making

The Canvas Breach: Lessons for SaaS Security Governance

The ‘first’ AI-run ransomware attack still needed a human

The first known ‘agentic ransomware’ has arrived

The future of payment fraud could be automated

The Gentlemen Ransomware Uses 21 Remote Execution Techniques to Encrypt Entire Networks

The Gentlemen Ransomware-as-a-Service (RaaS) Turns Infected Hosts Into SMB Distribution Points for Rapid Spread

The operational challenge: What the Mackay Sugar cyber attack reveals about Australia’s cyber readiness

The Two-Minute Exploit: How AI Closed the Skills Gap for App Attackers

This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

Types of Cyberattacks: The Complete 2026 Guide to Threats and Defenses

UK Foreign Office logins stolen in Fortibleed cyberattack, sold on dark web

UK Government Credentials Reportedly Stolen in FortiBleed Campaign Targeting Fortinet Devices

Ukrainian media outlets now among 'priority targets' for Russian hackers

US law firm Blank Rome faces class action over data breach

Vect and TeamPCP Cybercrime Groups Link for Ransomware Hits

Veeam Backup RCE Flaw Lets Low-Privileged Domain Users Gain SYSTEM Access

What Is BYOD? 9 Security Risks Businesses Are Racing to Fix in 2026

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

Why Ransomware, Identity Theft Top Nigeria’s Growing Digital Threats

Windows 11’s User Tracking Helped FBI Arrest Notorious Spider Hacker

Women's Wellness of Southern Delaware discloses data breach tied to former provider

World's First AI Agent Ransomware Attack Comes to Light: Automated Crime Chain Without Human Intervention

Data-Leaking Ransomware Report - Q2 2026

Welcome to the second quarter of this year's DLR Report, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed between 1st April and 30th June 2026.

DBD discovered and researched 2285 Global Ransomware Victims over 115 Countries and Islands, including 919 US Ransomware Victims over 49 States and Districts, claimed by 91 Data-Leaking Ransomware Operators in Q2 2026.

DBD also discovered and researched 20 New Active Ransomware Operators in Q2 2026, further details of which can be found in our PRiSM application.

Download PDF



Data Source: Data Breaches Digest.

Data-Leaking Ransomware Report - June 2026

Welcome to last month's DLR Report, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed between 1st June and 30th June 2026.

DBD discovered and researched 791 Global Ransomware Victims over 87 Countries and Islands, including 281 US Ransomware Victims over 41 States and Districts, claimed by 64 Data-Leaking Ransomware Operators in June 2026.

DBD also discovered and researched 5 New Active Ransomware Operators called Black X, Booba Project, DeadLock, REDACT and SETTRA in June 2026.

Download PDF



Data Source: Data Breaches Digest.

Ransomware Operator Claims - Week 26 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 22nd June and 28th June 2026, kindly assisted by our partners.

DBD discovered and researched 137 Ransomware Victims over 43 Countries and Islands claimed by 33 Data-Leaking Ransomware Operators, including 3 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 27 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 29th June and 5th July 2026.

5th July

AI Agent Pulls Off a Ransomware Attack Without Human Help

AI agent reportedly carried out an entire ransomware attack on its own

AI Executes First Known Fully Autonomous Ransomware Attack, Sysdig Researchers Warn

AI-powered ransomware has officially arrived - and it's only the beginning

Hacker Exploits Claude AI to Obtain Complimentary Tickets for Almost All US Concerts

Medtronic Notifies 3.8 Million After ShinyHunters Data Breach

Meet JADEPUFFER: The first ransomware attack that hacked, diagnosed, and extorted - ALL without a human

Researchers may have identified first ever documented case of AI agent-led ransomware operation

Researchers uncover first fully autonomous AI ransomware attack

SharePoint Server Actively Exploited: CISA Orders Patch Before Ransomware Actors Strike

South Korea: Financial Supervisory Service Issues Alert on 5,707 Card Thefts via Phishing

South Korea: "Thought It Was a Real Payment Page" - Phishing Attacks Stealing Card Info from Hacked Shopping Sites on the Rise

South Korea: "Thought It Was a Shopping Mall Payment Page"...Financial Supervisory Service (FSS) Issues Warning on Shopping Mall Card Information Phishing

South Korea warns shoppers as phishing pages steal card data

Tata Electronics Data Breach Exposes iPhone 18 Pro Schematics; India Launches Probe

The Philippines: Commission on Elections (COMELEC) warns public over phishing scam

To Catch a Hacker, Think Like One: The Nuance in Modern Cybersecurity

Windows 11 identifier code used to track Scattered Spider perpetrator after Microsoft shared info with FBI - 19-year-old US-Estonian hacker arrested over alleged ties to infamous extortion group

4th July

2.6 Million Americans Exposed: DentaQuest Hit by Massive Sensitive Data Breach

AI Can Now Run Ransomware From Start to End, Researchers Say

AI Helped A Hacker Find A Way To Issue Tickets To Almost Every Major US Music Festival

AI Phishing Scams Jumped 14x: How to Spot Smishing, QR Fraud, and Voice Clones

Alibaba reportedly bans employees from using Claude Code

Anubis Ransomware Hits 91 Victims: Citrix Bleed 2 Bypasses MFA Before Encryption

ARToken Phishing Platform Exposes Microsoft 365 Token Theft Toolkit

Avalon Malware Uses Legal Document Lure to Deliver CrownX Ransomware Capabilities

CrownX Ransomware Embedded Inside Avalon Framework Targets Recovery and Backup Systems

Did the Klue Incident Expose a Platform Problem or an Integration Problem?

