Editor's Message

Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and PRiSM celebrated it's third anniversary. Both projects have made a huge impact on my life and I'd like to thank each and everyone of you who have supported me, with special thanks to those individuals and communities who have helped me build up my knowledge on cybercrime and ransomware over the years. Thanks again for all your continued support. Stay safe. :)


“Data Breaches Digest and its PRiSM portal provide Dentons Global Security Team with valuable insights into the ransomware landscape, from the latest incidents to trends over time, as well as the ability to customize visual analytics. Timely reports and tracking by Data Breaches Digest help inform cyber intelligence for the world’s largest law firm and thus our cybersecurity posture across more than 80 countries worldwide.”
Dentons Senior Analyst, Washington D.C.



Thursday, 30 July 2026

Ransomware Operator Claims - Week 30 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 20th July and 26th July 2026, kindly assisted by our partners.

DBD discovered and researched 224 Ransomware Victims over 50 Countries and Islands claimed by 43 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.


Monday, 27 July 2026

Data Breaches Digest - Week 31 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 27th July and 2nd August 2026.


30th July

200 new Common Vulnerabilities and Exposures (CVEs) a day and no realistic way to patch them all

A Two-Minute Microsoft Teams Call Could End With Your Network Encrypted With Ransomware

'A warning shot': Microsoft AI chief sounds alarm over OpenAI's rogue hacking agent - here's how the cyber attack unfolded

Afghan Ministry of Defence (MoD) data breach left people who had worked with UK troops in danger for years

AI and Automation Fall Short of Sysadmin Expectations

AI Applications Contain Security Vulnerabilities, According to Report

AI-powered South African Revenue Service (SARS) phishing scams surge during 2026 tax filing season

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon Traces Node Package Manager (NPM) Supply-Chain Hacks To North Korean Hacker Group

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks

Australia: Court Services Victoria confirms data breach at Bendigo Law Courts

Australia: New South Wales nurse charged over alleged data breach

Australia Post customs clearance scam targets Australians

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

Beware: attackers now using real Microsoft sign-in screen for phishing

Chick-fil-A admits data breach exposed customers in 10 states

Cisco Firewall Management Center (FMC) static credentials exploited by attackers (CVE-2026-20316)

Cisco Firewall Management Center (FMC) Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

Coordinated cyberattack hits more than 30 Minnesota water utilities

Credit Services Firm Agreeing to $17,500,000 Payout in Data Breach Settlement

Critical wp2shell Vulnerability Hits WordPress Core, Patch Released

Cyber extortionists steal data from UK Department for Education

Cyber Incidents in South Korea Surge 20% in First Half as DDoS and Ransomware Run Rampant

Data breach claims: Defence Research and Development Organisation (DRDO) says threat actors repackaged old data as confidential

Data breaches cost an average of $4.99 million over the past year, AI attacks ran higher

Dealing with AI-Generated Extortion

Department for Education (DfE) Cyber Attack: Hackers Breach UK Department for Education and Police Legal Database Exposing Over 740,000 Records

Department for Education Data Breach Explained: What To Do if Your Personal Information Was Compromised

Don’t Ignore the Most Important System You Manage

Exposed credentials are giving attackers a head start many organizations don’t see

Fake N26 Support Calls Deploy Copybara Android RAT to Control Banking Apps

Federal Communications Commission (FCC) Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

Federal Trade Commission (FTC) sues Hims & Hers for allegedly sharing patients’ medical data with advertisers Meta and Snap

First-half cyber intrusion reports up 20 percent in South Korea as DDoS and ransomware surge

GenieLocker Ransomware Targets Windows, Linux, and ESXi Systems, Leaves No Ransom Note

GitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them

GitLab Patches 13 Security Flaws Enabling Data Exposure, CI/CD Tampering and DoS Attacks

Google Releases Patches for 370 Vulnerabilities in Chrome 151

Hacker of Hundreds of School Sites to Campus for Judol Arrested by East Java Police

Hackers claim data breach that could expose millions of Spanish pensioners

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

Hackers Pose as IT Helpdesk on Microsoft Teams to Deploy Chaos Ransomware

Inquiry finds Ministry of Defence (MoD) Afghan data breach was foreseeable failure

Inside the Cybercrime Platform That Turns Helpdesk Calls Into Enterprise Account Takeovers

Key AI-enabled cyber attack trends to watch out for

Korea Telecom (KT) Faces $37.4 Million Fine for Major Data Breach

Korea Telecom (KT) Faces 54 Billion Won Penalty for Data Breach and Unauthorized Payments

Korea Telecom (KT) Fined 54 Billion Won Over Data Breach via Illegal Base Stations

Korea Telecom (KT) gets 53.9 billion won fine for data leak

Korea Telecom (KT) hit with W54 billion penalty over data breach

Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)

