Data Breaches Digest - Week 29 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 13th July and 19th July 2026.

13th July

65% of Organisations Think a Serious Cyber Attack Could Threaten their Survival

99.9% of fixable AI vulnerabilities remain unpatched

A zeroed signature let a hacker drain nine million dollars from Hedera's biggest lender

After years on the run, alleged Ryuk ransomware operator pleads guilty

AI Phishing Surge Forces New Zealand Casinos to Fight Back

ApolloMD agrees to multi-million-dollar settlement over 2025 data breach

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Australian Cyber Agency Warns of Global CMS Exploitation Campaign

California: State can’t seek damages from 23andMe successor over data breach

California Gay & Lesbian Services Center Data Breach Affects 75,500 Individuals

Cambodian Voice Phishing Ringleader Sentenced to 14 Years for $44.3 Billion Fraud

Carle Health Data Breach Exposes Sensitive PHI and PII

Centers Laboratory Data Breach Affects 540,000 Individuals

Centers Laboratory New Jersey discloses data breach incident impacting 542,000 people

CISA Warns of Actively Exploited Joomla Zero-Day Vulnerabilities

CISA warns of actively exploited RCE flaws in Joomla extensions

Columbia Orthopaedic Group Data Breach Exposes PHI

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Cyber Attack at Mount Royal University Disrupts Operations, Cybercrime Gang Demands $1.9 Million Ransom

Cyber incidents - a 'litmus test' of a company’s management capability

Dark Web Profile: Krybit Ransomware

Data breach at Lidl: online store customer data stolen

Difficult to detect: Phishing campaign uses Microsoft infrastructure

Doing Its Job: Large Majority of Cyber Losses Covered by Insurance, Says Willis

Estée Lauder Data Breach Exposes Health Information and SSNs

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe

EU sanctions Russian GRU military hackers over cyberattacks

European Parliament Revives Controversial Chat Scanning Law

Evilginx: Three phishing operations revealed by mistake

Ex-ransomware negotiator gets 70 months for betraying clients to hackers

Exposed Server Unmasks Evilginx Operators Stealing Microsoft 365 Sessions and OAuth Tokens

Fake Bank Apps Let Scammers Control Android Phones in Southeast Asia

Fake OAuth client IDs are helping attackers slip past sign-in logs

Feds Slam Ransomware Supply Chain: US And Allies Cut Off Cybercriminals’ Digital Lifelines

Fiji: Phishing attack surge

Finland: Police issue wanted notice for Vastaamo hacker Aleksanteri Kivimäki

Finland: Vastaamo hacker wanted after appeal rejected

Foreign National Admits Guilt in $15,000,000 Bitcoin Ransomware Attacks on U.S. Firms

Forg365 Phishing-as-a-Service (PhaaS) Targets Microsoft 365 with Device Code and Adversary-in-the-Middle (AitM) Session Theft

GhostCommit Attack Hides Prompt Injection in PNG to Steal Developer Secrets

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges

Hackers blackmail Bosch as secret engineering files surface on the dark web

Hackers breach Lidl’s IT service provider, steal customer data

Healthcare ransomware attacks rose 14% in first half of 2026

Healthcare Services Group Agrees to $3 Million Settlement Over 2024 Data Breach

Hong Kong: Securities and Futures Commission (SFC) Mandates Phishing-Resistant Authentication Methods for Internet Brokers and Virtual Asset Trading Platforms (VATPs) to Protect Client Accounts

How small businesses get hacked through employees

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

India: Government Confirms No Critical Data Loss In Tata Electronics Cyber Attack, Vows Continued Vigilance Amid Rising Digital Threats

India: Government examining alleged Tata Electronics data breach

Is that QR code a trap? How to spot quishing scams before it's too late

It’s a First: An AI Agent Carries Out a Ransomware Attack on AI App Builder

Jscrambler npm Supply Chain Attack Steals Developer and Cloud Credentials

Lake Region Healthcare Alerts Patients of Data Breach

Lawyers Investigate Frontier Airlines Over Data Breach That May Have Exposed ‘Sensitive’ Personal Information

LIA Insurance Data Breach Exposes Financial Account Info

Lidl customers across Europe hit in suspected data breach - here's what we know

Lidl customers' bank details at risk after third-party security failure

Lidl discloses online shop breach after service provider hack

Lidl Warns of Phishing Risk After Customer Data Theft

Los Angeles Police Department (LAPD) lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy

Marlboro-Chesterfield Pathology Agrees to Settle Lawsuit Over 2025 Ransomware Attack

Meridian Health Plan of Illinois Data Breach Affects 21,027

Meta Removes Muse Image Instagram Feature After Consent Backlash

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

New ransomware leader emerges as global cyberattacks rise in June 2026

Nihon Kotsu Confirms Malware Infection, Taxi Dispatch Systems Disrupted

Novel OAuth Client ID Spoofing Technique Targets Cloud Environments

One Misconfigured Python HTTP Server Exposed Three Active Campaigns from Attackers

Open Directory Exposes Three Evilginx Phishing Operators

Pakistan: International Hacker accused of stealing 5 Million Bank Records arrested in Karachi

Pakistan: Karachi hacker arrested for alleged theft of millions of foreign citizens’ financial data

Pakistan: National Cyber Crime Investigation Agency (NCCIA) Busts International Hacker in Major Data Breach Case

Pakistani Police Systems Hit by Chinese and Indian Espionage

PennyMac Data Breach Affects 3k Individuals: PHI Exposed

Progress Software Warns of "External Security Threat" to ShareFile

Progress warns ShareFile Users: shut down on-premises servers immediately

Prolific hacker 2019 selling alleged HotToner Australia customer data online

Public Key Infrastructure (PKI) Under Pressure: AI, PQC and Shorter Lifecycles Drive New Security Challenges

Ransomware negotiator jailed for 70 months after he just helped infect victims with malware

Ransomware negotiator who betrayed clients sentenced to 70 months in prison

Ransomware Targets 2.74% Of Malaysian Firms In 1Q26

RokRAT Malware Hides Behind Academic Event PDFs and Cloud Storage Links

Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions

Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach

Russian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns

Ryuk ransomware operator pleads guilty in $15 Million bitcoin extortion

Security Leaders Discuss Exposure of 24 Billion Credentials

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers

Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects

Social Media Users Warned Against Phishing Campaign on X

South Korea Military Faces Highest Cyberattack Volume Since 2021

Spear-Phishing Campaign Uses Proton Drive Links and LNK Files to Deliver SpyGlace

Supply Chain Attack: jscrambler npm Package Compromised, Targeting Wallets, AI Tools, Cloud Credentials

The Decision Burden Behind SOC Alert Fatigue and How Experts Would Reduce It

This one cyber crime group accounted for nearly a fifth of all ransomware attacks in June

UK charges suspects linked to Russian Coms call spoofing platform

UK Cyber Attacks Climb 34% as Ransomware Leadership Shifts

US and allies warn of Russian critical infrastructure attacks

US Treasury sanctions malware providers tied to cyberattacks

Vermont: Funds recovered in recycling-related phishing scam

Vishing Call Becomes Key Lead in Massive Odido Cyberattack

Why cybercrime is becoming everyone’s problem in Ghana

Why Software Bill of Materials (SBOMs), signing, and provenance still don’t tell you if software is safe

Year-Long Microsoft Device Code Phishing Campaign Bypasses MFA and Claims 218 Victims

YKK AP Data Breach Highlights Ongoing Cyber Risks Facing Glass Industry

Data-Leaking Ransomware Report - H1 2026

Welcome to the first half of this year's DLR Report, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed between 1st January and 30th June 2026.

