Data Breaches Digest - Week 41 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 5th October and 11th October 2026.

📅 6th October

8.8 Million Impacted by Data Breach at Denmark’s Central Person Register

8.8 Million People Affected in Major Denmark Data Breach

Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees

Accenture contractor removed from FBI following damaging data breach

Alleged Hacker Attack on Online Retailer ASOS

ASOS confirms data breach after “HACKED” in-app notifications

ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise

ASOS customers receive threatening notification in apparent cyber attack

ASOS customers sent ‘hacked’ alert as shares plunge after warning echoes M&S cyber attack

ASOS data breach: Hackers sent users a threatening message

ASOS hacked: App sends threat to customers

ASOS hacked: App users receive notifications apparently sent by hackers

ASOS hacked? A threatning 'we will leak it' alert has shoppers checking their accounts; is their data at risk and should customers delete the app?

ASOS hacked? Customers receive chilling notification claiming data was stolen

ASOS investigating if client data base is compromised

ASOS stock sinks 13% after hackers send threatening notification through its app

Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)

Atlassian Warns of Critical CVE-2026-21589 File Access Flaw in Data Center Products

China-linked TA419 targets US AI policy experts in phishing

Citizen Watch Says Data Breach at Outsourcing Partner May Have Exposed Personal Information of About 100,000 Customers in Japan

ClickFix Attack Hides VBScript Payload in Browser Cache

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Coupang CISO Apologizes for Data Breach at South Korea's National Assembly Audit; Shifts to Hardware-Based Key Management

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Critical Medical Devices Unable to Support Post-Quantum Cryptography (PQC) Transition

Cyber Threats targeting AI Experts at U.S. Legal Organizations, Universities and Businesses

Cybersecurity Awareness Month: Is AI Phishing Making Awareness Training Obsolete?

Danish data breach: Everything we know about the cyber attack that hit 8.8 million Danes

Data Breach Affects Alabama Power and Georgia Power Customers

Data breach at Denmark’s population register exposes 8.8 million people

Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)

Denmark Data Breach Exposes Names, Addresses and ID Numbers of 8.8 Million People

Denmark Says Attackers Accessed Central Person Register (CPR) Data for 8.8 Million People via Company Account

Denmark sees serious data breach affecting 8.8 million people

Denmark's Biggest Data Breach? Hackers Access 8.8 Million Central Person Register (CPR) Records

Derbyshire automotive supplier takes £46 million revenue hit after customer cyber attack

Engineer sentenced for locking over 3,000 devices on employer network

Ex-Engineer Daniel Rhyne Gets 32 Months in Prison for Sabotaging Employer’s Network and Demanding Bitcoin

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

FBI Confirms Multiple Arrests in ShinyHunters Investigation

FBI Drops Accenture Contractor After Sensitive Data Breach

FBI Removes Accenture Contractor After Data Breach Exposes Employee Information

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

FBI Removes Accenture Contractor After PeopleSoft Breach Exposes Employee Data

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

From Phishing To Quishing - How To Protect Yourself From QR Code Scams

From ransomware to data breaches: How businesses can build financial resilience against cyber threats

Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks

Gentlemen Ransomware Affiliate Uses Stolen GitLab CI/CD Secrets to Breach Dozens of Organizations

Georgia Power says hackers accessed 400,000 customer accounts

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Hacker gang says it breached Deutsche Telekom’s IT arm

Hacker Group Claims to Have Stolen Trump Mobile Customers’ Personal Data

Hackers Message ASOS Users in Alleged Data Breach

Hong Kong Broadband Network modem QR code redirected to phishing site after domain lapse

How AI-Powered Phishing Works in 2026 (and How to Stop Scams in Their Tracks)

India: Mumbai Police Recover 25 Phones in Credit Card Phishing Case

Japan collars fugitive suspect of ransomware syndicate Qilin

Japan hands over ‘Qilin’ hacker group member to Germany

Japan hands over Russian national suspected of being ransomware group member to Germany

Japan hands over Russian ransomware suspect to Germany

Japan's Nimoca reports data breach affecting 521 customers; names and addresses not exposed

Korean Prime Minister Warns of AI-Driven Phishing After Data Breaches

Massive Data Breach in Denmark Exposes Personal Info of 8.8 Million, Exceeding Total Population

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Nikkei Discloses Two Employee Cloud Account Compromises

No honor amongst thieves, as hacker betrays his own gang

Norway seeking temporary ban on smart glasses in public domain

One missed security patch: FBI kicks out Accenture contractor after data breach

OpenAI addresses medicare data breach in Australia, promises faster incident reporting

OpenAI and Anthropic tell Australia they would welcome data breach rules, weeks after rogue AI agent hacked government websites