Lazarus expands Korea cyberattacks via phishing and watering hole hacks

LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

LogoKit Evolves from Phishing Tool to Real-Time Cloud Deception Platform

Logokit phishing kit builds real-time fake login pages

Majority of Organizations Unsure if They Could Detect AI Attack

Massive Data Breach Fine Hits South Korea's KT Corp

Medical Computer Business Services (MCBS) Confirms Data Breach Affecting 1.2 Million Individuals Following PEAR Extortion Claims

Medical Computer Business Services (MCBS) data breach exposes personal information of 1.2 million individuals

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Microsoft Teams Vishing Campaign Deploys Chaos Ransomware Through Fake IT Support Calls

Ministry of Defence (MoD) data breach was ‘foreseeable’ failure that left Afghans in danger

National Cyber Security Centre (NCSC) Calls on Vendors to Embed ‘Forensic Observability’ in Network Devices

Nine Years, Nearly 100 Fake Websites: Inside a Long-Running Scheme to Clone Russian Companies

Node.js Patches 11 Security Flaws Enabling Memory Exhaustion, File Access and Request Smuggling

North Korea-Linked Hackers Exploit Job Offers, Legitimate Sites

North Korea’s Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn

Patch Tuesday, Wednesday and Every Other Day, Too

Qantas passes the Office of the Australian Information Commissioner (OAIC) preliminary data breach test: what helped and what organisations should be doing now

Russian Hackers Exploit Microsoft Outlook Web Access (OWA) Flaw to Keep Mailbox Access After Credential Rotation

Self-propagating AI worm found inside Microsoft Copilot for Word

SilverFox Targets Japanese Manufacturer with 3-Driver Bring Your Own Vulnerable Driver (BYOVD) Chain and ValleyRAT

Singapore: 1 in 2 ransomware victims who paid got a second demand

South African Revenue Service (SARS) issues urgent alert over AI-powered tax refund phishing scam

South African Revenue Service (SARS) warns of AI-generated tax refund phishing emails

South Korea: Foreign ministry investigated over major data breach

South Korea slaps KT Corp with $37.4 Million fine over data breach

South Korea warns of phishing emails and watering-hole attacks led by state-backed hackers

Student Hacks Indian Institute of Technology (IIT) Kanpur Website After Rejection, Gets Technical Assessment

Sumner County Schools provides limited update on data breach

Suno Breach Exposes 55.3 Million Accounts, 8 Months Later

TA488 Half-Click Exploit Moves to Outlook Web Access Flaw, Deploys Persistent OWAReaper Backdoor

Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages

Tennessee lab reports data breach affecting nearly 170,000 patients and employees

The Ministry of Defence (MoD) data breach that put thousands at risk - and why no one was held responsible

The Philippines cyberthreats rising as criminals use AI to scale attacks

Toy Ghouls’ new toy: the GenieLocker ransomware

UK: Department for Education Suffers Data Breach

UK Defense Data Breach Leaves Afghan Interpreters Facing Taliban Torture

UK Department for Education Data Breach exposes Teacher and Student Information

UK Department for Education (DfE) Hacked: Over 600,000 Records Exposed in Cyberattack

What customers should do if personal info is exposed in a data breach

Work Panel Uses Isolated Phishing Sites and a Kill Switch to Survive Takedowns

Work Panel Vishing Platform Automates Enterprise Account Takeovers and MFA Theft

29th July

22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking

30 Minnesota community water systems targeted in cyber attack

Agave Dental Data Breach Impacts 11,790 Patients

Agentic AI Demands a New Approach to Identity and Access Management

AI powers a 12% Year-On-Year increase in data breach costs

AI-driven attacks increased 56% last year, and data breach costs are up 12%

AI-Generated Phishing No Longer Needs Malware: It Can Steal Your Session Inside the Browser

Allwyn Dental Data Breach 4k Patients: Medical Information Compromised

Amazon identifies North Korean hacker group behind open-source supply chain attacks

An AI Agent Breached Hugging Face. The Attack Playbook Was Older Than the Attacker

An AI agent can pass every safety check and still leak secrets

Android malware detection collapses when the context stage comes out

Apple faces lawsuit after fake Bitcoin wallet drained $1.8 Million from App Store customers

As data breaches grow costlier, ungoverned AI creates new risks

Attackers Are Turning Microsoft’s Trusted Login System Into Their Latest Phishing Weapon

Australia: Data breach notifications reach record levels - Lessons for the future

Australia: New South Wales Cybercrime Squad charges nurse over alleged data breach

Average Canadian data breach costs and detection times are rising

Azle Smiles Data Breach Impacts 9k: PHI and PII Compromised

Bank of Baroda Confirms Data Breach After Employee Email Account Compromise

Bank of Baroda (BoB) Data Breach: Forensic Investigation is initiated, Customers to be aware of suspicious calls and message

Can Australians be confident they are interacting with the genuine Census service rather than a phishing site?