Fake Ripple NFTs Hit XRP Wallets in Mass Phishing Campaign

First AI Ransomware Attack? Sysdig Details the Autonomous JADEPUFFER Threat

Hacker exploits Claude AI to score lifetime VIP music festival tickets

Hackers Abuse EdgeUpdate and GoogleUpdater to Deploy TimbreStealer Infostealer

Hackers Abuse Verified X Ads to Deliver Mac Malware Through ClickFix Attack

Hackers trick contractor to breach AdaptHealth and steal patient data

India investigates Tata Electronics data breach, revealing Apple iPhone 18 Pro images and supplier information

Indian News Channel Republic TV’s Arnab Goswami Show Faces Cyber Attack, Unwanted Content Appears

JadePuffer ransomware used AI agent to automate entire attack

Nigeria: Providus Bank Customers Count Losses Following Data Breach And Unauthorized Debits

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

Novo Nordisk Breach: $25 Million Ransom, 1.3TB Claimed

Personal data of 70,000 people in world's second-richest country exposed in IBM vendor data breach

Phantom Squatting: Hackers Turn AI Hallucinations Into a Free Phishing Buffet

U.S. Government Agency Paid $1 Million to Data Extortion Group Kairos

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case

West Midlands Police officer keeps job after gross misconduct data breach

When the Goal Is Destruction: What the Stryker Cyber Attack Means

3rd July

1 in 3 Australian organisations hit by ransomware, according to new report

Afghanistan: Hacker Group Claims Attack On Taliban Defence Ministry Website

Agentic AI Used to Conduct Ransomware Attack via Langflow

Agentic Ransomware on the prowl through LLMs

AI Agents Are Creating a New Enterprise Security Gap

AI is Already Powering Cyber-Attacks. Can it Power Cyber Defense?

Alibaba to Ban Claude Code at Work Over Alleged Backdoor Security Risks

Alibaba to ban Claude Code in workplaces over alleged security risks

Alleged Scattered Spider Hacker Extradited to US

An AI Agent Just Pulled Off a Full Ransomware Attack - and It Didn't Save the Decryption Key

An AI just carried out a cyber attack without any human oversight for the first time

Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

ARToken Phishing-as-a-Service (PhaaS) exposes EvilTokens' Microsoft 365 phishing toolkit

Belgian authorities arrest suspected leader of $572K phishing gang

Belgian police arrest suspected phishing gang leader tied to $572K theft

Belgian Police Arrest Teen in €500K Phishing and Crypto Laundering Scheme

Canada: Crime Stoppers data breach prompts warning from police

Canada: Waterloo Regional Police Service (WRPS) monitoring data breach involving Crime Stoppers tip platform

Citibank Singapore warns of e-mail phishing scams

“Claim Your Refund” EnergyAustralia phishing scam targets identity and payment credentials

Conwy County Council: Data breach leads to dismissal, warning, and resignation

Cyber experts issue alert after two ransomware groups team up on ‘unprecedented’ threat campaign

Data Breach Unveils Secrets of Unreleased iPhone 18 Pro

Diplomatic Tensions Erupt Over Coupang Data Breach Allegations

Don’t Click That ‘Sorry’ Email! 44K Systems Hit by Ransomware In Just 3 Days

EU-US Data Privacy Framework Under Threat After Supreme Court Ruling

European Parliament Member Investigating Spyware Was Hacked With Pegasus

Ex-EU Parliament lawmaker hacked with Pegasus

Fake Google, Cloudflare Verification Pages Fuel ClickFix Campaigns, Distribute StealC, Amatera, CastleLoader, New ResiLoader

Fake Interpol Investigation Emails Are Spreading Ransomware to Small Businesses Worldwide

FBI Seizes NetNut Domains as Google Disrupts 2 Million Device Proxy Network

FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors

First AI-Driven Cyber Attack Executed Without Human Assistance Raises Alarms

Florida Clinic Paying $10,000,000 To Data Breach Victims In Settlement

Google Chrome extension crackdown: new bans on data collection, AI jailbreaks, and betting

Google Disrupts NetNut, a 2-Million-Device Residential Proxy Network Tied to Popa Botnet

GSP Crop Science flags ransomware attack, critical operations unaffected

Hacker Used Claude AI to Score Free Tickets to Nearly Every US Music Show

Imposters Scams Caused $3.5 Billion in Losses in 2025

India: Government investigating alleged data breach at Tata Electronics related to iPhone

India: Government probes Tata Electronics data breach linked to Apple's iPhone 18 Pro

India: Government reacts to reports of iPhone 18 Pro leaks in Tata data breach

India: Ministry of Electronics and Information Technology Probes Reported Tata Electronics Data Breach Linked To Apple Supply Chain

India investigates Tata data breach linked to Apple iPhone 18 Pro leak

India investigating Tata data leak that exposed Apple iPhone secrets

India probes Tata Electronics data breach that exposed Apple iPhone 18 Pro photos, supplier details

Inside JADEPUFFER: The first ransomware operation driven by autonomous agents

JADEPUFFER: First End-to-End AI-Driven Ransomware Operation

Latvian State Forests hacker also attacked Olpha

Laundering The SIM: How A Rogue Retail Agent Supplied Hidden Channels For Multi-Lakh Card Siphons

Medtronic Data Breach Impacts 3.8 Million People

NetNut proxy network disrupted, 2 million infected devices cut off

New Avalon Malware Framework Packs CrownX Ransomware Capabilities

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App

Nigeria: Data Breach - Providus bank customers confirm unauthorised transactions on cards

Non-interactive SSH attacks dominate after login

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

Organizations struggle to prioritize known cyber risks

PamStealer macOS Infostealer Uses Rust Payload to Validate and Steal Passwords

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Pegasus Spyware Hacked MEP Serving on European Parliament PEGA Committee

Personal info of 70,000 people in Singapore exposed in data breach

Personal, property information of 70,000 people compromised in data breach involving Singapore Land Authority (SLA) vendor IBM

Qilin claims cyber attack on Pennant Hills Golf Club

Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation

Ransomware hit a third of Australian organisations last year, yet 97% still reckon their data's safe

Ransomware in retail: why 58% still pays

Russia Pivots Its Cyberthreats Back to the U.S. and the West

Scammers scramble to reserve the best WhatsApp usernames

Shun Hing Group data breach impacts over 920,000 customers

Singapore Land Authority data breach exposes 70,000 records after IBM testing environment compromised

Spyware found on phone of European Parliament member probing it

Teen Hacker Peter Stokes Extradited to US Over Scattered Spider’s $8 Million Crypto Scheme

Teenager Extradited to the US After Massive Eight Million Dollar Crypto Extortion Scheme

The FBI helped take down a SIM-swap hacker gang that laundered digital assets on a massive scale, and four arrests followed

The Limit Upgrade Bait: Jewar Police Nab Four In Noida Credit Card Phishing Syndicate