OpenAI faces scrutiny over Medicare data breach

OpenAI, Anthropic tell Australia they would welcome data breach rules

Oracle Health Data Breach From Last Year Was Reportedly Huge

Oracle medical data breach affected nearly 20 million people

Pakistan: Phishing domains impersonate government agencies

Post Claims Sale of Over 100 Million Rakuten Member Data; Rakuten States "No Data Breach Confirmed"

Potential widescale cyber attack on ASOS but head office “unaware”

"Qilin" Hacker Group Member Held in Japan, Sent to Germany

Qantas 5.7 Million Customer Data Breach Suspect Detained in Jordan

Rakuten Drive Reports Data Breach, 15,000 Accounts' Stored Data Leaked

Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds

Ransomware attack hits University of Illinois Chicago's College of Medicine

Ransomware Group 'Qilin' Operative Detained in Osaka, Extradited to Germany

Received a 4 a.m. call? Your Telegram may be hacked 5 minutes later

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

Rogue OpenAI agents made unauthorized Wikipedia edits and millions of requests to Wikimedia

Russian hackers found in hotel chain WiFis, targeting travelers

San Francisco wants to police its people with Israeli-made tech

South Korea: Are Korea's financial defenses ready for an AI hacker army?

South Korea: Financial Supervisory Service (FSS) identifies 19 hacker IPs used in financial sector attacks, spanning 12 countries

Stay alert, stay safe: Why cyber awareness matters more than ever

Stolen IFAPME data released for free on the dark web, exposing over 700K people

Trump Mobile data breach hits family’s own cybersecurity chief

Trump Mobile data breach, BYOD gang leaks 3,615 customers' records

UK: Police Urge Passkey Use After Surge in Cybercrime Profits

Unprecedented data breach in Denmark exposes 9 million citizens

US: Plans by CISA, Department of Defense (DoD) to Protect Elections May Be Too Little, Too Late

Voice Phishing Losses Hit Record 1.26 Trillion Won in Korea

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits

Wikimedia Finds Unauthorized OpenAI Agent Activity Across Its Platforms

Wikimedia Says OpenAI’s Rogue AI Agents Possibly Behind May Wikidata Outage and Malicious Edits

World's Largest Ransomware Group Qilin Member Arrested in Japan

Your Service Desk Agents Can’t Out-Talk an AI

📅 5th October

3 ways to respond to time bomb ransomware

8 Steps to Take Immediately After Clicking a Phishing Link

16-year-old allegedly led ransomware gang behind hundreds of attacks

100,000 Alabama Power Customers Affected in Southern Company Data Breach

A Texas judge approves $177 million AT&T data breach settlement

AI slop submissions force Google to freeze its open-source bug bounty

Alabama Power says 100,000 customers affected by data breach

Alegeus Data Breach Exposes Social Security Numbers

Alleged developer of Ploutus ATM malware appears in US court after arrest

Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement

Apple iCloud Mail vulnerabilities allowed spoofed sender addresses

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple tightens macOS disk access as AI agents become more powerful

Arizona Courts Cyber Attack Exposed 30 Years of Personal Data

Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security

Belarusian hacktivists spent two years inside Russian healthcare network, researchers say

Blackstone Data Breach Exposes Social Security Numbers

Bromcom notifies customers of personal data breach affecting SSO technology

California Subpoenas OpenAI Over AI Agent Cybersecurity Breaches

CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)

Citrix NetScaler Targeted Via New Zero Day

Citrix Warns of Actively Exploited NetScaler Vulnerabilities Affecting ADC and Gateway

City of Princeton confirms information taken during data breach

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

CVE-2026-88779: Citrix NetScaler Zero-Day Exploited in Targeted Attacks

Data breach at Denmark’s national population register exposes 8.8 million people

Data Breach in Denmark Exposes Personal Data of 8.8 Million People

Data breach in Denmark leaks personal data of 8.8 million

Denmark: Data of millions compromised in hack

Denmark data breach exposes 8.8 million people’s personal data

Denmark data breach exposes Central Population Register (CPR) records of 8.8 million people

Denmark data breach exposes information of 8.8 million people

Denmark data breach exposes personal details of 8.8 million people

Denmark hacker attack exposes data of 8.8 million people

Denmark investigates major Data Breach after 8.8 million Central Person Register (CPR) records Exposed

Denmark population registry data breach affects 8.8 million people

Denmark’s population database hit by major data breach

Denmark’s Population Registry Breached, 8.8 Million Affected

Desert De Oro Foods Data Breach Impacts Sensitive Personal Info of Employees

Detained ShinyHunters hacker reportedly helping FBI track down fellow members

Dutch Ex-Hacker Arrested Over Suspected Link To FBI Breach Gang

Fake brand discounts on social media prey on shoppers’ fear of missing out

Families United Network Data Breach Exposes Social Security Numbers

Family Physicians Data Breach Exposes PHI and PII

FitnessKPI denies data breach but confirms some logs still spilled

Frontline Education Breach Impacts K-12 School District Staff

Georgia Power customer data may have been accessed in data breach, company says

Georgia Power data breach exposes info of 300,000 customers

Google Gemini-Powered PageBreak Agent Finds More Than 500 XSS Vulnerabilities

Google halts open-source bug bounty program amid AI spam surge

Google Suspends Open Source Bug Bounty Over AI-Generated Reports

Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports

Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains

Hackers Abuse Trusted Remote Monitoring and Management (RMM) Software to Bypass Suspicion and Gain Remote Access