Canadian Data Breach Costs Hit Record High of $7.1 Million on Average

Check Point SmartConsole Zero-Day Lets Unauthenticated Attackers Gain Full Admin Access

Cisco warns of Firewall Management Center (FMC) static credential flaw exploited in zero-day attacks

Coca-Cola restores Fairlife operations at four U.S. facilities

Coca-Cola-owned Fairlife resumes production after ransomware attack

Coordinated Cyberattack Hits 30+ Minnesota Water Systems as Officials Suggest Iran-Linked Pattern

Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

Cost of a Data Breach Reaches Record $5 Million on Average

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Critical WordPress Plugin Backdoor Exposes 20,000 Sites to Administrator Takeover

CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In

Cyber attack on the prison system in Romania. ANP suspends the transfers of inmates

Cyber Threats Surge in India; Data Breach Costs Hit Rs 22 Crore

Cyberattack hits Angola’s largest telco hours before landmark stock debut

Data Breach at the Vatican - Data on 700,000 Believers Left Openly Accessible

Defence Research & Development Organisation (DRDO): Reports on cybersecurity incident incorrect

Defence Research & Development Organisation (DRDO) denies Thiruvananthapuram firm's report on 31 GB data sale on dark web, rules out cyber attack

Department for Education targeted in major cyber attack as 607,000 records leaked on dark web

Details about one of the world’s most dangerous ransomware cartels taking down companies in South Africa

Everest Hackers Leak 270,000+ Files Reportedly from Stadler Rail Breach After Swiss Firm Refuses to Pay, Including CCTV Footage, Configurations

Federal Trade Commission (FTC) sues Hims & Hers for allegedly sharing patient information with third-party platforms

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Fraud campaign impersonates Russian companies to steal funds

Great Barrington Town Manager Hartsgrove uses news of phishing scam to justify redacting public records

Hacker who breached Indian Institute of Technology (IIT) Kanpur website gets an internship offer instead of facing strict police action

Hackers steal headteachers’ data in Department for Education (DfE) cyber attack

Hackers target over 30 Minnesota water utilities in coordinated Operational Technology (OT) attack

Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare

Houston City College Breach Exposes Academic Records and Personal Data of 832,000 People

How Spyware Can Hide in Everyday Mobile Apps

IBM report shows Canada’s data breach costs hit record high

IBM Report Surfaces Sharp Spike in Cyberattacks Enabled by AI

"Incorrect, Unverified": India's Defence Research & Development Organisation (DRDO) Denies Reports Of Data Breach

India: Dark Web Listing Sparks Defence Research & Development Organisation (DRDO) Data Breach Claims; Officials Respond

India: Ministry of Defence (MoD) Denies Defence Research & Development Organisation (DRDO) Cyberattack Reports

India: No evidence of Defence Research & Development Organisation (DRDO) cyberattack, leaked data 'old and unclassified'

Iranian hackers hit 30 Minnesota public water systems in coordinated cyberattack

Is it just hype? AI-discovered bugs aren’t actually a treasure trove for crooks, research shows

Jeffrey David Reuben MD Data Breach Impacts 14k: SSNs Exposed

JFrog Confirms Its Own Zero-Days Were Exploited by OpenAI’s Models Escape Their Sandbox to Hack Hugging Face

Joyfill npm Credential Stealer Targets GitHub Tokens, Browser Passwords and Crypto Wallets

Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild, Research Shows

Kashi Dental Data Breach Exposes PHI of 6,027 Patients

Laundry Bear’s webmail hackers had more in store after February, report says

LogoKit Phishing Kit Screenshots Victim Sites in Real Time

Massive cyber attack sees hackers steal half a million pieces of data from Department for Education

Medical Computer Business Services (MCBS) Healthcare Data Breach Affects 1.26 Million People

Microsoft OAuth Phishing Campaign Hits 120 Organizations With 200+ Emails, 98.3% of Targets in North America

Minnesota Water Utilities Suffer ‘Coordinated Cyber Attack’

Mother Technologies Sees Sharp Rise in Businesses Falling Victim to Phishing Attacks

Mysa Dental Data Breach: Health Information Exposed

National Cyber Security Centre (NCSC) Publishes Guidance to Aid Incident Response and Recovery

New Critical Infrastructure (CI) Fortify Guide Reveals How Critical Infrastructure Can Contain Cyber Attacks

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

North Texas-based Eyemart Express faces data privacy lawsuits after cyber attack

Nuneaton and Bedworth Borough Council: Data breach statement

Nuneaton and Bedworth Borough Council: Names and email addresses leaked in data breach

One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average

OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

OpenAI agent used exposed credentials at 4 services in Hugging Face breach

OpenAI says its rogue AI tried to hack other companies

OpenAI says rogue agent behind Hugging Face hack broke into additional services

Origin Energy data breach affects 900,000 customers

Phishing hits record high, surging 94% driven by AI

ProDirectional Data Breach Exposes Social Security Numbers

Public Proof-of-Concept (PoC) Released for Exploited Check Point SmartConsole Authentication Bypass