DBD discovered and researched 4725 Global Ransomware Victims over 131 Countries and Islands, including 2117 US Ransomware Victims over 51 States and Districts, claimed by 113 Data-Leaking Ransomware Operators in H1 2026.

DBD also discovered and researched 42 New Active Ransomware Operators in H1 2026, further details of which can be found in our PRiSM application.

Download PDF



Data Source: Data Breaches Digest.

Ransomware Operator Claims - Week 27 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 29th June and 5th July 2026, kindly assisted by our partners.

DBD discovered and researched 168 Ransomware Victims over 41 Countries and Islands claimed by 35 Data-Leaking Ransomware Operators, including 2 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 28 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 6th July and 12th July 2026.

12th July

5 Laptop Security Features That Can Help Hybrid Workers Fight AI Ransomware

AI discovers Linux bug that went unnoticed for 15 years

Cyber Attacks Using AI Are Getting More Convincing, Businesses and Organizations Are Targets

Hackers hijack Argentina football federation to demand "justice" for Egypt

Kaspersky Blocks 140 Million Phishing and Fraud Attempts in the First Quarter of 2026

Medical Technology Firm Confirms Data Breach That Impacted Data of 3,834,294 Americans

Ransomware Negotiator Gets 6 Years in Prison for Assisting Scammers

RedHook Android malware now uses Wireless ADB for shell access

Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

South Korea: Court Rules Account Holder Must Prove Legitimacy of Suspected Voice Phishing Funds

Spain Now Strengthens Travel Cyber Awareness as AI Phishing Threatens Holiday Bookings Across Barcelona, Valencia and Mallorca

Texas’ Blue Fish Pediatrics says data breach affected more than 60,000

Vacations at Risk 2026: The Summer When Cybercriminals Learned to Think Like Tourists

11th July

Africa: June 2026 Sees Spike in Cyber Attacks, With New Ransomware Threat on the Rise

Argentina Football Association Email Hacked, Claims Cyber Attack

Argentina rocked by hacker as Football Association sends emails about ‘corrupt refereeing’ after Egypt win

Argentine Football Association issues statement after alleged cyber attack amid World Cup officiating controversy

Australia warns of global campaign targeting vulnerable CMS platforms

Belgium: Banks pushed to issue more refunds to phishing victims

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Dutch police threaten to release suspect's voice in hunt for hackers behind 6 million record Odido breach

Florida Ransomware Negotiator Convicted for Helping BlackCat Gang Extort US Companies

Forg365 Phishing Platform Using AI to Attack Microsoft 365 Accounts

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

Hacker accessed ‘limited amount of data’ during cybersecurity breach, City of Thorold says

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Healthcare Ransomware Attacks Shift: Businesses Up 35% While Hospitals Hold Flat

How Stale Credentials Drove the Worst Data Breach Incidents of 2026

India and China carried out Cyber attack on Pakistan’s Balochistan Police

Ireland faced several major ransomware attacks leading up to EU Presidency

Meta cracks down after finding users physically drilling out privacy feature on Ray-Ban, Meta glasses

Meta pulls controversial AI image tool days after launch

Millions of Android Users at Risk as Study Reveals Serious Flaws in Free VPN Apps

Nintendo Data Breach: 859MB Stolen, $2 Million Ransom

Ransomware Hacker Pleads Guilty After $15 Million Bitcoin Extortion Scheme

This ransomware negotiator was paid to fight hackers, he was secretly working with them instead

Vishing Campaign Hijacks Microsoft 365 Passkey Enrollment Across Six Industries

10th July

76% of fast-food chains leaked sensitive data. Feeling hungry?

87% of Companies Were Hit by an AI Cyber Attack. The Fix Is a Skills Problem, Not a Headcount One

Accenture Confirms Data Breach After Hacker Claims Theft of 35GB Internal Data

Accenture faces massive data breach that could put clients at risk

AdaptHealth Breach: How Attackers Use Stolen Login Sessions to Act Like Legitimate Users

After the breach: The lessons retail is drawing from 2025’s ransomware wave

AI fuels massive surge in cyberattacks, Dutch regulator warns

AI Gateway Compromise Turns Amazon Bedrock Infrastructure Into Cryptomining Resource

AI Phishing Kits Drove 58% Breach Surge, Dutch Authority Warns Businesses

AI Ransomware Is Here, Now Powered By Cheaper, Agentic Models

Albania: Cybersecurity Authority Warns of Phishing Campaigns Impersonating Banks and Postal Service

Angelo Martino conviction: former DigitalMint negotiator collaborated with BlackCat

Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn

Argentina issues statement after alleged cyber attack amid World Cup officiating controversy

Armenian citizen pleads guilty to ransomware attacks in Oregon and elsewhere

Armenian man pleads guilty to deploying Ryuk ransomware

Armenian national pleads guilty to Ryuk ransomware attacks

Attackers Exploit 'Ill Bloom' Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets

Big tech again allowed to scan Europeans’ messages via Chat Control after procedural trick

ChatGPT “Update your payment details” phishing email leads to fake Stripe payment page

China offered to help Russia destroy Elon Musk’s Starlink constellation

China, India ran separate spying campaigns against same Pakistani police force

China-Linked and India-Linked Hackers Target Pakistani Police Systems

CISA Details Incident Response to Exposed AWS GovCloud Keys

City of Hastings issues warning about phishing emails posing as city officials

Claude Code Espionage Campaign Exposes a New Enterprise AI Risk

Council login details thought to be stolen in Russian cyber attack

Custom malware, initial access brokers and Ransomware-as-a-Service (RaaS) drive decentralized, resilient ransomware ecosystem

Cybersecurity Negotiator Gets 70 Months for Helping BlackCat Extort Victims

Datadog Warns of Coordinated GitHub API Enumeration Campaigns Targeting Organizations

Denmark: Fashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk

Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package

Devious phishing campaign hijacks a genuine Meta business feature to send scam emails - as they really do come from Meta's own address

Dutch police suspect Dutch hackers in Odido data breach

Dutch police trace Odido telco cyberattack to suspected local accomplice

ESET Threat Report H1 2026 Highlights Rising AI-Powered Cyber Threats, QR Code Phishing, and Evolving Ransomware Tactics

Estonia to Grant Digital IDs to AI Agents

Ex-Chicago ransomware negotiator gets nearly 6 years in prison for aiding hackers

Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites

Exposed Server Reveals 25,000 Compromised WordPress Websites

Fake Robinhood Sign-In Alerts Trick Users Into Calling Hacker-Controlled Phone Numbers

Fiji: Bank of South Pacific (BSP) warns customers of sophisticated phishing scams and fake banking websites

Financial institutions stumbling into phishing-resistant MFA gaps, report warns

Finding Focus: A Strategic Approach to Cybersecurity for Small and Medium Companies

Florida ransomware negotiator convicted for helping ransomware gang extort US companies