Hackers breached Denmark's national registry, exposing data on 8.8 million people

Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

Hackers hit Denmark: 8.8 million people exposed in a massive data breach

Hackers steal 8 million citizens’ records from Danish government database

How one person’s personal information can put the whole family at risk

How Remote Monitoring and Management (RMM) abuse gives attackers a way in that looks like business as usual

India: Supreme Court Refuses To Quash Star Health Data Breach Case Against Cybersecurity Researcher Himanshu Pathak

IQVIA fined $7.8 million for failing to properly anonymize health data

Iranian hacker accused of draining 31TB from university inboxes extradited to the US

Iranian hacker Amir Barati faces extradition to the US over alleged data theft campaign

Japan Plans Major Cyber Hunt to Detect Hidden Attacks on Critical Infrastructure

Japanese media group Nikkei discloses intrusions targeting employees and users

Joint FBI ‘Operation KillSwitch’ Dismantles KillSec Ransomware Network and Secures 110 Terabytes of Stolen Data

Lincoln Property Data Breach Exposes Sensitive Personal Information

Malicious VS Code Themes Hide GlassWorm Malware Targeting Developers

Managed Care of North America (MCNA) data breach settlement reached over breach affecting nearly 9 million people

Massive zero-day: cyber pro breaks out of virtual machine, takes root on KVM host

McLean Mortgage reaches settlement over 2025 data breach affected over 30,000

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Milk Dragon scam uses fake deals on social media to steal payment data

Millions of Airbnb, Uber, and Google records are for sale, hackers claim

More UK Schools Are Recovering Faster from Cyber Incidents

Most workers have encountered cyber threats at work, EU survey says

NEAR Intents Hack: Hacker Returns $3.8 Million After 48-Hour Ultimatum

NEAR Intents Hacker Returns $3.8 Million in Full

Nearly 40,000 phishing attacks hit US financial firms in H1 2026 - automated AI agents and a new Seychelles bulletproof host fuel aggressive new campaigns

Nearly 100,000 Alabama Power accounts affected by Southern Company data breach

New Dell System Update flaw lets hackers gain root privileges

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic

Nikkei Cyberattack Hijacks Employee Accounts, Sends 9,000 Spoofed Emails

Only 14% of 19.5 Million TVING Data Breach Victims Seek Compensation

Oracle health data breach touched nearly 20 million people

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)

Persona Dental Data Breach Impacts 3,386 Patients

Pilgrim Title Data Breach Compromises Government IDs and Financial Account Information

Potential data breach possibly affected as many as 100,000 Alabama Power customers

Ransomware disrupts University of Illinois Chicago medical school; hackers steal data

Ransomware gang threatens to dump more South African client data

Ransomware group threatens to leak customer data from top insurance companies in South Africa

Ransomware Hits JetBrains TeamCity Flaw, 9.8 CVSS

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Rejetto HFS servers now actively scanned for critical RCE flaw

Report Details AI Tactics and Techniques Used to Launch Cyberattacks

Restorative Therapies Data Breach: Medical Records Exposed

Security Industry Specialists (SIS) Data Breach Exposes SSNs and Driver's Licenses

Sensitive data breached in ransomware attack on Alabama Board of Nursing personnel systems

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau

ShinyHunters Suspect Saif al-Din Khader Detained in Jordan, Helping FBI, Sources Say

Simple But Effective Hacking Surges

South African firms hit with R17 million ransomware recovery costs as attacks worsen

South Korea: "Posted Externally"...Emergency at Seoul Cyber University Over Personal Information Leak

South Korea Probes AI-Powered Cyberattacks After Major Banks Suffer Data Breaches

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea’s Shinhan Bank Hack Exposes Data of 25,000 Customers

Southern Company hit by data breach

St. Lucie County Finds Unpermitted Flock Cameras, Raising Privacy Concerns

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Star Health and Allied Insurance data breach case reaches Supreme Court

Star Health Data Breach: Supreme Court Refuses To Quash Criminal Case Against Cybersecurity Expert

Technical University of Denmark (DTU) Data Breach Exposes Data of Up to 200,000 People

Teen Scores $5K Bounty for JWT Flaw in Microsoft Titan Analytics Service

Teenager Suspected of Running KillSec Ransomware Group as Police Seize Servers in International Crackdown

Three questions a hospital CISO should ask a healthcare fintech vendor

TIAA Discloses Data Breach Exposing Social Security Numbers

Times Car Data Breach: 30,000 People Express Interest in Class-Action Lawsuit

Times Car Breach Hits 6.6 Million as Keio Confirms Ransomware

Times Car data breach exposes 6.6 million customer accounts in Japan

Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data

Unexpected Twist in $3.8 Million Crypto Attack: Hacker Returns All the Money!