Ransomware attack on medical billing company results in data on 1.3 Million leaked to dark web

Ransomware attacks surge during summer travel season

Ransomware report: VPNs in the crosshairs, AI attacks

Researchers Warn of AI-Enhanced Phone Fraud Ecosystem

Revolut Alleged Data Breach - Hackers Claiming to Access Over 75 Million Users’ Records

Romania’s Prison Authority Hit by Ransomware Cyberattack

Ruflo Model Context Protocol (MCP) Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Russian hackers exploit Exchange Outlook Web Access (OWA) zero-day for long-term mailbox access

Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages

Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack

School leaders affected by another Department for Education (DfE) data leak

ShinyHunters Claims Ernst & Young Data Breach, Threatens to Leak Stolen Data

ShinyHunters Claims Ernst & Young Hack

ShinyHunters targets accounting giant Ernst & Young (EY) leading to Data Breach

Singapore ransomware attacks aided by AI, Proofpoint finds

South Korea: Banks face full liability for voice phishing compensation

Stolen Meta and Google ad accounts are worth more than the money they hold

Sunrise Data Breach: 13GB of Sensitive Data Compromised

Sunshine Health Data Breach: 41,569 Members Impacted

Surge in 'mega breaches' and AI exploits drive record data breach notifications in 2026

Tengu botnet reboots Linux devices to survive removal

The Average Cost of a Data Breach Rises to $5 Million

The energy sector’s Operational Technology (OT) cybersecurity talent is retiring faster than it can be replaced

The Hackers Behind Coca-Cola’s Fairlife Attack Just Revealed Themselves. Experts Say They Represent a Dangerous New Threat

The Hidden Security Problem Holding Enterprise AI Back

The Hugging Face break-in explained

Threat Actors Embrace AI, Helping Push the Average Cost of a Data Breach to $6 Million

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Two class action lawsuits filed over Suno’s big data breach

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

Two Joyfill npm Packages Found Delivering DEV#POPPER Malware

Two-thirds of Irish businesses suffered a cyber attack in the last year

UK: Cyber-attackers take 607,000 records from Department for Education

UK: Department for Education suffers data breach

UK Department for Education hacked, 500,000 records reportedly exposed in major data breach

UK Department for Education investigating reported cyberincident after data breach report

Visibility Is Not Control: Why Zero Trust Requires More Than Alerts, Dashboards, and AI

We knew about V-Silicon attack before it was claimed: This is how hackers exposed themselves

Web3 Job Scam Uses Fake Camera Failure to Deliver Infostealer Malware

What to Do If Your PlayStation Account Is Exposed in a Data Breach

Who’s That Knocking At My Door? Ring Facial Recognition Class Action Lawsuit Filed

Why Blaming Hackers For The Department Of Education Data Breach Is Complete Delusional Nonsense

Wilson Dental Data Breach Exposes PHI and PII Data of 3,476 Patients

Wisconsin scam losses soar amid AI growth

World Food Programme (WFP) restarts Gaza aid registration app, but cyber-attack questions linger

Your AI agents can reach data no one approved

Youth Home Data Breach Compromises Medical records and More

28th July

4 people sue Maine hospital after data breach

24,650 Internet-Exposed Baseboard Management Controllers (BMCs) Disclose IPMI Password Hashes Before Login

A covert digital spy network is quietly breaching key targets across the Middle East

A-List Directors, Actors And Celebrities Exposed In Tribeca Film Festival Data Breach

AcademyHealth Data Breach Exposes Social Security Numbers

Aerospace and defense giant RTX Corp. discloses data breach exposing social security numbers

AI Music Generating Platform Suno Data Breach Affects over 55 Million People

AI Supercharges Software Security Flaws, Sparking Record Surge in 2026

AI Surveillance Van at India’s Biggest Youth Protest in Decades Heads to Court

AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched

AI, Regulations, and Ransomware: The State of Cybersecurity in 2026

AI-Discovered Security Flaws Are Not Yet Translating into More Exploitation

Angelina Jolie, Martin Scorsese and more celebrities' contact details exposed in Tribeca Film Festival data breach

AnMed Faces 72-Hour Ransomware Deadline as Hospital Systems Stay Down

Apple Fixes 194 Security Flaws Across iPhone, Mac and Other Devices

Ariana Grande sues alleged hackers over unreleased music leaks

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

AusProof allegedly breached by M3rx ransomware

Australia: Energy giant took weeks to respond to major data breach

Australian Unmanned Aircraft System (UAS) supplier warns of suspected cyber attack

Bank of Baroda Confirms Cyberattack After Data Breach Claims

Bank of Baroda confirms data breach. Can the lender now face penalties?

Bank of Baroda Confirms Data Breach After Employee Email Hack; 1TB Data Alleged on Dark Web

Bank of Baroda (BoB) data breach: A look at India's biggest corporate cyberattacks

Bank of Baroda data breach: Beware of 'Digital Arrest' scam; here's how to safeguard your account

Bank of Baroda Data Breach: Could Your Personal Details Fuel the Next ‘Digital Arrest’ Scam?