Thousands hacked by TeamPCP: attackers now being hunted by the FBI

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

US Homeland Security investigates breach of government information network

Warning issued as Bitcoin cyber attack is carried out fully by AI

Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP

West Midlands Police officer keeps job after gross misconduct data breach

Why Tata Electronics data breach is a big problem for Apple, India’s tech ambitions and your data

2nd July

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

4 ways to combat the endless stream of phishing attacks

950 Oracle E-Business Suite Instances Exposed as Critical Flaw Faces Exploitation

2025 major $2.5 Billion Jaguar Land Rover (JLR) cyber attack was conducted by Russian hackers

430,000 FortiGate Devices Exposed in FortiBleed Ransomware Link

A Microsoft Defender flaw is now being linked to ransomware attacks

Aflac Japan data breach affects 4.38 million customers

Agentic Ransomware JADEPUFFER Uses Base64 Python Payloads to Harvest Cloud and API Keys

AI Agent Executes End-to-End Ransomware Attack

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

AI Ransomware Abuses Chromium API on Windows and Android

Alleged Scattered Spider hacker arrested in Finland

Alleged Scattered Spider hacker extradited to the United States

Alleged Scattered Spider Hacker Extradited to U.S. for 100+ Network Intrusions

Alleged Scattered Spider Hacker Extradited to U.S. to Face Cybercrime Charges

Alleged Scattered Spider Hacker Extradited to US Over $8 Million Crypto Ransom

Alleged Scattered Spider hacker snared in Finland, extradited to US

Alleged Scattered Spider Member Arrested in Finland, Extradited to U.S.

Alleged Scattered Spider Member Extradited to US

ARToken Phishing Kit Uses Cloudflare Workers and SharePoint Lures to Target Microsoft 365 Users

Attackers use phantom domains generated by AI for phishing

Billion-Dollar Lender Suffers Data Breach, Warns ‘Unauthorized Threat Actor’ Launched Ransomware Attack

Browser-Only Ransomware Abuses Chrome File System Access API to Encrypt Android Photos

Browser-Only Ransomware Uses File System Access API to Encrypt Files Without Malware Installation

Busted! Alleged Scattered Spider hacker arrested, extradited to the United States

Cambridge University Hospitals (CUH) reported to Information Commissioner over potential medical data breach

Capitec tells specific customers to replace bank cards following Pick n Pay data breach

Catching ransomware on the wire before it locks the file server

CISA: Microsoft SharePoint RCE flaw now actively exploited

CISA Warns Actively Exploited Microsoft SharePoint RCE Flaw Requires Urgent Patch

Cisco finally confirms attackers exploiting Unified Communications Manager (Unified CM) flaw

Claude Desktop Hijacked for Remote Code Execution, DeepSeek Generates In-Browser Ransomware

Claude Helped a Hacker Find a Way To Issue Tickets to Almost Every US Music Festival

Cop this! Hackers observed posing as Interpol to deploy ransomware

Cybercriminals Pose as Interpol in Phishing Emails to Infect Victims With Ransomware

Cursor IDE Critical RCE Flaws Let Attackers Overwrite System Files via Prompt Injection

Data Breach Exposes Apple iPhone 18 Pro Information Months Before Launch

DeepSeek-Generated Malware Shows How AI Can Build Browser-Native Ransomware Workflows

Department of Justice (DOJ) Extradites Alleged Scattered Spider Hacker Linked To $100 Million In Crypto Ransom Attacks

Dutch spy agency slammed for almost unlawfully bad handling of citizens’ private data

Dutch university discloses year-long data breach in Microsoft Power BI application

ECBM LP Data Breach Exposes Info of 8k Individuals

EvilTokens-Linked ARToken Panel Exposes 80+ APIs for Microsoft 365 Token Theft

Finland extradites hacker to the US

FortiBleed: Credential Theft Linked to INC and Lynx Ransomware

FortiBleed Actors Collaborating With INC, Lynx Ransomware Gangs

FortiBleed Campaign Linked to INC and Lynx Ransomware Operations

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

FortiBleed campaign traced to INC and Lynx ransomware operations

FortiBleed Confirmed as Ransomware Pipeline: INC and Lynx Linked to 430,000 Firewalls

FortiBleed Credential Theft Campaign Tied to INC and Lynx Ransomware Attacks

FortiBleed Credential Theft Connected to INC and Lynx Ransomware

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

FortiBleed linked to ransomware groups INC and Lynx

FortiBleed Password Stealing Attack Linked to INC and Lynx Ransomware Operations

Foxconn Cyberattack: Nitrogen Steals 8TB, 11 Million Files

German spies could soon move from watching to hacking attackers

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

Google, FBI disrupt massive NetNut botnet linked to 2 million devices

Greater Rochester Independent Practice Association Settles MOVEit Data Breach Litigation

Hacker says Claude AI helped to get VIP tickets to America’s most wanted festivals for free

Hackers are using FIFA World Cup 2026 hype to infect football fans with Voidrift malware

Hackers Hide ChocoPoC Malware in Python Dependencies to Compromise Pentesters

Hackers Use Dropbox URLs and TryCloudflare Tunnels to Deliver AsyncRAT Malware

Hong Kong: Shun Hing Group faces data breach affecting over 920,000 customers, privacy watchdog investigates

How a Hacker Remained Undetected in the Latvian State Forests System for Almost Two Weeks: New Details of the Cyber Attack

India Orders WhatsApp to Freeze Username Feature Rollout Over Fraud Concerns

‘Interpol’ emails spread custom ransomware with decryption key left inside

JADEPUFFER: AI agent executed ransomware via Langflow RCE

JADEPUFFER Agentic Ransomware Uses LLM to Automate Database Extortion

JADEPUFFER Uses MinIO Default Credentials and Nacos Takeover to Breach Production Database

JADEPUFFER, the First Documented Agentic Ransomware Operation

Japan’s Aflac, KDDI, Sapporo, Nidec: Four Breaches, One Common Entry Point

JetBrains Patches Authentication Bypass and Code Execution Attacks in YouTrack and Kotlin

Latvia: Hacker remained undetected in “Latvijas valsts meži” system for several days

LSHIY Password Spray Campaign Targets Microsoft 365 Accounts With 81 Million Login Attempts