Florida Ransomware Negotiator Sentenced to 70 Months for Aiding BlackCat Attacks

Forg365 Phishing Platform Targets Microsoft 365 Accounts With AI and Device-Code Abuse

Forg365 Phishing-as-a-Service (PhaaS) Abuses Microsoft Device-Code Flow to Hijack M365 Sessions

Forg365 Phishing-as-a-Service (PhaaS) Uses Telegram and AI Lures to Hijack Microsoft 365 Accounts

Former ransomware negotiator gets 4 years for BlackCat attacks

Former ransomware negotiator sentenced to 70 months for extorting $75.3 million

Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang

Frontier Airlines Data Breach Exposes SSNs

GigaWiper: Golang Backdoor Combines Disk Wiping, Fake Ransomware, and Spyware Capabilities

GigaWiper: Modular Windows Backdoor Combines Disk Wiper, Fake Ransomware, Spyware

GigaWiper Malware Attacking Windows Systems With Data Wipers and Fake Ransomware Notices

Global attack targets WordPress and Joomla websites

Global Cyberattacks Surge 17 Percent as Ransomware Targets African Hubs

GNU Guix Flaws Enable Remote Privilege Escalation and Store Corruption

‘GodDamn’ ransomware deploys PoisonX driver to kill EDR

Hackers Abuse CitrixBleed 2 to Steal Session Tokens and Bypass MFA Protections

Hackers Can Go From CitrixBleed 2 Exploitation to Ransomware in Under an Hour

Hackers Exploit CitrixBleed 2 to Hijack MFA-Protected Sessions and Deploy DragonForce Ransomware

Hackers exploit critical auth bypass in Gitea Docker image

Hackers Impersonate Robinhood With Fake Sign-In Alerts in Callback Phishing Attacks

Hackers Turn TON Blockchain Into a Resilient C2 Directory for Node.js Backdoor

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

Hacking worry for Argentine Football Association over World Cup emails

Healthcare ransomware attacks remain resilient in H1 2026 as extortion groups broaden attacks across supply chain

Healthcare, Hospitality and Construction Named UK’s Most Phishing-Prone Industries

Helix Targets Microsoft 365 Accounts in SharePoint Data-Theft Attacks

Hong Kong Bans SMS and Email Logins for Crypto Platforms: Will Other Regulators Follow?

Hong Kong's Securities and Futures Commission Tightens Anti-Phishing Standards for Crypto Platforms

How the GodDamn Ransomware Driver Bypasses Your EDR

How the world’s top cyber authority left its door wide open on GitHub: CISA shares lessons from major blunder

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

Insider threat: NHS staff warned they’ll be fired or even jailed for accessing patient records illegally

Insurance Data Breach Exposes 6.9 Million Driver's Licenses, SSNs

Italy Fines Character.AI Owner €158,000 Over GDPR and Child Protection Failures

Japan: Mie Prefecture Bans Personal USB Drives After Malware Found on Nearly 50 Devices

Judge orders $46.75 million compensation for victims of 2023 23andMe data breach

KDDI Data Breach: 12.2 Million Users Hit Across 6 ISPs

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

License plate cameras may be next target after Supreme Court reins in location tracking

Linux FUSE Page Cache Overflow Lets Local Attackers Gain Root Access

Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint

Microsoft discovers new multi-malware package 'GigaWiper' capable of deploying wipers and ransomware

Microsoft uncovers GigaWiper, a backdoor designed for destruction on demand

Microsoft Warns AI Will Bring More Windows Patches and Faster Deadlines

Microsoft Warns of Increase in Number of Security Updates

Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities

Money launderer accused of stealing seized crypto while in prison

Most data brokers won’t tell you what happened to your deletion request

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections

New U-Boot flaws could enable stealthy firmware attacks

New York Bans Smart Glasses Across 1,240 Courts

NHS Warns Staff Over Unauthorized Access to Patient Data

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers

Only 28% of financial workforce Multi-Factor Authentication (MFA) is phishing-resistant

Phishing attacks on the rise, but staff training can dramatically reduce risk

Premier Select Sires Data Breach Exposes SSNs

Progress urges ShareFile customers to shut down servers over "credible" threat

Ransomware Leader Emerges as June 2026 Cyber Attack Volumes Climb Worldwide

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks

Ransomware negotiator helped hackers squeeze victims for bigger payouts

Ransomware negotiator hired to represent victims was working for the attackers

Ransomware Negotiator Jailed for Leaking Victim Secrets to BlackCat Hackers

Ransomware Negotiator Sentenced for BlackCat Ransomware Operators to Attack Victims

Ransomware Negotiator’s Insider Betrayal Cost 5 Clients $75 Million, Earns 70-Month Sentence

Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018

Ransomware Used Microsoft-Signed Malicious Driver to Kill EDR: 10 Hosts Hit Before Encryption

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

Robinhood Impersonation Campaign Uses Callback Phishing and Phone-Based Social Engineering

Russia opens investigation into ‘Empire of Geese,’ the anime-and-gaming community whose creators allegedly locked children’s computers with ransomware and then demanded nude photos to unlock them

Russian spy or teenage hacker? AI may soon make it impossible to tell, says Sony breach investigator

Ryuk operator pleads guilty; Blackcat/AlphV conspirator gets nearly 6-year sentence

Ryuk ransomware member pleads guilty in the US, faces 15 years in prison

Shadow AI is Your New Attack Surface

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Southeast Asian manufacturing industry faces high cyber attack risk

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking

Sysdig uncovers first documented agentic ransomware operation

Thailand: Russian hacker arrested in Phuket pleads not guilty after extradition to US

The 3am alert nobody answers: Why South African SOCs are buckling under modern threats

The Most Active Ransomware Group: Who Are The Gentlemen?

There was a data breach at the company which bought Taylor Swift’s master recordings

Third US Security Expert Sentenced to Prison for Helping Ransomware Gang

Todd, Hamaker & Johnson confirms ransomware attack

Toronto Legal Firm Data Breach: Protect Your Information

Ubiquiti Fixes Critical CVE-2026-50746 and Multiple UniFi OS Vulnerability Flaws

UK Regulator OFCOM Targets Scam Ads With Tough New Rules for Big Tech

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals

Why are some Ransomware Negotiators joining hands with Cybercriminals

Windows Process Parameter Poisoning Enables Low-Visibility Shellcode and DLL Injection

Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clients

X-Copper legal firm says June data breach may have accessed personal information

Zimbra urges customers to patch critical web client XSS flaw

9th July

12 Million Impacted by Data Breach at Japanese Telco KDDI

75% of CISOs Fear Executives Don’t Understand Cybersecurity Risks Employees Face

5,811 arrests, $293 million seized over social engineering scams

A Hacker Used AI to Compromise an AWS Cloud Environment in Just 72 Hours

A single malware file can outweigh an entire AI dataset

Accenture confirms breach after hacker steals 35GB of source code and other data

Accenture Confirms Intrusion After Hacker Claims 35GB Data Breach

Accenture confirms security incident after hacker claims source code theft

Accenture faces massive data breach that could put clients at risk

Accenture Hit by Data Breach, Hacker Claims Theft of 35 GB Source Code

Accenture responds to data breach following hacker claims

AdaptHealth says hackers exfiltrated patient data in social engineering attack

Agentic Botnets Attack Uses HalluSquatting to Hijack AI Coding Assistants

Agentic Ransomware Registers First Major Hit

AI agents are behaving more like hackers. Security teams say that's just the beginning

AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining

AI Ransomware That Adapted on the Fly, What JadePuffer Reveals About the Next Threat

Aitkin County Health and Human Services (HHS) Data Breach Affects 83,114 Individuals

All about JadePuffer and why world’s first AI-ransomware attack needed a human

AssuranceAmerica confirms data breach affecting 6.9 million driver’s licenses

AssuranceAmerica Data Breach: 6.9 Million Driver’s License Numbers Exposed

AssuranceAmerica Data Breach Exposes 6.9 Million Drivers

AssuranceAmerica Data Breach Exposes Nearly 7 Million Drivers

AssuranceAmerica data breach exposes records of 6.9 million drivers

AssuranceAmerica Data Breach via Compromised Employee Account Exposes 7 Million Driver’s License Numbers

Australia & New Zealand phishing risk drops after training

Carlyle Senior Care Data Breach Affects 4,060 Individuals

CERT Warns of Unpatched Tenda Firmware Backdoor Allowing Admin Access

China Flags Alleged Backdoor in Anthropic’s Claude Code, Citing Data Transmission Risks

China Warns of Claude Code ‘Backdoor’ Security Risk

Chinese-Funded Interpol Cybercrime Crackdown Leads to 5,800 Arrests

CitrixBleed 2 exploited in repeatable attack chain culminating in DragonForce ransomware, researchers find

Class action investigation launched following AssuranceAmerica data breach

Connecticut: Department of Children and Families (DCF) staffers' emails breached in phishing attack

Connecticut Department of Children and Families (DCF) says phishing attack compromised emails from two employee accounts

Coupang Data Breach Pushes Korean Retailers to Prioritize Information Security

Critical bugs enable hackers to take control of Ubiquiti devices

Crypto User Loses $999,999 in USDT to One Phishing Signature: How to Stay Safe

Cybercriminals Plant Malicious AI Agents in Open Source Tool Repositories

Data breach costs 23andMe $46.75 million in court-approved settlement

Data breach hits car insurance provider

Deutsche Bank probes supplier cyber incident after ransomware gang claims breach

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Drug and Alcohol Treatment Services Settles Data Breach Litigation

Ethereum phishing scam drains nearly $1 million from crypto wallet

Ethereum User Loses Nearly $1 Million USDT in Phishing Scam

EU drags 4 nations to court over cybersecurity law they ignored for months

EU takes member states to court over unimplemented cybersecurity law

Europe launches AI test platform to find cybersecurity flaws in hospitals, banks, and power grids

European Parliament Rejects Motion to Block Chat Control Extension Proposal as Privacy Concerns Continue

Everest Ransomware Claims 1 TB Data Theft But Encryptor Shows No Exfiltration Code

Everest Ransomware Uses Wake-on-LAN to Wake Dormant Hosts Before Encryption

Extortion crew hijacks Microsoft 365 accounts via fake passkey setup

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Fake Chinese VPN Drops GoodPersonRAT With Keylogging, Proxying, and Telegram Theft

Fake IT Helpdesk Attack Uses Microsoft Teams to Push SNOW Malware Patch

Fake Microsoft Passkey Flow Uses BIP-39 Seed Phrase Distraction During Account Takeover

Former DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail

Friendly Fire Exploit Shows AI Coding Agents Can Be Tricked Into Running Malicious Code During Security Reviews

From Zero-Day to Zero-Hour: How AI Compresses the Vulnerability Lifecycle

Ghost Phishing Emerges: EvilTokens Campaign Hides Malicious Pages Until They Materialize in Victims' Browsers

GhostApproval Flaw Hits Six Major AI Coding Assistants

GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

GitHub Copilot Backends Produce Unsafe Code Outputs Through Workflow Jailbreaks

GitLab Patch Release Fixes Affecting Community Edition (CE) and Enterprise Edition (EE) Installations

GodDamn Ransomware Rebrands From Beast and Uses PoisonX Driver to Disable Defenses

GodDamn Ransomware Uses PoisonX to Blind Security Software

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses

Google Chrome Update Fixes 27 Security Flaws, Including Critical Use-After-Free (UAF) Bugs

Hackers bait users with popular VPNs, but fake installers lead to complete compromise

Hacker claims sale of alleged Nike customer database with millions of records

Hackers Stole Then Deleted Mount Royal University Data, Students Get No Credit Monitoring

Hackers Use Device Code Phishing to Replay Sessions and Register Multi-Factor Authentication (MFA) for Persistence

Hong Kong: Securities and Futures Commission (SFC) mandates phishing-resistant login, bans one-time passwords for brokers

Hong Kong Securities and Futures Commission (SFC) Bans One-Time Password (OTP) Logins on Crypto Platforms Over Phishing Rise

Hungry hacker who hit London's transport network busted after food delivery order

India: Cyber attack suspected as Kerala Police internal file system goes offline

Infoblox Uncovers Long-Running Fake Software and VPN Campaign That Turns Victims’ Devices Into Proxy Nodes

Injective SDK on npm infected with cryptocurrency wallet stealer

Insurance company AssuranceAmerica exposes 6.9 million drivers following major data breach - here's what we know

JadePuffer: the first case of a full-fledged autonomous cyber attack using agent AI

Latvian forestry company still restoring systems weeks after ransomware attack

LocknLock Fined 500 Million Won Over 1.3 Million-User Data Breach

Madison Square Garden tracked the rich and famous, kept a record of who’s gay

Malicious AI agent skills can slip past the scanners built to stop them

Malicious npm and PyPI Packages Target Payment Developers With Fake SDK Facades

Messaging fraud trends point to smarter attacks, stronger blocking

Meta's New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images

Microsoft 365 Users Targeted in Entra Passkey Voice Phishing Attack

Microsoft details GigaWiper destructive backdoor assembled from older tools

Microsoft expects more Windows security updates from AI-discovered flaws

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Microsoft patches RoguePlanet Defender zero-day vulnerability

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Millions Exposed: AssuranceAmerica Data Breach Spills 7 Million Driver's License and Insurance Records

Moody Bible Institute investigates data breach after cyberattack

Mount Royal University Confirms Data Stolen in Ransomware Attack

Mount Royal University hit by ransomware attack, data stolen and deleted

New AI Security Charter Backed by Over 70 Cyber Firms

New Forg365 phishing platform uses AI to target Microsoft 365 accounts

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

New Helix vishing group emerges in SharePoint data theft attacks

New Jersey Cyber Attack May Have Exposed Patient Data

NHS boss warns staff over 'disgraceful' patient data breach after zoo attack

NHS Forth Valley admit personal details of 150 women shared in data breach

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

O-UNC-066 Vishing Campaign Abuses Microsoft Entra Passkey Enrollment

Ohio dialysis provider says data breach exposed patients’ and employees’ sensitive data

Oregon business impacted by ransomware attacks that garnered $15 million in bitcoin