University of Illinois Chicago affected by ransomware attack on medical school

University of Illinois Chicago College of Medicine systems impacted by ransomware attack

US, Australia warn of latest Citrix vulnerability after NetScaler advisory

What one hour of ransomware costs dairies, feedyards, hog barns and mills

Why AI-Written Phishing Is Outpacing the Native Filters Built to Stop It

Why Poppins Payroll Data Breach Is Particularly Concerning

Wikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool

World Acceptance Data Breach Impacts 51k Individuals

Zaxis Data Breach Exposes Social Security Numbers

Zscaler Report Finds 275% Jump in Ransomware Data Theft

Ransomware Operator Claims - Week 39 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 21st September and 27th September 2026, kindly assisted by our partners.

DBD discovered and researched 179 Ransomware Victims over 50 Countries and Islands claimed by 47 Data-Leaking Ransomware Operators, including 3 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 40 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 28th September and 4th October 2026.

📅 4th October

18-Year-Old in Greece Suspected of Developing Ransomware Used in 1,000 Cyberattacks

AI enables cyberattacks in minutes, governments top targets

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft Adversary-in-the-Middle (AitM) Phishing

China-Linked Warlock Group Exploits SharePoint Flaws to Deploy Ransomware Across Critical Infrastructure

Citrix patches NetScaler SAML zero-day exploited in attacks

Emails of 95,000 customers exposed in Singapore's first AI-related data breach

Frontline Education data breach exposes employee Social Security numbers

Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions

Hacker Linked to ShinyHunters FBI Hack Detained in Jordan

Hackers hijack Microsoft’s X account to promote Clippy crypto scam

Healthcare Privacy Leaders Look to AI to Improve Monitoring and Data Breach Investigations

Jordan confirms arrest of suspected hacker after FBI data theft claim

KillSec dismantled: the alleged leader of the hacker gang was only 16 years old

Major Danish university hacked, 200,000 people potentially exposed

Marin County Sheriff's Flock Cameras Leaked Data to Out-of-State Cops for Nine Weeks

Massive phishing campaign hid malicious signals in plain sight

OneMain Financial class action claims unencrypted PII exposed in data breach

Shinhan Bank Data Breach Points to AI Agents Hacking Korean Banks

ShinyHunters Hacker Detained in Jordan Cooperating With FBI

ShinyHunters hacker detained in Jordan - now he’s helping FBI hunt down his own crew

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau

ShinyHunters hacker in FBI data theft held in Jordan

ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members

South Korea: Hacker’s Identical IP Detected Across Financial Institutions...Large-Scale Attacks Using AI

South Korea bank data breach: Same hacker behind 7 attacks?

Suspected ShinyHunters hacker detained in Jordan, cooperating with FBI

Suspected ShinyHunters Hacker Detained in Jordan, Cooperating With FBI Investigation

Technical University of Denmark (DTU) Breach Exposes Data of 200,000 Users

‘They call every week’: the phishing attacks targeting past victims

Warlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical Infrastructure

Welcome Savings Bank Reports Data Breach Affecting Corporate Clients

Who is Rui Pinto: the hacker who brought down the Manchester City empire

📅 3rd October

A hacker from the group that stole data about FBI employees has been caught in Jordan

AI-driven phishing scams target Kazakhstan parents ahead of Teacher's Day

Apple Tightens macOS Security Controls to Stop AI Agents From Harvesting Private User Data

Assassination fear as Man City hacker loses witness protection days after guilty verdict

Cheap deal, costly click: Singapore loses S$1.4 million to social media phishing scams since July 2026

Danish university DTU breach exposes data of up to 200,000 people

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days

Fake Discount Ads on Facebook Linked to Chinese Hackers

FBI data theft probe: What to know about ShinyHunters hacker detained in Jordan

Federal judge calls Flock ‘indiscriminate mass surveillance’

How One Hacker and a Decade of Investigations Blew the Lid Off Manchester City

Key ShinyHunters hacker detained in Jordan, is cooperating

KillSec Bust Expands to 10 Nations, Germany-Led Raid

KillSec Raid Seizes 110TB, Dutch Suspect Faces US Extradition

Man City whistleblower Pinto to lose witness protection amid death threats

MI5 Says China’s Ministry of State Security (MSS) Funded Research Involving 100+ U.K.-Linked Academics

OpenAI agent hacks another Australian government system

Rui Pinto, the Hacker Who Exposed the Man City Scandal, Loses Witness Protection

ShinyHunters hacker in FBI data theft detained in Jordan, 'cooperating with bureau'