Bank of Baroda data leak: If you are BoB account holder, don't worry, here are 5 things you must know

Bank of Baroda data leak: Internal documents allegedly exposed after cyberattack

Bank of Baroda says cyber incident unlikely to materially impact operations; appoints CERT-In empanelled forensic agency

Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard

Call of Duty Mobile scam uses fake free points giveaway to hijack players’ accounts

Calphishing is challenging how we think about phishing

ChatGPT Joins Most Faked Brands Ranking in Phishing

CISA shares advice on isolating vital systems during cyberattacks

Cl0p ransomware affiliate shows signs of exploiting PTC Windchill, FlexPLM flaw

Coca-Cola: Ransomware attack on Fairlife led to data leak

Coca-Cola Confirms Data Breach by Anubis Cybercrime Group

Coca-Cola Confirms Data Theft as Fairlife Ransomware Attack Escalates

Coca-Cola confirms hackers stole data in Fairlife ransomware attack

Coca-Cola restores most production capacity at dairy unit after ransomware attack

Coca-Cola Resumes Fairlife Production After Ransomware Attack

Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach

Coca-Cola-owned Fairlife restarts US production following ransomware attack

Coca-Cola's fairlife production resumes, cyber hackers claim responsibility

Confidential Computing on CPU and GPU Systems: How AI Data Centers Protect Data in Use

Connecticut Businesses Being Warned Of Phishing Emails Posing As State Registry

‘Coordinated cyber attack’ targeted 30 water facilities across Minnesota

'Could even be from an earlier data breach at Defence Research and Development Organisation (DRDO)': 31 GB of 'stolen' sensitive data put up for sale on dark web

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

Critical TeamCity Flaw Could Let Unauthenticated Attackers Execute Server Commands

Critical vulnerabilities remain visible after ransomware disclosures

Crypto: Ethereum, Solana Top Hacker Targets 2026

CubePilot drone software dev hit by DNS hijacking to intercept traffic

Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay

Cyber Attack Impact: Coca-Cola’s fairlife Milk Production Hit by Ransomware Breach

Data breach at medical billing firm Medical Computer Business Services (MCBS) affects 1.26 million people

Data Breach Exposes De Niro’s Tribeca Film Festival. Hollywood A-Listers Hardest Hit

Did ransomware attacks really decline? Here are your business' 4 best defenses

Dismantled Kratos Phishing Kit Becomes Blueprint for Attacks on Microsoft 365 Users

Dismantled Kratos Phishing Kits Acting as Blueprint for Others to Attack Microsoft 365 Users

Dismantled Kratos Phishing-as-a-Service Kit Fuels Copycat Microsoft 365 Campaigns

Dutch ice arena Thialf hit by cyberattack; ransomware group threatens data leak

Exposed Baseboard Management Controllers (BMCs) hand out password hashes before login

Fairlife resumes majority of US production following ransomware attack

Fairlife resumes operations after ransomware attack

Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections

FBI, LinkedIn Warn Job Seekers of Employment Scams and Exploitation

Federal judge throws out WhatsApp encryption lawsuit against Meta

Florida Substance Use Disorder (SUD) Treatment Provider Announces 145,700-record Data Breach

Google Search Exposure of Claude Shared Chats Raises Privacy Concerns

Great Barrington warns of phishing scam involving fake town invoices

Hermes AI Agent Used in Cyberattack Targeting Thailand Finance Ministry

Holy Data Leak! Pope's Prayer App Exposes 700,000 Users in Security Breach

Hong Kong: Securities and Futures Commission (SFC) Fines Luk Fook Securities Over Cybersecurity Failures Tied to Ransomware Attack

Hotel Wi-Fi Becomes a Phishing Trap: Attackers Hijack Gateways and Steal Microsoft 365 Accounts

Hugging Face breach reignites open-weights debate, raises liability questions

Illinois cardiology practice sued over data breach

India’s Bank of Baroda confirms cyber incident after hackers claim data theft

India’s Bank of Baroda data breach exposes customer records after employee email compromise

Is your Bank of Baroda account at risk? Here's what the data breach means

Is your smart TV a secret proxy? LG to suspend rogue apps, Samsung sets impacted too

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

Kratos PhaaS Targets US and EU: How to Reduce Microsoft 365 Account Takeover Risk

Loma Linda University Health Data Breach Exposes Protected Health Information

Medical Computer Business Services (MCBS) data breach: Over 1.2 million patients affected

‘Mega breaches’ and AI drive surge in data breach notifications

Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats

Mirage Kitten’s New Malware Toolkit Targets Aerospace and Defense Across Middle East and Africa