Palo Alto PAN-OS Buffer Overflow Flaws Could Let Attackers Execute Code

Police arrest 5,800 suspects in global anti-fraud crackdown

Ransomware ecosystem grows, but ‘four-headed monster’ dominates

Ransomware Victims Rise 43% as AI Becomes a Productivity Tool for Threat Actors

Signature Healthcare Data Breach Compromises Patient Information

Teenager uses ChatGPT to breach Bandai’s streaming service

The fake report message that ends with a stolen Reddit account

The Good Hackers Security Leaders Can’t Afford to Ignore

The Hidden Security Risks of Reduced Summer IT Coverage

The internet’s weirdest hacking bot: tries to force its way into servers, begs for help to escape Belarus

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Universidad de Monterrey (UDEM) Database Allegedly for Sale on Underground Forum

US agency pays $1 Million ransom after month-long negotiations

Vibe-Coded Malware Caught in Active Directory Attack

When cyberattacks turn physical: Threats of violence in digital extortion

Wireshark 4.6.7 Fixes 12 Security Issues Across SSH, IEEE 802.11, Catapult DCT2000 and Other Protocols

Wireshark 4.6.7 patches a dozen security flaws

8th July

6 Data Breaches to Know About in June 2026

6.9 million US driver's license records exposed in latest insurance breach

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

17 npm, PyPI Packages Found Typosquatting Payment SDKs PaySafe, Skrill, and Neteller

23andMe breach victims land $47 million payout from firm’s new owner

23andMe data breach victims to receive $46.75 million payout

23andMe data breach victims win court approval for a $46.75 million settlement

35GB of Accenture secrets appear on hacker forum, company confirms incident

A Hacker Claims 35 GB of Accenture Source Code. The Company discloses the data breach

Accenture Acknowledges Security Breach Following Claims of Stolen Data Sale

Accenture acknowledges security incident following 35GB data theft claim

Accenture Confirms Breach After Hacker Lists Stolen Data

Accenture Confirms Breach After Hackers Claim Source Code Theft

Accenture Confirms Breach After Threat Actor Claims Source Code Theft

Accenture Confirms Data Breach After Hacker Claims Source Code Theft

Accenture Confirms Security Breach as Hacker Claims Theft of 35GB Source Code, Sensitive Credentials

Accenture Confirms Security Incident After Hacker Claims Data Haul

AdaptHealth Investigates Data Breach After Social Engineering Attack, Possible Link to ShinyHunters Emerges

Agentic ransomware removes hackers from the keyboard

AI agent carries out full ransomware attack for first time, researchers say

AI Coding Agents Are Triggering Security Alerts Designed to Catch Attackers, Sophos Reports

AI has changed phishing, not the importance of human judgment

AI increases the dangers of phishing and cyberattacks, says Dutch data authority

AI increases the risks of cyberattacks

An AI Agent Ran a Ransomware Attack by Itself. It Forgot to Save the Key

Another massive data breach exposed millions of driver’s license numbers

Armored Likho Hits Government, Energy Sectors With BusySnake Stealer

Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users - Microsoft device identifier is just one digital fingerprint in a software world rife with them

Attackers Can Abuse Claude Desktop to Execute Commands on Victim Machines

Attackers using Langflow flaw for credential harvesting (CVE-2026-55255)

Australia: Teletrac Navman GPS data advertised on hacking forum

Behind JadePuffer: The First Agentic AI Ransomware

Belgium: Plan to combat phishing - lower transfer limits, a waiting period before limits are increased and faster complaint processing

Canada: Belleville rectifying data breach made through GIS mapping system

Canada: Hacker accessed ‘limited amount of data’ during cybersecurity breach, City of Thorold says

Canada: Proposed class action targets school board over Rosemere High School data breach

Canada’s Communications Security Establishment (CSE) report details rising cyber threats, ransomware investigations, critical infrastructure protection efforts

Cash App owner to pay $45 million to settle allegations of lax security

Centrelink phishing email leads to fake myGov login and identity‑verification pages

China Claims “Backdoor” Security Risk in Claude Code, Anthropic Responds

China issues 'backdoor' security alert over Anthropic's Claude Code

China-Linked APT Expands Proxy Network With New Malware

China-Linked UAT-7810 Expands Operational Relay Box (ORB) Network With New LONGLEASH Malware

Chinese solar inverters can be remotely hacked to shut down rooftop panels, research suggests

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to Known Exploited Vulnerabilities (KEV)

CISA orders federal agencies to patch max severity ColdFusion flaw by Friday

CISA orders federal agencies to prioritize patching Langflow authentication bypass flaw

Cloud AI Infrastructure Attack Framework (CAI) Cloud Worm Steals Credentials, Kills Rival TeamPCP and PCPJack Malware

Cybersecurity and the Gap Between Skill and Ability

Data Security Incidents Announced by Park Dental Research Corp; Wabi Sabi Behavioral Health Center

DeepSeek accidentally built a working ransomware strain, experts note, 'What we are witnessing is a fundamental shift in how novel cyber attacks are born'

Deutsche Bank faces new breach claims after ransomware group posts employee data samples

Digital Asset Exchange Alliance (DAXA) Alerts Public to Phishing Sites Targeting South Korean Crypto Exchange Users

Entra passkey enrollment vishing targets Microsoft 365 users

EU requires all new cars to have cameras facing the driver’s face to monitor their behavior

European cloud provider Nextcloud leaks 367K records, exposing staff and clients

Experts warn of the 'first documented case of agentic ransomware' - dangerous JADEPUFFER attack run entirely by an LLM

Fake Job Offers Impersonate Netflix, OpenAI, and FIFA to Steal Google Credentials

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Finding Flaws Got Easy. That Broke How We Measure Exposure

First AI-Agent Ransomware Destroyed Data Even Payment Could Not Recover

First AI-powered ransomware attack detected - self-corrected coding errors in 31 seconds

First Financial Security Paying $1,200,000 In Data Breach Settlement For October 2023 Incident

Forget GDID: your PC has a hardware-baked permanent identifier that you cannot erase

Ghost Phishing Campaign Exploits Browser Blind Spot to Target Microsoft 365 Accounts

GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code

Greek victims file lawsuit against Intellexa over Predator spyware

Hacker Claims Accenture Breach Exposed Source Code, SSH Keys, and Azure Tokens

Hackers exploit Roundcube flaw to spy on academic researchers

Hackers Turn Facebook Messenger Chatbots Into Phishing Weapon to Steal Meta Business Accounts

How Faster Cyber-Attacks Are Reshaping Enterprise Cybersecurity Strategies

HR Firm in Wisconsin Settling Data Breach Lawsuit For $775,000 In Cash Payouts To Victims

Indian Income Tax Department Phishing Lure Deploys Gh0st RAT and AsyncRAT Implants

JadePuffer: Did ‘First AI-Driven Ransomware’ Still Needed Human Planning?