ShinyHunters hacker reportedly detained in Jordan, aiding FBI

ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers

ShinyHunters Suspect “Rey” Detained in Jordan, Reportedly Helping FBI

South Africa’s ransomware problem is hiding a much bigger issue

South African companies that are hacked pay an average of R5.01 million in ransom

Suspected Chinese Spies Spoofed Anthropic Executive in AI Phishing Campaign

Tower Insurance investigates ransomware group's breach claim as brokers field client questions

Tower Insurance investigates unverified ransomware claim after being named on leak site

Tower Insurance named on ransomware site - what brokers need to do before this is resolved

Tower Named on Leak Site by Group With 207 Victims

US gets its hands on alleged Iranian hacker in rare extradition

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Warlock Ransomware Uses SharePoint Flaws to Breach Networks

Yegaram Savings Bank Suffers Customer Data Breach in Hacking Incident

📅 2nd October

16-year-old Alleged KillSec Ransomware Group Leader Arrested, Servers Dismantled

16-Year-Old Alleged KillSec Ransomware Operator Arrested in International Takedown

16-year-old boy arrested for masterminding KillSec ransomware group

70 Fake Crypto Sites Impersonate xStocks, Pendle and Zama in Rewards-Vote Scam

367,000-Ship Study Finds Global GPS Spoofing, Red Sea Activity Before Grounding

AI accelerates cyberattacks, challenging defenders

AI agents keep access to company data after their work is done

AI Cuts Post-Compromise Attack Time to Minutes

AI is Finding More Vulnerabilities But Open Source Needs More People to Fix Them

AI is giving attackers a head start, Microsoft warns

Alleged 16-Year-Old KillSec Ransomware Group Administrator Arrested in Operation KillSwitch

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Apple says it’s tightening macOS ‘Full Disk Access’ controls due to new risks from AI agents

Are patient portals secure? Best practices to stay alert of phishing scams

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list

Canada: Criminal court, traffic ticket info accessed in cyber attack targeting police in Kingston, Ontario

Canada: Hacker took 100,000 documents in 2025 'cyber incident,' Kingston Police say

Canada: Kingston Police concludes investigation into their data breach

China-aligned TA419 targets US AI policy experts in phishing campaigns

China-Linked Hackers Impersonated US AI Policy Experts

China-Linked TA419 Hackers Target US AI Policy Experts With Credential Phishing Attacks

China’s TA419 Hackers Are Impersonating Anthropic Employees to Phish AI Experts

Chinese Hackers Impersonate Former US Official in Phishing Attack Targeting AI Policy Experts

Chinese hackers impersonate leading AI figures to harvest credentials

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts

City of Vicksburg hit by ransomware cyberattack

Coinbase Scammer Goes Down as Court Delivers 4-12-year Sentence After He Pilfered $16 Million in Crypto

Criminal recruiters want people on your payroll

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Dartmouth College settles class action following 2025 Oracle data breach

Dell asks admins to patch max severity CSM flaws as soon as possible

Dell Container Storage Modules (CSM) Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

DentaQuest data breach exposes health and personal data of 15 million people

Europe Arrests Suspected KillSec Leader in Ransomware Probe

Exposed Hacker Server Reveals Toolkit Used in Viva Aerobus-Linked Intrusion

Family Physicians in Jackson Township reports data breach

Federal Trade Commission (FTC) Probes OpenAI, Anthropic as AI Agent Safety Risks Draw Scrutiny

Frontline Education breach exposes school district employee data

G20 summit raises cyber attack fears for hospitality sector

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

GitLab warns of critical RCE vulnerability in AI Gateway service

Greece: Real Hotel Booking Used in Convincing Phishing Attempt

Hacker hijacked Microsoft’s X: “500,000 likes and we bring Clippy back,” all to pump a crypto token

Hacker Who Exposed Man City’s Charges in ‘Life-Threatening' Danger After Guilty Verdict

In Rare Move, Alleged Iranian State Hacker Extradited to US

INC Ransom Claims Breach of Northern Counties Health Care, Inc

India: Hyderabad Healthcare Firm Faces Rs 8.5 Crore Ransomware Demand

Iranian hacker extradited to the US

Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus

KB Kookmin Bank Customer Data Breach Exposes 100+ Records; South Korea's Financial Supervisory Service (FSS) Launches Emergency On-Site Probe

KB Kookmin Bank reports data breach trailing Shinhan leak

KB Kookmin Bank suffers data breach

KB Kookmin Bank suffers info leak raising concerns over data breach at other lenders

KillSec Ransomware infrastructure taken down and Teenager arrested in Cybercrime Investigation

KillSec Takedown: Teen Suspect, 3 Arrests, 5 Servers

Lamb Weston discloses data breach affecting 7,175 people, eight months after incident