Malaysia: Flexi Parking app is now up after “cyber attack”

Medtronic: Notifications for recent data breach have begun

Medtronic Confirms Data Breach - Hackers Gained Access to Corporate IT Systems

Medtronic data breach impacted close to 300,000 healthcare customers

Medtronic notifies customers impacted by ShinyHunters data breach

Medtronic Notifies Customers of Data Breach Claimed by ShinyHunters

Medtronic Notifies Patients of ShinyHunters Data Breach

Microsoft 365 Phishing Panel Uses OAuth Device Code Flow to Capture Tokens and Persist Access

NATO Contractor Indra Group Hit by Ransomware, Hackers Threaten Data Leak in 9 Days

New ChocoPoC RAT Targets Vulnerability Researchers via Fake Proof-of-Concept (PoC) Exploit Repos

New Chrome Update Fixes 382 Security Bugs Across Desktop, Mobile

Ousaban Banking Trojan Targets Spain and Portugal With Geofenced Phishing Campaign

Ousaban Malware Uses Phishing PDFs and VBS Downloader to Target Iberian Banking Users

Over 80% of WordPress sites are out of date, and hackers are noticing

Pakistani Hacker Group Claims Cyberattack on India’s Sun TV Network

Phishing Campaign Uses Fake Invoice PDF to Drop AsyncRAT, VenomRAT, and XWorm

Politician who investigated spyware abuses had his phone hacked with Pegasus spyware

Ransomware attack at Abans Financial Services' overseas entities

Ransomware group leaks iPhone 18 Pro data after breaching Tata Electronics' systems

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Ransomware Thugs Masquerade as Interpol to Entice Small Businesses

Ransomware Trends in 2026: What Directors and Officers Need to Know

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

Retailers see sharp uptick in ransomware attacks

Sainsbury’s installs more facial recognition tech in stores: Should shoppers be worried?

Scattered Spider Hacker Arrested in Finland and Extradited to U.S. Over Cyber Intrusion Charges

Scattered Spider suspect extradited over $8 million ransom scheme

Scattered Spider teen hacker “Bouquet” extradited to US to face charges

Schools now fair game for cyber criminals as inside ‘moral code’ dissolves

ScreenConnect Malware Campaign Uses SEO Poisoning to Target Freeware Downloads

Security Lessons from the Nidec Ransomware Attack

Serviceaide Pays $1.8 Million to Settle Data Breach Litigation

Several ISPs and Millions of Customers Compromised in KDDI’s Email System Data Breach

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

Shun Hing Group data breach affects 920,000 customers, 1.05 million files encrypted in cyber attack

St. Paul data breach: 12,484 residents, employees notified after July 2025 cyberattack

Suspected Scattered Spider Member Peter Stokes Extradited to the US

Tata Electronics Data Breach Reportedly Exposes 630.4GB of Confidential Apple-Related Internal Data on Dark Web

Texas industrial giant under pressure, with hackers claiming to have stolen entire corporate database

The endpoint recovery gap many teams discover during an incident

The Gentlemen Ransomware targets prominent European NATO Contractor

Threat Actor Uses Steganographic Webshell and Mimikatz After Disabling Endpoint Defenses

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

U.S. House Panel Report Sparks South Korean Regret Over Coupang Data Breach Probe

UK: New national cyber security campaign warns businesses of the increased risk from ransomware

US government says it got hacked - again

ValleyRAT Campaign Uses Fake Installers and Japanese Malicious Emails to Infect Windows Users

Vect and TeamPCP partner for ransomware campaigns

Waited So Long - Two Tickets to Data Breach Litigation

What the AI patch gap means for enterprise security

WhatsApp Username Reservations Go Live – What Are the Security Concerns for 2 Billion Users

When AI Invents the Attack: Browser-Native Ransomware

Yellow Corporation Data Breach Impacts 13k: PHI and PII Exposed

Yorozu Automotive Data Breach Affects 20,627 Individuals: PHI and PII Exposed

1st July

19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges

219,000 documents exposed: US retirement firm exposes deeply personal financial records

A CISO’s Guide to Robocall Mitigation: Applying MITRE ATT&CK to Voice-Based Threats

A cyber attack on Tata Electronics exposed confidential information about the iPhone 18 Pro and Pro Max, including drop tests and technical specifications

Adobe ColdFusion Critical Flaws Enable Arbitrary Code Execution and File Read Attacks

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic

Adobe patches seven max severity ColdFusion, Campaign flaws

Aflac Data Breach: Over 4 Million Customers in Japan May Be at Risk

Aflac discloses data breach at Japan subsidiary after unauthorized access to customer information

AI Cyber Attacks Emerge as Biggest Threat to Indian Banking

AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android

AI-generated code risks reach security, legal, and compliance teams

Amazon fined $2.25 Million for withholding evidence from fraud victims

Android RAT Glitch SPY Adds Crypto Clipper and Remote Browser for Account Takeover

Anthropic buffa Library Hit by Zero-Day DoS Flaw in Rust Protobuf Decoder

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls

Anthropic Says U.S. Commerce Lifts Export Controls on Claude Fable 5 and Mythos 5

Anthropic's Fable 5 and Mythos 5 Are Back with New Security Guardrails

Anubis ransomware exploits CitrixBleed 2 and RMM tools

Apache Tomcat Flaws Expose Servers to Authentication Bypass and Authorization Risks

Apple “Hide My Email” leaks email addresses, researcher claims

Apple’s Hide My Email feature has a bug that’s been exposing real email addresses, researcher claims

Around Half of All UK Businesses Have Experienced a Cyber Attack

Arrest of Iranian Hacker Spotlights Iran’s Movement into Economic Espionage and IP Theft

ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365

Attackers Register AI-Hallucinated Domains to Deliver Phishing Kits and Malware

Attackers Using Fake Interpol Warning in Ransomware Attacks on SMBs

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81 Million+ Attempts

BioShocking Technique Can Manipulate AI Browsers into Exposing Credentials

Brazilian Banking Trojan Ousaban Targets Spain and Portugal

Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique

BumbleBee and AdaptixC2 Deliver Akira Ransomware via Bing SEO

Cargo thieves target big tech in $1.3 Million data center heist

Citrix NetScaler ADC and Gateway Flaws Expose Appliances to DoS and File Read Attacks