'JadePuffer' AI Executes World's First Fully Autonomous Ransomware Attack

Januscape Flaw in Linux KVM’s MMU Code Enables VM Escape on Intel and AMD

Job Recruitment Phishing Campaign Uses Major Brands to Steal Google Credentials

Judge approves $46.75 million payout for 23andMe data breach victims

Kaspersky uncovers new malware linked to Gentlemen ransomware

Lufkin accounting firm listed by Akira ransomware group

Lumexa data breach exposes medical records of Butte residents

Maritime cyber incidents rise 17% as phishing, AI and Operational Technology (OT) risks reshape the threat landscape

Mercado Libre hit by ransomware attack

Mercor ups cybersecurity after data breach investigation

Mid-South Pulmonary Data Breach Exposes PHI and PII

Millions of Driver’s License Numbers Exposed in Massive Data Breach

Mount Royal University confirms breach as hackers claim attack

Mount Royal University Data Breach Confirmed After June Cyberattack Exposes Student and Employee Files

National Cyber Security Centre (NCSC) Touts National Scale, AI-Powered “Cyber Shield” for Defense

Nearly 7 Million Driver’s License Numbers Were Exposed in Another Data Breach

New Ghost Phishing Wave Is Breaking Traditional Email Security

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner

New phishing campaign impersonates to steal Google credentials

New Research Details How FBI Uncovered Alleged Scattered Spider Member

Oracle Health Data Breach Hits Over 2.6 Million Individuals

Philadelphia Law Giant Fooled By Fake IT Call, 57,000 Clients Left Exposed

Pro-Russian hacker caught: How he coordinated attacks on airports, banks and government sites

RedWing Android Spyware Sold as a Service on Telegram

Roland Machinery Data Breach Exposes Social Security Numbers and Fiancnial Account Info

Russia targets Elon Musk's Starlink with powerful jammers to stop Ukraine drones

Scammers Have Found a Vulnerability in Email: How the New Phishing Scheme Works

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

Screaming demon shrimp flowers fuel AI seed scams on eBay, Etsy and Amazon

Simple Human Error Leads to Major Blank Rome Data Breach

Spain arrests alleged supporter of pro-Russian hacktivist groups after FBI tip

Sysdig Discovers First Fully Autonomous AI Ransomware Attack

Taiwan charges two businessmen over alleged role in Chinese espionage campaign

Targeted phishing attacks on manufacturing companies

Telco giant KDDI says data breach affects over 12 million people

The first 5 cybersecurity measures every small business should take

‘The Gentlemen’ Ransomware Group Aggressively Expands Technical Arsenal

The state of New York bans smart glasses

The teenage millionaire hacker from Tower Hamlets who took down Transport for London (TfL)

The Verification Step Is the New Account Takeover (ATO) Battleground in 2026

This latest frightening ransomware attack was orchestrated entirely by an LLM

This Massive Data Breach Compromised Nearly 7 Million Driver's Licenses

Thousands of malicious AI skills found capable of stealing data, running malware

Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

Ubiquiti warns of new max severity UniFi OS vulnerability

Ukraine: Phishing links are being spread on the Internet under the guise of payments for power outages

United HealthCare Data Breach Affects 34,574 Individuals

UNK_MassTraction Exploits Roundcube Flaws Against US, Canadian Universities

Unsafe Ransomware allegedly targets Deutsche Bank

US Army websites defaced in 404 hijacking attack to post messages about Trump

Victims of 23andMe data breach to get $47 million payout, judge rules

Why Bangladesh’s new data protection law may fail to protect your data

Windows Device ID in Hacking Case Raises Questions About Enterprise Telemetry

World’s first agentic AI ransomware attack, and an unchartered territory

7th July

"35 GB of Accenture for Sale": Hacker claims source code and credentials theft

A hacker’s arrest just revealed how Microsoft can track your Windows device

Accenture confirms breach after hacker offers stolen data for sale

Accenture Data Allegedly Listed for Sale on Hacking Forum, 35GB Source Code Claimed Stolen

Agentic ransomware attacks show LLM ‘narrating its own intent the entire way’

AI agent carries out 'first' ransomware attack

AI agent executes first known ransomware attack, but the humans haven’t left the building

AI Agent Used in Real-World Ransomware Attack, Sysdig Researchers Say

AI can now run ransomware attacks alone - as long as a human sets it up first

AI Security Incident - JadePuffer Ransomware Leverages AI Agent to Automate Attacks

An AI Agent Ran a Ransomware Attack Almost Entirely by Itself

AnyDesk Phishing Attack Uses Scheduled Task Persistence and Artifact Deletion to Evade Detection

Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)

Australia records highest data breach notifications since 2018

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and Privileged Remote Access (PRA)

BeyondTrust Patches Critical Remote Support and Privileged Remote Access Flaws

BeyondTrust warns of critical flaws in remote access software

Big Brand Jobs Scam Targets Marketing Pros' Google Accounts

Blank Rome hit with twin class actions over data breach affecting more than 57,000 clients

Blank Rome Hit With Two Class Actions After Data Breach Exposes 57,000 Clients

Blank Rome sued over data breach that exposed more than 57K people's information

Britain plans to build autonomous AI 'Cyber Shield' to defend nation

Calibrated Healthcare Settles Class Action Data Breach Lawsuit

Can You Trust Your Staff To Spot A Sophisticated Phishing Email?

Canada's Spy Agency Reveals Secret Cyber Strikes on Drug Traffickers, Extremists and Ransomware Networks

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Chinese hackers develop LONGLEASH malware to expand Operational Relay Box (ORB) network

Chittenden Solid Waste District to Recoup Much of the $3 Million Lost in Phishing Scheme

Court Approves $46 Million 23andMe Settlement For 2023 Data Breach Victims

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

Critical Linux KVM bug lets hackers take over servers for 16 years

Cybercrime Statistics in UK for 2025 - How to Protect Your Business

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Delivery drivers losing tens of thousands to phishing scam across Australia

Department of Homeland Security Investigating a Data Breach

Deutsche Bank data breach fears rise after ransomware group posts “evidence”

Device Code Phishing Abuses Microsoft OAuth 2.0 to Steal Tokens

Dutch spy agencies are training AI with citizens’ data, watchdog warns

EtherRAT Campaign Uses Fake System Administrator Teams Call to Compromise Employees

Fake Interview Phishing Campaign Impersonates Top Brands to Steal Gmail Credentials

Fake recruiters from Adidas, Netflix, Adobe are stealing passwords

FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member

FBI helps Chittenden Solid Waste District recover $2.3 million lost in phishing scam

First AI Ransomware Attack Still Needed Human Oversight

Five Eyes Intelligence warns of rising AI-Powered Cyber Attacks on Businesses and Governments

Gemini Live API Flaw Lets Attackers Inject Code Execution Through Unconstrained Tokens

GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data

GitLost Attack Uses GitHub Issues to Exfiltrate Private Repo Data Through AI Agent Comments

Gmail Credential Phishing Campaign Uses Nested Redirects Across Legitimate Platforms

Hacked, leaked, and held for ransom: The worst breaches of 2026 so far

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Hackers Use Recruiter Phishing Emails and Fake Career Pages to Harvest Gmail Logins

Hackers Use uxtheme.dll Sideloading to Launch Cavern Agent on Compromised Systems

Hackers Use VNIIR-Themed Phishing Email to Install AnyDesk for Persistent Remote Access

Hacktivists call out Trump by hacking and defacing US Army websites

Heart of America Eye Care Data Breach Potentially Exposes PHI

Hidden backdoor in Tenda router firmware grants admin access

India probes Tata Electronics data breach linked to iPhone 18 Pro leak

Industry Alarmed as First Agentic AI Ransomware Attack Is Discovered, but There’s a Catch

Institute of Chartered Accountants of India (ICAI) denies data breach, calls hacking claims 'false and malicious'

Institute of Chartered Accountants of India (ICAI) Denies Student Records, Exam Data Breach; Warns Against Rumours