Man charged in London Hydro customer data breach

Man charged in London Hydro data breach

Man City whistleblower Rui Pinto facing 'dire consequences'

Manchester City whistleblower says he is going into hiding in fear for his life

Marin County residents concerned after report reveals Flock cameras data breach

Massive leak links Russian research institute to Kremlin cyber warfare project

Medical records giant Epic pauses product development to fix security bugs that risk patients’ data

MedImpact data breach affects over 60,000 linked to Leggett & Platt

Microsoft 2026 Security Report: Autonomous Ransomware Has Hacked Real Organizations

Microsoft’s X account hacked in crypto pump-and-dump scheme

Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA

Milk Dragon Phishing Kit Uses Facebook and TikTok Discounts to Steal Cards and Bypass MFA

Milk Dragon Uses WooCommerce and Malicious WordPress Plugin to Steal Payment Data

Minecraft players’ data surface in alleged 18 million breach

Mississippi mayor says ransomware incident led city to shut down systems

Modern cars send data to advertisers and trackers, study finds

NEAR Intents $3.87 Million Hack Explained: 76% Went to Bitcoin as Team Says Hacker Identified

NEAR Intents Gives Hacker 48 Hours to Return Stolen Funds After Claiming Identification

NEAR Intents Identifies $3.8 Million Hacker, Gives Them 48 Hours to Return Funds

NEAR Intents’ hacker refunds 100% of stolen $3.8 Million after encrypted negotiation

One click changed everything: How Rui Pinto’s phishing email helped expose Manchester City’s financial case

One in five employers has no policy on AI phishing and deepfake scams

OpenAI Agents Hack U.S. and Australian Websites, and Maybe Canadian Site

OpenAI Agents Scraped 55 Websites, Including FBI and CDC, Security Firm Says

OpenAI reveals another Australian government data breach caused by its AI agent

OpenAI Stops 15,000-User Operation Attempting to Extract Protected Model Reasoning

Operation KillSwitch, three arrests dismantle the KillSec ransomware gang

Phishing Toolkit Taps Social Media Posts and Advertisements

Police dismantle ransomware gang allegedly run by a 16-year-old

Police take down dangerous KillSec ransomware gang - and find out it's being run by a teenager

Police Target KillSec Ransomware Group with Arrests and Seizures

Ransomware attack disrupts some city services in Vicksburg

Rogue VPN files can let hackers hijack ASUS routers

Scotland: Sheriff rejects prisoner’s £15,000 data breach claim after Parole Board letter sent to wrong inmate

Shinhan Bank Data Breach Exposes Income and Loan Information of 25,000 Customers

Singapore: At least $1.4 million lost to scams involving fake social media ads offering cheap goods since July

Singapore’s first AI-related data breach underscores the catch-22 SMEs are in

Software Supply Chain Attacks Use Malicious npm Updates to Steal Credentials and Spread Malware

South Korea's Privacy Watchdog Sets 12-Month Deadline for Major Data Breach Cases

Spanish Authorities Arrest Teen Suspected of Running KillSec Ransomware Group

Spanish Police Arrest 16-Year-Old Accused of Running KillSec Ransomware Group

Takedown! Police seize 110TB of stolen data from KillSec ransomware leak site

Technical University of Denmark (DTU) data breach may affect personal information of 200,000 current and former users

Teen suspected of running KillSec ransomware group as cops seize servers, arrest three

Texas Hospice Management Company Data Breach Affects 35,000 Texas Residents

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

This new ChatGPT scam tricks you into installing malware - how to spot the trap

TIKTOUK WordPress Credential Toolkit Harvests 50,000 Secrets From 37,000 Domains

Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure

US sanctions Tren de Aragua gang members in ATM hacks crackdown

Vicksburg: City works to restore systems after cyberattack

Vicksburg impacted by ransomware attack

Warlock ransomware breach SharePoint in water, telecom operator attacks

Warlock ransomware group targets water, telecom, government organizations through SharePoint flaws

'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries

Who is Rui Pinto? The whistleblower abandoned by Portuguese authorities over Man City leaks

Why AI scams are harder to spot for Las Cruces

Why SMEs are doubly exposed to phishing attacks

Will the hacker who launched the investigation against Manchester City remain without state protection?