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Claude Sonnet 5 includes safeguards against dangerous cyber use

Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Custom Go Backdoor Lets The Gentlemen Operators Execute Commands and Pivot With SOCKS Proxy

Department of Homeland Security (DHS) confirms hackers breached HSIN info-sharing platform

Disney+ “Your membership is on hold” phishing email leads to fake login and payment pages

EMA Engineering & Consulting Data Breach Exposes SSNs

‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer - and nearly half of firms don’t realize until data is stolen

EvilTokens Campaign Reveals Device Code Phishing Ticks Up 1,380%, Powered by AI

EvilTokens device-code phishing kit totally more evil than we all thought

Fake “Google Notes” Browser Extension Caught Swapping Crypto Wallet Addresses

Fake Interpol Investigation Emails Push Ransomware at Small Businesses Globally

Fake Interpol investigation emails target small businesses with ransomware

Fileless Malware Abuses Google Blogspot to Deploy Infostealer in Memory

Fluentd Patches Critical RCE, SSRF, DoS, and Sensitive Data Exposure Flaws

Focusing on Vulnerability Prioritization Is Missing the AI-Era Point

FortiBleed credential-theft campaign linked to Lynx ransomware

Google Chrome Update Fixes 382 Security Flaws, Including Critical UAF Vulnerabilities

Hacker Uses Claude to Score Free Tickets to Nearly Every Major Music Festival In the US

Hackers spray passwords at Azure accounts using a legacy login method, and the doors are still open

Hackers target Microsoft 365 accounts with 81 million login attempts

Hackers threaten to leak data from NATO contractor Indra, as company investigates

Hackers Use Vulnerable Windows Drivers to Kill EDR in Ransomware Attacks

Hong Kong: Fake 'support local' food shops lure buyers into phishing scam

How Ransomware syndicates are evolving into Corporate Businesses

Huntress CEO defends threat researcher at the heart of firm's “insider threat” allegations

Insomnia ransomware group announces major data theft from Tennessee pathology lab

Insurance Giant Aflac Discloses Data Breach Impacting Millions

iPhone 18 Pro leaks in data breach ahead of expected launch

Japanese insurer, brewer, manufacturer and telecom disclose cyber breaches

Kubota says hackers had month-long access to network systems

LLM-Driven Analysis Accelerates EDR Evasion and Endpoint Security Reverse Engineering

Major win for Anthropic as US lifts Mythos, Fable export controls

Medtronic notifies impacted patients of data breach tied to April hack

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

Microsoft Accelerates Quantum-Safe Push with New Timeline

Microsoft Teams Adds Smarter Bot Protection to Block Unauthorized Meeting Bots

Microsoft Uncovers Widespread Hotel Phishing Campaign in Japan

Microsoft wants to stop unwanted bots from entering Teams meetings

Model Context Protocol (MCP) Tool Poisoning Hijacks AI Agents to Steal Data

Montana Empire Phishing Kit Abuses AI-Hallucinated Domain to Steal Credentials

Most Defense Industrial Base (DIB) Firms Fear AI-Powered Cyber Attack

Nearly all Kensington and Chelsea Council services restored following cyber attack

Nearly Half of Organizations Lack "Full" Visibility Into Employee AI Usage

New ChocoPoC malware targets researchers via trojanized Proof-of-Concept (PoC) exploits

New phishing-as-a-service platform ARToken offers advanced BEC capabilities

North Los Angeles County Regional Center (NLACRC) Data Breach Compromises Medical Info and More: 298k Impacted

O2 issues warning over new ‘inactive SIM’ phishing scam

O2 Warns Customers About New SIM Expiry Phishing Scam Targeting MyO2 Accounts

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures

Over 1 million customers affected in AssuranceAmerica MGA data breach

Over 900 Oracle E-Business instances exposed to ongoing attacks

Patient sues Huntsville Hospital over data breach

"Phantom squatting” uses AI hallucinated domains for cyber attacks

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Phishing in the Balkans: Fake Traffic Fines, Real Losses

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

Proofpoint warns AI is widening email security gaps at India's largest companies

Ransomware is exploiting factory VPNs: Manufacturers should rethink OT remote access governance

Ransomware Operators Abuse Signed Windows Drivers to Disable Security Software

Ransomware-Proof Backup: 7 Strategies for Enterprise IT Teams

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

Russian hackers use phishing to get access to message backups, Dutch spy agencies say

RustDuck Botnet Exploits Telnet, SSH, Android ADB, TP-Link, ZTE, and Jenkins Flaws

Security Breach at Tata Electronics Affects Apple, Tesla, and Other Technology Giants

Sensitive documents on unreleased iPhone 18 leaked after data breach at Tata Electronics

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Silent Swap Crypto Clipper Extension Hijacks Wallet Addresses in Chromium Browsers

Singapore reports decline in phishing cases but warns figures may understate threat

Somebody told DeepSeek to build in-browser ransomware and it gleefully complied

Supreme Court just made it harder for authorities to get location data from Google and Apple

Taiwan digital ministry to inspect Pi Mobile after alleged data breach

Teen suspect in Scattered Spider hacks is extradited to US

The ARToken phishing panel targets Microsoft 365 accounts

The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative

The New Hacktivists: How Global Conflict Turned a Nuisance Into a Security Threat

This new Android security setting spots bad networks and fake cell towers - enable it ASAP

This phishing kit looks more like BEC-as-a-service

Transport for London (TfL) Cyber Attack: Two Men Convicted for 2024 Hack That Crippled London Transport

Trump’s grip on the Federal Trade Commission (FTC) puts EU-US data transfer at risk

UK: Stone and Staffordshire organisations urged to protect themselves from ransomware

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

US lifts export controls on Anthropic’s frontier cybersecurity AI models

Username feature on WhatsApp may increase online fraud, phishing

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

Wales: Conwy council data breach sees social services worker sacked

WhatsApp usernames are already raising impersonation red flags

Why every cyber security team needs a hacker mindset

30th June

3 in 4 consumers would ditch a company if it suffered a major cyber attack

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

A ransomware leak exposed Apple's iPhone 18 Pro supply chain secrets

A simple Bing search led to an Akira ransomware attack

Aflac Japan data breach affects 4.38 million policyholders

Aflac Japan Data Breach Exposes Sensitive Customer Information

Aflac Japan Data Breach Impacts 4.38 Million

Aflac Japan reports data breach affecting over 4 million customers

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin

Alberta, Centurion Project sued over alleged data breach that affected millions of voters