Iran-linked hacker group targets Israeli government agencies

Iran-linked hackers used Israeli IT providers to target government bodies

'It’s a marker of where extortion tradecraft is heading': Cyber experts say they've identified the first case of ‘agentic ransomware’ - but there’s a catch

JadePuffer: Sysdig Sniffs Out the First Agentic Ransomware

JADEPUFFER: The First Documented Agentic AI Ransomware Operation

JadePuffer Signals a New Era of AI-Driven Ransomware

Japanese Teen Arrested Over Bandai Channel ChatGPT-Assisted Cyberattack, Possibly Exposing up to 1.3 Million Users

Judge approves $46.75 million payout for 23andMe data breach victims

KDDI Corporation Breach Impacts 12.2 Million Customer Emails

Lake Region Healthcare reports data breach exposing patient information

Major Japanese telecommunications providers says cyberattack exposed 12 million emails

Markel Insurance Data Breach Exposes Both PHI and PII

Meta just launched a new AI generator, Muse Image, and users are already pushing back over use of their photos

Microsoft Edge Use-After-Free Flaw Lets Attackers Execute Code Remotely

Microsoft Windows telemetry identified hacker despite VPN use

Mount Royal University hit by ransomware attack on student and staff files

Mount Royal University ransomware attack compromised student, employee data

Mount Royal University (MRU) student, staff data stolen in ransomware cyberattack

New Iran-linked hacker group targets Israeli government agencies

New Iran-Linked Hacker Group Targets Israeli Government Networks

New Januscape Linux flaw allows VM escape on Intel, AMD devices

New TrojPix technique uses screen pixels to exfiltrate data from air-gapped computers

Nonprofits Are Quietly Becoming a Favorite Ransomware Target, and Most Can’t Afford to Notice

North Los Angeles County Regional Center Notifies Individuals About November 2024 Ransomware Attack

Notorious hacker's arrest sparks backlash over Microsoft’s excessive device tracking

Ohio Living Data Breach Compromises Medical Records and SSNs

Phishing campaign impersonates leading companies and steals Google accounts

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

Public Proof-of-Concept (PoC) Released for SharePoint Remote Code Execution Vulnerability

RedWing Malware-as-a-Service (MaaS) Packages Android Bank Fraud as a Telegram Rental Service

Researchers detect the world's first AI-driven ransomware attack: here’s what you need to know

Researchers Log the First Ransomware Attack Run Entirely by AI Agent

Researchers track down world's first AI agent ransomware attack, here's what you should know

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

Scattered Spider’s Structure More Like a Cybercrime Collective Than a Unified Gang

SOCRadar links FortiBleed campaign targeting manufacturers to Lynx and INC ransomware attacks

Somerville company among victims of Russian phishing campaign headed by man arrested in Thailand and now facing charges in Boston, FBI says

Sophos Flags Vect-TeamPCP Cybercriminal Ransomware Alliance

South Korea: Unsolved Fraud Cases Surge 11-Fold Nationwide

Spain arrests suspected hacker linked to Russian hacktivist campaign

Spain arrests suspected member of pro-Russian hacktivist groups

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers

Sysdig Documents First Agentic Ransomware Attack

TeamPCP Supply Chain Attacks Feed VECT Ransomware With Stolen CI/CD Credentials

Teen allegedly used ChatGPT to wipe out 46,000 anime accounts

The 72 hours that decide a ransomware attack

The ‘first’ AI-run ransomware attack still needed a human: New details emerge

The First Ransomware Attack Run From Start To Finish By An AI Agent

The Gentlemen Ransomware Uses 21 Remote Execution Techniques to Spread Across Networks

The Gentlemen Ransomware With Custom EDR/AV Killers Scaling Faster to Attack Industries Worldwide

TriWest Data Breach Exposes Health Information

Two arrested over credit card phishing - as The Netherlands is named Europe's worst for payment fraud

Ubiquiti Disclosed 25 Security Vulnerabilities Including Injection and DoS Flaws

UK cyber pledge draws only a handful of top firms despite ministerial appeal

UK Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories

US cyber agency uses Anthropic's Mythos to hunt for government code flaws

VECT and TeamPCP Reverse Ransomware Kill Chain With Supply Chain Credential Theft

What the First Autonomous AI Ransomware Attack Means for CISOs

Where Organizations Fall Short with Multi-Factor Authentication (MFA)

Why Bangladesh’s new data protection law may fail to protect your data

Why The Gentlemen ransomware is a test of identity and recovery controls

Why this fully agentic ransomware attack is giving researchers nightmares

Windows Device Identifier Helped FBI Trace and Arrest Alleged Scattered Spider Member

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

YKK AP America Data Breach Exposes Social Security Numbers and Financial Account Information

Your Windows PC has a secret ID number, and Microsoft just used one to unmask a hacker

6th July

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

70,000 people affected in Singapore Land Authority (SLA) data breach

A Hacker's Arrest Reveals Microsoft Can Track Users Via a Windows Device ID

A new AI agent can hack systems and deploy ransomware without human intervention

AdaptHealth Data Breach Compromises Patient Personal and Health Info

AI agent carries out ransomware attack independently

AI agent completes full ransomware attack chain

AI Agent Conducts First Fully Autonomous Ransomware Attack

AI agent exploits Langflow in first fully autonomous ransomware attack

AI Agent Pulls Off Full Ransomware Attack Without Human Help, Researchers Say

AI Can Forge Documents in Minutes - “Looks Right” Is No Longer Enough

AI Independently Automated An Entire Ransomware Attack – Should We Be Concerned?

AI-Speed Attacks Are Forcing a Rethink of Incident Response

Attackers Use Password-Protected PDF Lures to Launch Microsoft Device Code Phishing

Australia: Data Breach Alerts Hit Record High in 2025

Australia: Film festival dumps address requirement after hack

Automated AI Phishing Networks Hijack Enterprise Systems Using Match Hype

Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

Bad Epoll Zero-Day Linux Kernel Flaw Lets Unprivileged Users Escalate to Root

Be careful entering one-time codes in Microsoft's login flow, you could be getting phished

Belgium: Police arrest 19-year-old suspected key player of international phishing network

Canada’s spy agency conducted state-authorized cyberattacks against drug traffickers and ransomware gangs

Canadian spy agency reports hacking three criminal groups in 2025

Canadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year

Centers for Dialysis Care Data Breach Impacts 8k People

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

ClickFix spear-phishing technique tops Q2 malware charts

Credit Acceptance Corp. Data Breach Exposes SSNs

Cyber Insurance Demand Jumps in 2026 as Ransomware Costs Keep Climbing

Cybersecurity Experts Warn: Your Biggest Risk May Be a Vendor, Not a Hacker

Cybersecurity firm says it found 'the first documented case' of AI agentic ransomware

Department of Homeland Security (DHS) Confirms Breach of Homeland Security Information Network

Fake Booking.com travel credit scam targets travelers

Fake IT support calls on Microsoft Teams push EtherRAT malware

FIFA World Cup Phishing Scam Uses Fake Reward Pages to Steal Credit Card Data

Finding focus: Strategic approach to cyber security for small and medium companies

First 'agentic ransomware' run entirely by a large language model discovered

First AI-run ransomware attack highlights emerging cyber threat landscape

First Autonomous AI Ransomware Attack Confirmed by Security Researchers

First Fully Autonomous AI Ransomware Campaign Raises the Stakes for Enterprise Cybersecurity