📅 1st October

16-year-old suspected leader of KillSec ransomware group arrested

850+ fake ChatGPT ads on Google trick Windows users into installing malware

AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit

AI policy circles targeted in China-linked phishing operation

AI Threats Top Cybersecurity Preparedness Gap

Alleged Grand Theft Auto 6 (GTA 6) hacker arrested amid multiple murder plot claims

Alleged KillSec Ransomware Mastermind a 16-Year-Old

Apple CoreGraphics Proof-of-Concept Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Australia: Queensland Cybersecurity Department Loses $809,000 in Cyberattack

Authorities Send A Warning To Hackers After Arrest Linked To FBI Data Breach

Autonomous AI agents tried to hack US, Canadian government websites

Bee Cheng Hiang data breach exposes 95,364 customer email addresses after AI-assisted script error

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft

Bitget Confirms Zero-Day Flaw Behind More Than $387 Million Crypto Theft

Browser-Based Attacks Dominate 2026 Threat Landscape as Phishing Evolves Beyond Email

Casper Orthopedics Data Breach Affects 56,197 Patients

CertiK Tallies $766.4 Million in September Crypto Exploit and Phishing Losses

China-Aligned Phishing Group Targeted US AI-Policy Experts, Proofpoint Says

China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders

China-Linked Hackers Impersonate Ex-U.S. Officials to Target AI Experts

Chinese ransomware group Warlock targets Spanish and Portuguese-speaking countries

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to Known Exploited Vulnerabilities (KEV)

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

City of Vicksburg issues release on cyberattack

City of Vicksburg, Mississippi, shuts down computers after ransomware attack

CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer

Connecticut Hotel Operator Data Breach Puts SSNs, Financial and Medical Records at Risk

CPAP Medical Supplies and Services Agrees to Pay Up to $500K to Resolve Data Breach Lawsuit

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

CVE-2026-73570: Zimbra Mail Server Flaw Exploited in Active Attacks

Cyberattack on major Polish invoicing platform exposes customer data

Cybersecurity Awareness Month Drives Home a Key Challenge: Agentic AI

Data of 25,000 Leaked at Shinhan Bank; Full Compensation Pledged

Employment scam victims tripled at financial firms in 21 countries

Europe’s Police Chiefs Face Growing Threat of AI-Driven Crime

Europol: Leader of 'KillSec' Ransomware Group Is a 16-Year-Old

Fake Squarespace “Domain Expiration” Payment Scam Targets Businesses

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

From Shadow AI to Accountable Agents: Why Agent Governance Needs Enforcement

Gemini 4 Argon Restricted Over Cybersecurity Misuse Risks

Google Restricts Gemini 4 Argon Release Over Cyber Attack Risks

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version

Google’s most advanced model is here, but only “trusted cyber defenders” and the US government get to use it

Hackers stole Pentagon personnel records of over 3 million people

Harlow Council refers itself to Information Commissioner after HTS data breach

Holiday lets owner 'devastated' by phishing scam

How to Protect Kids Online From 5 Common Internet Scams

Index Engines Research Finds Ransomware Increasingly Targets Data Integrity to Evade Detection

Iranian accused of hacking American universities extradited from Montenegro

Jackson National Life discloses data breach exposing Social Security numbers

Japanese Car-Sharing Site Times Car Data Breach Affects 6.6 Million Accounts

Kaspersky warns of phishing campaigns impersonating Zoom and Docusign

KillSec Ransomware Group Dismantled, 16-Year-Old Suspected Admin Arrested

KillSec suspected leader unmasked as teen after police seize notorious leak site

Kiteworks patches max severity code injection vulnerability

Many expect AI in the SOC to make entry jobs harder to get

McMinnville Breach: 53K Visits to Leaked Records

McMinnville reaching out to people who had private details stolen in June data breach, city says

Metamask discloses security incident affecting its infrastructure

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators

MI5 Warns Over 100 Academics Helped China's Espionage Plans

Microsoft says threat actors are ahead in the early AI race

MikroTik's RouterOS has a near maximum severity bug: CISA urges updating ASAP

Montenegro Extradites Hacker Arrested in Kotor to the US

Montenegro extradites Iranian hacker to the United States

MSP360 Remote Monitoring and Management (RMM) Abused in Phishing Campaigns to Deploy ScreenConnect

Near Intents Hacked for $3.8 Million Days After Denying North Korea-Linked Bitget Hacker

Nearly 100,000 affected as Bee Cheng Hiang suffers Singapore's first AI-related data breach

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)

OneMain Financial discloses data breach affecting thousands across multiple states

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates

OpenAI software attempted to secretly scrape data from dozens of prominent websites

Operational Technology (OT) and Internet of Medical Things (IoMT) Network Segmentation: Where Security Breaks Down and How to Reduce the Risks

Pentagon Breach Exposes 3.05 Million Military Records

Pentagon breach exposes personal data of more than 3 million people

Phishing scam targeting Wero users already in circulation

Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers

Police dismantle KillSec ransomware gang allegedly led by 16-year-old

Police disrupt KillSec ransomware, arrest suspected teenage leader

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader

Ransomware gang's claim on Western Australian school shows where cyber cover can fall short

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

Russian hacking group Star Blizzard expands phishing operations with new malware technique

Shinhan Bank data breach exposes personal information of 25,000 customers

Shinhan Bank data breach leaks personal, credit information of 25,000 customers

Shinhan Bank hit by data breach affecting 25,000 customers

ShinyHunters resurfaces with O’Reilly Auto Parts, Dexcom breach claims after FBI hack showdown