More than 30 Minnesota water systems targeted in cyberattack

More Than 45,000 Software Flaws Reported as AI Reshapes Cybersecurity

Nearly a million customers caught in Origin data breach

New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

Nottinghamshire County Council apologises after parent email data breach

Nvidia launches Open Secure AI Alliance to improve AI safety

NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names

OpenAI models used Artifactory zero-days to escape to the internet

Operation BlueDash Maintains Redundant Remote Access Even After One RMM Tool Is Removed

Operation Cronos dismantled LockBit ransomware group by undermining affiliate trust

Origin apologises after revealing 900,000 customers affected by data breach

Origin Confirms Data Breach - Hackers Accessed 900,000 Customers’ Data

Origin Energy believes 900,000 customers' data accessed in breach

Origin Energy confirms 900,000 customers hit in data breach

Origin Energy Confirms Around 900,000 Aussies May Be Affected By Data Breach

Origin Energy data breach affected 900,000 customers

Origin Energy Data Breach Affects 900,000 Australians

Origin Energy Data Breach Affects 900,000 Current and Former Customers

Origin Energy data breach affects 900,000 customers

Origin Energy data breach hits 900,000 customers: What you need to know

Origin Energy Data Breach May Affect 900,000 Customers

Origin Energy Hides Data Breach from 900,000 Customers for Weeks

Origin Energy knew of hack weeks before 900,000 customers impacted

Origin Energy says data of 900,000 Australians stolen in hack

Over 24,000 exposed server Baseboard Management Controllers (BMCs) leak password hash via decades-old flaw

Over 144,000 stolen university usernames have been discovered on the dark web

PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites

Phishing attacks under the guise of ChatGPT are gaining momentum

Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques

Qilin Ransomware exploits Palo Alto Networks, Fortinet, Citrix, and Check Point VPNs

Ransomware Attacks Grow Faster and Smarter as AI Tools Spread Among Hackers

Ransomware actors are avoiding big business - on purpose

Ransomware attacks speed up as hackers use AI tools

Ransomware Attacks Surge as Hackers Exploit Software Supply Chains

Ransomware Gangs Now Kill Security Software Before Striking, Report Warns

Ransomware Group Claims Data Theft From Nexon, Authenticity Under Scrutiny

Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit

Romania Confirms Ransomware Attack Hit Property Records Agency

Romania confirms ransomware attack on cadastre agency, no timeline for full recovery

Russian hacker group Laundry Bear exploits Zimbra zero-click flaw to target Western government, critical infrastructure

Scammers Are Impersonating Spotify to Steal Your Credit Card Info

Scammers Pose as ShinyHunters to Blackmail Data-Breach Victims With Fake Webcam Videos

Shadow AI incident response begins with logs that may already be gone

ShinyHunters claims Ernst & Young (EY) breach, warns all stolen data will be released

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak

ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens to Leak Stolen Client Tax Data

Soniva Dental Care Data Breach Affects at least 30,000 Texans

Stack Sports Data Breach Exposes Financial Account Information

Suno faces proposed class action lawsuit over data breach

Taiwan: Officials warn against AI-aided cybercrime

Taiwan Sounds Alarm on AI-Driven Cybercrime Fueling Ransomware Surge

Tanaka Dominates Data Leak Landscape With 25 Leak Posts

Tanaka dominates the data leak landscape with 25 leak publications

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

The Model Wasn’t Rogue. The Control Plane Was

Thriday customers hit with phishing email, dodgy link asking for bank details

Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks

UK and partners warn of zero-click phishing campaign targeting Western organisations

vBulletin fixes critical pre-auth RCE flaw with public exploit

Why the Origin Energy Data Breach is a Wake Up Call for Everyone

Your Private Claude Chats May Have Been Sitting in Google Search Results All Weekend

Zero Trust Network Access (ZTNA) Emerges as VPN Security Risks Put Federal Networks on Alert

27th July

6 in 10 manufacturers incur over $1 million in losses per cyber attack

23andMe hit With €2.4 Million fine after data breach affected Spanish residents

48% of Breaches Now Originate in the Supply Chain. It’s Time to Admit the Industry’s Approach Has Failed

75 million Revolut records allegedly for sale

79% of ransomware attacks begin with stolen credentials

A-list celebrities have contact details exposed in data breach

After ransomware attack, Fairlife resumes most US production

Agentic AI will Supercharge Cyber Threats. But Not in the Way You Think

AI makes ransomware more effective in 65 percent of cases

AI vs. AI: How Defensive Intelligence is Keeping Pace with AI-Powered Cyber Threats

All Microsoft users placed on red alert as worrying danger is back

Angelina Jolie, Robert De Niro Among Hollywood Stars Hit by Tribeca Data Leak

AnMed Cyber Attack Disrupts Phones and Internet at All Locations

AnMed given 72 hours to respond to demands in ransomware incident

Apple sued after alleged App Store crypto scam cost users $1.8 Million

Apple sued over fake App Store crypto wallet app stealing $1.8 Million in Bitcoin