Another Claude Code attack allows full takeover of developers’ systems

Anthropic to restore Claude Fable access on Wednesday

Apple iPhone 18 Pro Design and Component Data Leaked in Tata Electronics Data Breach

Apple iPhone 18 Pro images and details leak in Tata Electronics data breach

Apple iPhone 18 Pro Leak Exposes Supplier Network, Components and Prototype Images After Tata Data Breach

Apple iPhone 18 Pro Supplier List Exposed in Tata Data Leak

Apple iPhone 18 Pro supplier list, component details leaked in Tata data breach

Apple iPhone 18 Pro supplier list, parts leaked in Tata Electronics ransomware attack

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs

Apple rushed to squash 29 bugs because AI is supercharging hackers - update ASAP

Apple Says It's 'Concerned' as Massive Tata Electronics Data Breach Exposes Secret iPhone 18 Pro Details

Apple Security Update Patches 30+ Vulnerabilities in iOS 26.5.2

Apple Speeds iPhone Security Patches to Counter AI-Driven Hacking Threats

Apple’s AirDrop and Android’s Quick Share vulnerable: nearby hackers initiate connection, crash devices, or worse

Apple's iPhone 18 Pro Files Leaked Online In Ransomware Attack

Apple's iPhone 18 Pro supplier data leaked after Tata Electronics data breach

Apple's Secret iPhone 18 Pro Files 'Stolen' in Massive Tata Data Breach as Dark Web Leak Sparks Global Alarm

Apple's Upcoming iPhone 18 Pro Details Leaked Online After Cyber Attack

AssuranceAmerica Suffers Third-Party Data Breach, Customer Data Exposed

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

Barracuda warns of Microsoft phishing and malware rise

BioShocking Attack Lets Hackers Bypass AI Browser Guardrails and Steal Credentials

Blackfield ransomware asks Nidec Corporation for $2 million ransom

Blackfield seeks $2 million from Nidec after ransomware attack

BlueHammer Vulnerability Exploited in Ransomware Attacks

BumbleBee and AdaptixC2 Deliver Akira Ransomware Through Bing SEO Poisoning

Canada: Lawsuit filed in Alberta over data breach that affected almost three million voters

Canada: Proposed class-action lawsuit launched in Alberta over alleged elector data breach

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

CISA Says Microsoft Defender BlueHammer Flaw Is Now Used in Ransomware Attacks

Class action filed in alleged Alberta data breach that exposed millions of voters’ private information

ClickFix Now Cybercriminals' Favorite Malware Delivery Technique

Critical Cacti Vulnerabilities Expose Servers to Pre-Auth SQL Injection Attacks

Critical SimpleHelp Vulnerability Exploited For Malware Delivery

Cross Resource Group Data Breach Affects Current and Former Employees

Cybersecurity & Data Breach Statistics 2026: The Year Cybercrime Stopped Breaking In

Daktronics Controller Flaws Expose Highway Signs to Remote Hacking

Data Breach Scandal: Ernst & Young (EY) Employees Access Top Politician's Banking Details

Doxim Data Breach Settlement Underscores Third-Party Data Security Risk

Dutch regulator warns users are “pouring their hearts into chatbots” over data risks

Every search you make, it’s watching: this malicious Chrome extension captures AI query keystrokes

Exeter Finance Data Breach Compromises Financial Account Information

Fake Perplexity AI Chromium Extension Hijacks Browser Search via Typosquatted Domain

Fake Perplexity extension on Chrome Web Store tracked searches

FBI and Southampton County, Virginia, warns of phishing scam

Fly Phishing: How Business Aviation Can Fight AI-Supercharged Cybertheft

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

Hacked! Automotive giant Nissan discloses multi-country data breach

Hackers claim breach of 1-800-Dentist, threaten to leak health data of millions

Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing

Hackers say they have GameStop customers' personal data

Hackers Steal Data of 4.38 Million Aflac Japan Customers

Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware

Half the defense base still builds security around compliance

Home Office security warning for sponsors: phishing scams on the rise – is your SMS account secure?

How Hackers Just Dumped Apple’s Tightly Guarded iPhone 18 Pro Secrets on the Dark Web

How ransomware syndicates weaponize corporate-style organization

Huntress CEO says threat hunter used 'poor judgment' in alerting ransomware criminal about law enforcement probe

India leads Asia-Pacific Ransomware Target List with 165% surge in attacks

India tops Asia-Pacific (APAC) ransomware target list

Insurance giant Aflac discloses data breach after subsidiary hack

iPhone 18 Pro photos 'leaked on dark web' after data breach involving 20,000 files

iPhone 18 Pro Supplier Details, Photos Leaked After Tata Electronics Data Breach

iPhone 18 Pro supplier list and photos leaked following Tata Electronics ransomware breach

iPhone Security Fixes May Arrive Sooner as AI Speeds Up Threats

Japan Hotel Industry Targeted With TONResolver RAT and Guest Complaint Phishing Emails

Kaspersky Warns of The Gentlemen Ransomware Group Expanding Operations with New Malware

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Large U.S. dental referral firm hit with cyberstrike

Malicious PyPI packages give hackers control of Telegram bot servers

Meta Adds WhatsApp Usernames: Here’s What You Need to Know

Microsoft accelerates quantum-safe roadmap as risks grow

Microsoft adds smarter bot protection to Teams meetings

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

Midland Care Connection Data Breach Exposes Social Security Numbers

Montenegro Detains Islamic Revolutionary Guard Corps (IRGC)-Linked Hacker Behind $3.4 Billion US University Breach