Gaslight Malware Abuses Prompt Injection to Trick Automated AI Cybersecurity Agents

Gibraltar: Attorney General denies Royal Gibraltar Police (RGP) request to prosecute former Police Commissioner for possible data breach

Go-Based Gentlemen Ransomware Uses PsExec, WMIC, and PowerShell Remoting for Network Propagation

Hackers Use Fake World Cup Reward Pages to Capture Names, Addresses, PAN, CVV, and Expiry Data

Hackers Use Trusted Microsoft Domain and One-Time Codes to Hijack Corporate Accounts

Henry Rossi Data Breach Exposes Social Security Numbers

Hong Kong: Two investors lost over $550k in fake Futu Securities phishing attack

How to prioritize AI agent security by business impact

INC Ransom Adds City of Acworth, Georgia, and City of Oak Park, Michigan, to Dark Web Leak Site

Indirect Prompt Injection Attacks Hide Malicious Instructions in Websites to Target AI Agents

Indirect Prompt Injection in Web Content Targets AI Agents

Institute of Chartered Accountants of India (ICAI) Dismisses Chartered Accountant (CA) Exam Data Breach Claims, Calls Viral Notice 'False and Malicious'

Institute of Chartered Accountants of India (ICAI) dismisses claims of data breach, says members' and students' records remain secure

Institute of Chartered Accountants of India (ICAI) dismisses viral 'data breach' notice as fake, says records of students and members remain secure

INTERPOL Report Warns of Sharp Rise in AI-Powered Cybercrime Across Asia-Pacific

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

JadePuffer: The First Complete LLM-Driven Ransomware Attack

JADEPUFFER AI Can Break into Servers and Launch Ransomware All on its Own, Researchers Warn

JadePuffer Demonstrates How AI Agents Can Automate Ransomware Attack

JadePuffer seen in the wild: it may be the first fully autonomous ransomware

Japanese teen arrested over cyberattack that disrupted anime streaming service

Kaspersky Details Microsoft Device Code Phishing Attack Using OAuth Flow

KDDI Suffers Massive Data Breach: Up to 12.23 Million Email Addresses, 7.61 Million Passwords Leaked via ISP System Vulnerability

Lake Region Healthcare Data Breach Exposes Social Security Numbers and Health Information

Major medical device manufacturer notifies nearly 4 million of breach

Max severity Adobe ColdFusion flaw now exploited in attacks

Meet JadePuffer: The AI Ransomware That Can Hack Systems Without Human Help

Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page

Microsoft device telemetry key to unmasking alleged Scattered Spider hacker

ModSecurity Flaws Let Attackers Bypass WAF Rules and Request-Body Inspection

Moody Bible Institute Data Breach Exposes 2.3 Million Email Addresses

Moody Bible Institute data breach exposes 2.3 million individuals

Moody Bible Institute Data Breach Exposes 2.3 Million Users’ Personal Data

National Crime Agency (NCA) Issues Warning to Parents As Shared Child Photos Exploited by AI Tools

New AI agent can hack systems and deploy ransomware without human help

New ClamAV security patch closes seven scanner bugs dating back two decades

New Iran-Nexus Hacking Group Targets Israel Government and IT Sectors

New Java-Based QuimaRAT Malware-as-a-Service (MaaS) Built to Run on Windows, Linux, and macOS

New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

Nissan data breach in Oracle PeopleSoft attack offers cybersecurity lessons

'No hacker needed': New AI ransomware can automate database attacks from start to finish, warns cybersecurity firm

NTN Bearing Data Breach Compromises Information of Individuals in U.S.

OAuth, guest accounts, and weak MFA drive SaaS risk

One of Windows' most hated features just helped catch a 19-year-old hacker

Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

Opera GX Flaw Let Sites Auto-Install Mods to Steal Data

Opera GX Universal CSS Injection Flaw Enabled Zero-Click XSLeak Attacks

Ousaban Banking Trojan Uses Daily-Changing DDNS Domains to Hide C2 Infrastructure

Pennington County, South Dakota, Closes Public Offices July 6 After Cybersecurity Incident Ahead of July 28 Runoff Election

Personal details of about 70,000 people exposed in Singapore Land Authority (SLA) cloud security incident, investigations ongoing

Phishing Campaigns Now Adapt to Victims’ Devices, Raising the Stakes for Enterprise Security

Phishing poses as big-brand job interview to steal Google accounts

Ransomware Campaign Uses Fake Interpol Notices to Target Small Businesses

Ransomware without borders: Why cyber resilience has become a global business imperative

RedLine C2 Pivot Reveals Seven Fraudulent Domains Used in Maritime Phishing Attacks

Renting The Exploits: How Fraud-As-A-Service Platforms Turned Digital Crime Into A Subscription Business

Researchers Claim First Fully Agentic Ransomware: JadePuffer

Researchers Discover First Documented Case of Agentic Ransomware

Researchers Uncover First Fully Agentic AI Ransomware Attack

Russian hackers expose UK government logins in FortiBleed credential breach

Securing the inbox: Where identity, brand and security meet

Seven FatFs Vulnerabilities Exposing Embedded Devices to Code Execution

SilverFox ValleyRAT Campaign Uses Eight-Stage Chain to Deploy Kernel Rootkit

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Software Is Now Written at the Speed of Thought. Security Isn't

Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT

Sysdig clocks first documented case of agentic ransomware

T.A. Solberg Data Breach Exposes Social Security Numbers and Health Information

Teenage Hacker Arrested After Using ChatGPT To Crash Major Streaming Network

The Biggest Cybersecurity Mistake Many Small Businesses Don't Realise They're Making

The Canvas Breach: Lessons for SaaS Security Governance

The ‘first’ AI-run ransomware attack still needed a human

The first known ‘agentic ransomware’ has arrived

The future of payment fraud could be automated

The Gentlemen Ransomware Uses 21 Remote Execution Techniques to Encrypt Entire Networks

The Gentlemen Ransomware-as-a-Service (RaaS) Turns Infected Hosts Into SMB Distribution Points for Rapid Spread

The operational challenge: What the Mackay Sugar cyber attack reveals about Australia’s cyber readiness

The Two-Minute Exploit: How AI Closed the Skills Gap for App Attackers

This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

Types of Cyberattacks: The Complete 2026 Guide to Threats and Defenses

UK Foreign Office logins stolen in Fortibleed cyberattack, sold on dark web

UK Government Credentials Reportedly Stolen in FortiBleed Campaign Targeting Fortinet Devices

Ukrainian media outlets now among 'priority targets' for Russian hackers

US law firm Blank Rome faces class action over data breach

Vect and TeamPCP Cybercrime Groups Link for Ransomware Hits

Veeam Backup RCE Flaw Lets Low-Privileged Domain Users Gain SYSTEM Access

What Is BYOD? 9 Security Risks Businesses Are Racing to Fix in 2026

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

Why Ransomware, Identity Theft Top Nigeria’s Growing Digital Threats

Windows 11’s User Tracking Helped FBI Arrest Notorious Spider Hacker

Women's Wellness of Southern Delaware discloses data breach tied to former provider

World's First AI Agent Ransomware Attack Comes to Light: Automated Crime Chain Without Human Intervention