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

Arkansas to receive share of $18 million 23andMe data breach settlement

Assume AI cybersecurity attacks are the future: 43% of companies have already experienced it

Australia: Nurse charged over data breach

Australia: Victorian heritage and restoration firm listed by The Gentlemen ransomware group

Australian mining firm West African Resources suffers alleged data breach

Bank of Baroda 1TB data leak: Is your money safe? Here's what customers should do now

Bank of Baroda 1TB data leaked, account details, names, numbers and Aadhaar available online

Bank Of Baroda Allegedly Hacked? X User Claims 1TB Customer Data Leaked On Dark Web

Bank of Baroda confirms data breach; cybersecurity experts see 1TB breach as ‘bad’ and ‘concerning’

Bank of Baroda confirms data breach, ’employee’s email account was compromised’

Bank of Baroda confirms data breach, says email account hacked

Bank of Baroda confirms data breach, says employee email account compromised in hack

Bank of Baroda data breach: How to check if your personal details were leaked

Bank of Baroda Data Breach Claim: 1TB Leak Allegedly Exposes Customer Account Details and Aadhaar

Bank of Baroda Data Breach Claim: What Customers Need To Know About The Alleged 1TB Leak

Bank of Baroda data leak: Hacker claims 1TB customer data breach

Bank of Baroda faces alleged 1TB data breach; Aadhaar, account and loan records reportedly exposed online

Bank of Baroda Flags Data Breach After Employee Email Compromised

Bank of Baroda hit by alleged 1TB data breach; sensitive banking records reportedly leaked on Dark Web

Bank of Baroda hit by alleged data breach; hacker claims 1TB of customer records leaked

Bank of Baroda hit by cyberattack; hacker leaks 1TB of data on dark web

Bank of Baroda initiates forensic investigation on data breach that leaked critical customer information

Bank of Baroda Investigates Alleged 1TB Customer Data Breach

Bank of Baroda On Alleged Data Breach: Employee Email Account Compromise Behind Incident

Bank of Baroda probes data breach; says core banking systems remain secure

Bank of Baroda says core banking systems secure after reported data breach

Binance Implements Monthly Phishing Simulations with Termination Penalties for Severe Failures

Botnets powered by residential proxy networks are growing

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

ChatGPT joins the most impersonated brands in phishing attacks

Claude AI shared chats indexed by Google - see if your conversations were exposed

Claude chats and workspaces turn up on Google, revealing avoidable privacy flaw

Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack

Coca-Cola confirms data theft in Fairlife ransomware attack

Coca-Cola resumes Fairlife milk production after hackers shut down plants

Coca-Cola's Fairlife Milk Production Resumes as Hackers Tout 1TB Data Theft

Coca-Cola’s Fairlife resumes operations after attack

Cosmetics Giant Estée Lauder Discloses a 10-Month Old Data Breach

Cruciferra Crypter Uses Bring-Your-Own-Vulnerable-Driver (BYOVD) and Process Ghosting to Hide Windows Malware

Customer data from India's Bank of Baroda leaked online

Cybersecurity Agencies Warn Businesses of Rising AI-Powered Phishing Attacks

Data Breach at Bank of Baroda: What was the reason behind data compromise at public bank?

Data breach at Defence Research and Development Organisation (DRDO)? 31 GB of allegedly stolen sensitive data for sale on dark web for $8,000

Data Breach Exposes Personal Contact Info of Hollywood Celebrities

Data breach in Bank of Baroda? 1TB of customer details, Aadhaar, phone numbers leaked on darknet

DentaQuest Data Breach Potentially Impacts Over 23 Million People

DentaQuest disclosed a data breach that impacted 23 million+ individuals

Don’t Blame the Rogue Agent. Follow the Humans

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

Employee email compromise led to unauthorised data release, core banking systems secure, says Bank of Baroda

Ernst & Young data breach claimed by ShinyHunters extortion gang

Ernst & Young (EY) Data Breach Claimed by ShinyHunters Hacker Group

Fake Steam ‘Fixes’ Distribute XMRig via the ClickFix Technique, Quietly Turning Gamers’ PCs Into Cryptominers

Fast Food Restaurant Chain Chick-fil-A Suffers Data Breach from Credential Stuffing Attacks

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

GitHub delays version updates so malware gets caught first

Google changes how it names cyber threat actors

Google Indexed Claude AI Shared Chats Before Results Were Removed

Google Is Giving Hacker Groups New Names That Reveal Who They Are and Why They Attack

Google’s solution to hacker name confusion? Yet another naming system

Hacker Breaches Bank Of Baroda System; Puts 1TB Data On Dark Web

Hacker claims deal struck with Origin over data breach

Hacker who targeted over 500 Snapchat accounts sentenced to over 6 years in prison