New BioShocking attack manipulates AI browser into data theft

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

New EvilTokens Attack Exposes Browser Visibility Gap in Enterprise SOCs

Nissan Confirms Data Breach Following Oracle PeopleSoft 0-Day Attacks

Nissan Confirms Employee Data Breach After Oracle PeopleSoft Zero-Day Attack

Nissan Confirms Employee Data Breach Following Oracle PeopleSoft Exploit

Nissan data breach: ShinyHunters-linked attack may expose staff records

Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day

Nissan Employee Data Breached in Oracle PeopleSoft Hack

Nissan employee data exposed in Oracle PeopleSoft zero-day attacks

Nissan the latest victim in Oracle’s PeopleSoft attack: sensitive data stolen

Nissan Traces Data Breach to PeopleSoft Zero-Day Exploit

Optalis Management Solutions Data Breach Exposes Social Security Numbers

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)

Over 300 UK Firms Hit by Ransomware in a Year

Pakistan: Massive Ransomware Attack Hits Capital Development Authority (CDA) Billing System

Park Dental Research Data Breach Exposes Social Security Numbers

Peruzzi Buick GMC Data Breach Exposes SSNs and Driver's Licenses

Phishing-resistant authentication can prevent tax-time fraud

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

Ransomware gangs exploit Microsoft Defender's BlueHammer vulnerability

Ransomware Group Claims Alleged Attack on 1-800-Dentist

Ransomware Is About Leverage: Return on Risk Takes It Away

Recently acquired radiology group reports data breach

River Bank & Trust Data Breach Potentially Exposes PII

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

Scotland: Cops prepare for Commonwealth Games cyber attack as fears mount over ticket fraud

Security Organizations Reveal Threat Management Fails to Match Visibility

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

SonicWall: NHS hospitals hit by 10x cyber attack surge

South Korea: 22 Arrested for Laundering 41.5 Billion Won in Fraud, Voice Phishing Proceeds

South Korea: Suspicious Accounts Used in New Phishing Scams Like No-Show Fraud to Be Immediately Blocked...Up to 60 Additional Business Days of Suspension

South Korea expands account freezes beyond voice phishing to cover new fraud schemes

SystemBC Malware Turns Windows Machines Into SOCKS5 Proxies for Ransomware Attacks

Tata data breach exposes iPhone 18 Pro supplier details, prototype images

Tata Electronics Data Breach Leaks Apple iPhone 18 Pro Secrets

Texas Hearing Institute Data Breach: PHI and PII Exposed

Texas Parks Data Breach Exposes Over 3 Million Hunters and Anglers

‘The Gentlemen’ Group Expands Global Attacks

The Gentlemen RaaS Uses New Ransomware Variant, Backdoor, Encryption

The Gentlemen Ransomware: 483 Victims, 90% Cut

The National Association of Insurance Commissioners (NAIC) Data Breach: A Turning Point for Data Collection and Privacy in the Insurance Industry

The Readiness Gap: What Wimbledon Reveals About Modern Cyber Defense

Thousands of Washington state residents affected in data breach by former Department of Social and Health Services (DSHS) employee

Trenitalia cyber attack exposes sensitive customer data

Trump drops restrictions on Anthropic’s Mythos and Fable models

UK: Barnham family left horrified after Home Office data breach

UK: Businesses warned as over 300 ransomware attacks reported last year

UK Healthcare Sector Records Tenfold Increase in Cyber-Attacks

Ukraine Makes History With First $8.3 Million Seized Crypto Transfer to Asset Recovery and Management Agency (ARMA)

US offers $10 Million reward over Signal attacks on NATO officials

Vulnerability reports are arriving faster than GitHub can review them

Washington State Department of Social and Health Services (DSHS) investigating data breach involving former employee

What the Numbers Say About FIFA 2026 Cyber Risk

XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t

29th June

2.7 Million Sysco Emails Leaked Following ShinyHunters Data Breach

212 New Venezuela Earthquake Domains Prompt Donation Scam Warnings

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

A Data Breach Rarely Ends with the Breach Itself - Leaked Data Is Used in Travel and Ticket Scams During the Summer

Agentic AI Has an Identity Problem and Attackers Know It

AI Will Test Identity Infrastructure, Organizations Need More Prep

AI-Driven Identity Attacks Are Surging

Apple supplier Tata tightens internal controls post-data breach

ATM Jackpotting Gang Members Sentenced for Ploutus Malware Attacks

Australia: NSW Rural Fire Service admits security incident

Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection

Bradford Health Services settles class action lawsuit over 2023 data breach

Cambridge University Hospitals (CUH) Trust refers itself to regulator over data breach

Can generative AI be an ally in rooting out ransomware threats?

Canadian hacker sentenced for Texas Republican Party website defacement

Companies keep bolting AI onto their products, and the security bill is coming due

Copying the wrong person on an email could be considered a data breach in South Africa

Couple jailed over ‘worst ever’ Transport for London (TfL) data breach and £650k fraud

Critical SimpleHelp flaw exploited to deploy new stealer malware

Cyber insurance is delivering meaningful financial protection, with a majority of data breach and first-party losses covered according to Willis’ latest report

Cybersecurity for Food Companies: How to Prepare for Ransomware, AI Threats, and Supply Chain Disruptions

Danish official warns data stored on US cloud is shared with American spies

Dark Web Breach Exposes Secret Apple Supplier Data

DCloud Uni-App Scam Network Powers RainbowEx-Style Crypto Fraud and WhatsApp Phishing

DCloud Uni-App Templates Help Fraudsters Scale Crypto, Mobility, and Messaging Phishing Scams

Dell Wyse Management Suite Flaws Let Remote Attackers Execute Code

DentaQuest data breach class action filed over ShinyHunters cyberattack

Don’t pay the ransom: Warning to organisations to protect themselves from ransomware attacks as more than 320 businesses affected last year

European Data Protection Board (EDPB) Adopts Common Data Breach Notification Template

EvilTokens Phishing Breaches Finance Firms Using “Ghost” Code Across U.S. and European Businesses

ExtraHop report finds nearly half of ransomware victims suffer data theft before detection

FBI Sounds Alarm Over Russian Intelligence Signal Phishing

FBI warns of Russian Intelligence phishing campaign abusing Signal support services to target VIPs and high-value government and military targets - this is how to secure your account

FBI, CISA Issue Alert on Russian Phishing Campaign Targeting Messaging App Users

FoxTrot Data Breach Compromises Social Security Numbers

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

Germany discloses data over “silent SMS” use for surveillance

Ghostwriter Hackers Use Real-Time WebSocket Relay to Bypass SMS and OTP MFA

Ghostwriter Phishing Infrastructure Targets Gmail and Ukrainian Email Portal Users

GIFTEDCROOK Payload Targets Chrome, Firefox, KeePass, OpenVPN, and Sensitive Documents

Global Cybersecurity Firms Warn of Rising AI-Powered Phishing Attacks

Government Website in India Taken Offline After Defacement Attack

Hackers claim 110 Million Notion records exposed, but the company’s AI assistant is not concerned

Hackers claiming leak of 310 million Temu accounts: here's what we know

Hackers now exploit critical Oracle E-Business flaw in attacks

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

In major privacy win, Supreme Court rules geofence warrants are protected by privacy rights

India: Pune Property Tax Data Breach Sparks Alarm

India’s Meerut Development Authority Website Defaced With Pro-Pakistan Messages

Indian auto giant Bajaj targeted in ransomware attack

iPhone 18 Pro ‘drop test’ images, parts list included in ransomware leak

iPhone 18 Pro Supplier List, Parts, and Photos Leaked in Tata Ransomware Attack

Iran cyberattacks on Israel surged in 2026, Israeli cyber chief says

Japan Hit By Major Data Breach: Up to 14.22 Million Email Login Credentials Potentially Exposed

Japanese AI police chief takes on $2 billion scam epidemic

Japanese Telecom Giant Says Breach May Expose 14.2 Million Email Accounts

JSP webshells being dropped on unpatched PTC Windchill instances

Justices rule that cellphone location histories are protected by the Fourth Amendment

KDDI Breach Exposes Up to 14.2 Million Email Logins at Six ISPs

KDDI Data Breach Exposes 14 Million Emails in Japan

KDDI Data Breach Exposes 14.2 Million Logins: Shared Infrastructure Flaw Hits Six ISPs

KDDI Data Breach May Expose 14.2 Million Email Accounts

KDDI discloses data breach affecting up to 14.2 million customers

LAPSUS$ targeted Myanmar's AYA Bank, stole 120GB of banking data

London Hydro offers credit monitoring after data breach

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

MCBS Data Breach Compromises PII and PHI Data

Microsoft 365 Apps Security Update Fixes High-Severity Excel RCE Vulnerability

Microsoft extends Windows Server 2022 hotpatching until October 2027

Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts

Microsoft Removes Over 100 StegoAd Edge Extensions Hiding Malware via Steganography

Microsoft reveals phishing campaign targeting hotels in Europe and Asia

Millenium RAT Malware-as-a-Service (MaaS) Uses Telegram Bot API to Control Infected Windows Machines

Most teams accept higher risk for faster AI database work

Mozilla warns of indirect prompt injection risk in AI coding agents

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

National Association of Insurance Commissioners (NAIC) says public data stolen in ShinyHunters' PeopleSoft breach

Nissan discloses employee data breach linked to Oracle zero-day attacks

North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis

Northern Technologies International Corporation (NTIC) Data Breach: Social Security Numbers Exposed

Nova ransomware group takes responsibility for NSW Rural Fire Service (RFS) hack

OpenAI Reveals GPT-5.6 Sol Cybersecurity Model, Restricts Early Access

Operation Endgame Disrupts SocGholish, StealC Malware Networks

Over 14 million login credentials leaked from six ISPs in major data breach - here’s what we know

Phishing and ransomware - 10 ways to stop phishing-based ransomware attacks

Photo-themed phishing campaign targets European and Asian hotels with Node.js implant

Polymarket Users Lose $3.1 Million in Phishing Attack as 1,891 ETH Moves to Fresh Wallets

Public Proof-of-Concept (PoC) Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

Ransom should not be paid say Law Enforcement Agencies

Ransomware groups are coming for law firms

Ransomware hits European suppliers as attacks surge 55%

Rokarolla Uses Fallback C2 Domains to Maintain Control Over Infected Android Devices

Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover

Russian spies are targeting Signal accounts linked to Ukraine with new phishing tactic

Russian state hackers stealing new Signal accounts with old backup keys, FBI warns

Sender Policy Framework (SPF) checker guide: How to protect your domain from phishing attacks

South Korea: Golfzon Data Breach Victims Launch Class-Action Lawsuit

Tata breach exposes Apple iPhone 18 Pro parts, supplier lists, and images, sources say

Tata Ransomware Breach Exposes iPhone 18 Pro Supplier Data and Device Photos

Texas data breach hits 3 Million license customers

The Hacker’s 2026 Playbook from the Dark Web

The Machine Identity Era Has Already Started

Tower Administrative Services discloses data breach exposing SSNs and financial information

Trump White House Dips Toes Into AI Cybersecurity Regulation by Executive Order

Taiwan digital ministry admits failures over cyber institute data breach

Telegram-Based Millenium RAT Campaign Infects 60,000 Devices

The Gentlemen are knocking: сustom backdoors and evolving tactics

U.S. offers $10 million for hackers targeting WhatsApp, Signal users

U.S. Targets Russian Cyber Spies With $10 Million Bounty Over Messaging App Attacks

UAE Cybersecurity Council Calls for Stronger Digital Footprint Protection

UK businesses fear stigma of ransomware

UK data watchdog fines consultancy firm £300K for flooding people with millions of illegal texts

Ukraine to use seized crypto from cybercrime group to buy war bonds

Ukraine transfers $8.3 million in seized hacker crypto to state wallet, plans military bond purchase

UNC1151 Ghostwriter Hackers Target Belarusian Politician in Gmail Phishing Campaign

UNC5792: $10 million reward for information on Russian hackers

Update Chrome Now: Google Fixes 18 Security Flaws, Including Critical Bugs

US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw

US posts $10 million reward over Russian cyber campaign targeting Signal, WhatsApp

Wabi Sabi Behavioral Health Center Data Breach Exposes SSNs

Wales: Publication of pictures of medical files on social media prompts data breach inquiry

Website owners report surge in malicious bots impersonating Googlebot, sparking call to check IPs

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private

WhatsApp rolls out usernames to help users hide their phone number

Why Insider Threats Deserve a Spot at the Top of Your Risk List

Women's Center for Radiology Data Breach Compromises Personal and Health Information

Women's Wellness of Delaware Data Breach Impacts Aesthetic and Clinical Service Patients