Hackers target US firms in FastJson RCE zero-day attacks

Hackers used autonomous AI agent to spy on Thailand's finance ministry

Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts

Hackers used Telegram phishing campaign to target exiled Belarusian activist

Health system in South Carolina, Georgia closes offices after malware affects networks

Hilldun Data Breach Exposes Social Security Numbers

House Lawmakers Propose Mandatory Kill Switches for Frontier AI Systems

How HalluSquatting Attacks Trick AI Coding Assistants into Running Malicious Code and the Safeguards Enterprises Need

How the Gentlemen Ransomware Group Built a Multi-Region Attack Machine in H1 2026

India Becomes Second-Most Targeted Nation in APAC as Cyberattacks Surge in H1 2026

Indian Bank of Baroda Customer Data Leaked on Dark Web

Is open source the answer to rogue AI agents? Nvidia's new alliance says yes

LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations

Major Bank of Baroda data leak? Ransomware group claims to have stolen 1TB of customer data

Man Sentenced to Six Years for Phishing Snapchat Accounts of Hundreds of Women

Man uses GrapheneOS feature to wipe his phone during border search

Massive Tribeca Data Breach Exposes Contact Details of Hollywood Elites

Medical Computer Business Services (MCBS) Data Breach Affects 1.2 Million Individuals

Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

New Certighost Proof-of-Concept (PoC) exploit lets attackers hijack Windows domains

New Dysphoria DDoS botnet spreads to 200k devices worldwide

NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NVIDIA-labs OO Agents (NOOA) Framework

Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out

Nvidia Forms Open AI Security Group in Wake of Hugging Face, OpenAI Incident

Nvidia, SpaceX, Microsoft launch AI safety initiative as OpenAI cyberattack fallout continues

OnTrac parcel delivery company reports customer data breach

OpenAI Cyber Attack on Hugging Face sparks AI Security Alliance backed by Nvidia, Meta, and Others

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

Origin Says Data Breach Affected About 900,000 Current and Former Customers

Origin Energy Data Breach Exposes Customer and Partial Card Details

Phishing attacks on insurance companies evolve to real-time account hijacking

Phishing the agent: Why identity controls are essential to secure and manage AIs

Pierce County Library System settles lawsuit over data breach affecting 340,000

Police curb voice phishing in South Korea, cut cases and losses by half

Pope’s prayer app leaks 700,000 user emails

Proofpoint research finds UK organisations continue to pay ransomware demands despite warnings

Proof-of-Concept (PoC) exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

PTC Windchill Vulnerability Exploited in Ransomware Campaign

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Ransom gang targets Dutch ice arena Thialf in cyberattack

Ransomware Activity Climbs as Supply Chain Attacks Increase in Scale

Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate Networks

Ransomware groups expand operations as software supply chain attacks accelerate

Ransomware Groups Increasingly Deploy EDR Kill Techniques

Revenge is Sweet. Conviction is Sweeter

Romania: The government is preparing to restart the e-Terra information system, affected by a cyber attack, without being able to provide an exact date. The cadastral database has not been compromised

RTX Data Breach Exposes Social Security Numbers

ShinyHunters’ Name Gets Hijacked for a New $2,000 Sextortion Scam

SourTrade Malvertising Campaign Secretly Builds Malware in the Browser

South Carolina beach town loses $500,000 in phishing scam

South Korea: Banks push back against proposed no-fault compensation for voice phishing victims

South Korea: Nearly 100,000 cyberattacks hit foreign ministry, affiliates in 6 months

Steam forums used for ClickFix cryptominer attacks

Steam Workshop maps for Meccha Chameleon found delivering malware

Suspicion Grows About OpenAI’s Tale About Its Rogue Hacker AI

Taiwan: Digital Ministry warns against ransomware attacks

Taiwan cyber agency warns of growing ransomware threats

Tech giants form alliance to put open AI in cyber defenders’ hands

Telegram phishing campaign targeted exiled Belarusian activist, Russians and Kazakhstanis

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

Thailand Securities Depository (TSD) investor data breach cue for Securities and Exchange Commission (SEC) action

The containment paradox: Why your ransomware playbook has the wrong people in charge

The enduring mystery of hacker Phineas Fisher

The Pope's Official Prayer App Has Been Leaking the Private Data of 700,000 Users for Months

Tribeca Film Festival Data Breach Exposes Celebrity Contact Details

Tribeca Film Festival data leak exposes Hollywood stars, including Angelina Jolie and Robert De Niro

Two Old Oj Flaws Chained to Trigger GitLab Remote Code Execution

UK court rejects Bahrain immunity claim in spyware case

‘Unprecedented event’: Hugging Face CEO demands answers from OpenAI after AI agent-driven cyber attack

Vanderbilt Health Data Breach Compromises Patient Information

Vatican scrambles to patch 'phishing goldmine' app promoted by the Pope

What to look for in antivirus software without the jargon

What to know about the Origin Energy hack (even if you aren’t a customer)

Which New Zealand companies are most likely to be targeted by Ransomware hackers?