ShinyHunters Site Goes Dark After Claiming Massive FBI Data Breach Amid Dutch Investigation

ShinyHunters Website Goes Offline After FBI Deadline Passes

Some car apps are slipping owners’ data to big tech companies

South Africa: Gauteng committee demands answers after e-Panic Button app data breach sparks outrage

South Korea: Financial Supervisory Service Investigates Shinhan Bank Over Customer Data Breach

South Korean bank hit by data breach affecting thousands of customers

Spanish Police Arrest 16-Year Old Leader of Hacker Group in Europe-Wide Probe

Spanish police have arrested a 16-year-old Romanian suspected of running the KillSec hacker group

Teen hacker arrested amid KillSec cyber gang takedown

Teenager arrested in Spain suspected of leading KillSec ransomware group

Teenager arrested on suspicion of leading hacker group

Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site

Teenagers suspected of leading ransomware group arrested during international operation

Telmate reaches $4.22 million settlement over 2020 cyber attack

The Problem with CISA’s 2026 Cybersecurity Awareness Month Recommendations

The vulnerabilities AI finds are the ones attackers want

Third-Party Software Company Impacted By Online Poker Cyber Attack Issues Statement

Update On Risk: The Threat Is No Longer The Master Hacker

Vicksburg: Ransomware attack shuts down city computer systems

Voice phishing attacks soar as cyber attackers use AI

Warlock Ransomware Attackers Hit Water and Telecom Operators

Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators

Warlock Ransomware Hits Large Spanish, Portuguese Organizations

“We’ve kidnapped your data.” Ransomware attacks are on the rise in Japan

Western Australia’s St James’ Anglican School investigating cyber incident in wake of ransomware claims

What airports can learn from the Manchester cyber-attack

When ransomware went corporate

Who owns AI risk at work? Business and tech leaders can’t agree

Why Mobile Device Management Needs Its Own Threat Model

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Your car is a spy in disguise, Dutch intelligence service warns

📅 30th September

$20.9 Billion and It's Not Phishing: The Scams That Actually Drained Americans in 2025

40 Million McDonald's Records Exposed Through Customer Data Platform

A Hacker Who Attacked Grand Theft Auto (GTA 6) Developer Rockstar Games Has Been Caught - And They Allegedly Committed More Serious Crimes

AI agents leak 13K screenshots from 300+ firms, including Fortune 500 companies

AI Boosts SOC Analyst Capacity but Limits Skill Development

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

AI coding agents leaked 13,000 internal company screenshots to public GitHub repos

AI-Assisted Attackers Move to Massive Data Theft, Executive Targeting, and Millions in Extortion Payments

AI-Found Vulnerabilities More Likely to Enable RCE, Google Says

Alleged hacker arrested over leak that exposed Grand Theft Auto (GTA) Online's daily revenue

Amazon Prime Phishing Scam Uses Fake Billing Alert to Steal Logins and Card Details

Apple Patches CoreGraphics Zero Day Exploited in Attacks

Arizona court data breach exposed foster care records

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Attackers Combine ChatGPT Feature Abuse With ClickFix to Deliver Trojan Malware

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Australia: Queensland government department loses $800,000 in cyber attack

Australia: Queensland government’s cyber security department hit by $800k cyber attack

Automakers routinely share personally identifiable connected-car data with third parties, report says

Bee Cheng Hiang customers’ e-mail addresses exposed in first case of AI-related data breach in Singapore

Bee Cheng Hiang customers’ e-mail addresses exposed in Singapore’s first case of AI-related data breach

Bitget hacked via zero-day in third-party security products

China’s AI agents can lie and scheme - just like their US rivals

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Cisco warns of new SD-WAN zero-day exploited in attacks

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Company Behind Leak of Driver's Licenses Says Hacker Had Access for 5 Months

Cyber Worker Allegedly Moonlighted as ShinyHunters Hacker

Cybercriminals now building fake FBI offices to trick victims in "new twist" on agent impersonation scams

Data breach at Jims underestimated: 150,000 members affected

Delaware Men Sentenced to 189 Months for Scam and Phishing Schemes That Diverted Business Wire Transfers

District of Columbia (DC) Medicaid Agency Notifies 400,000 Beneficiaries About Data Exposure

Dutch Institute for Vulnerability Disclosure (DIVD) says Zammad zero-days enabled AI-driven network breach

Eskenazi Health discloses phishing-related breach of Social Security, medical data

EU Cyber Resilience Act requirements for containers and Kubernetes

EvilTokens Bust: Microsoft Hits 12,000 Inboxes

FBI official tells ShinyHunters hackers to get in touch after major data breach

Fighting the Shadow AI Threat: Strategies That Work

Former US Air Force members behind million-dollar Business Email Compromise (BEC) scheme head to prison

French Tax Data Theft Went Undetected for Seven Weeks After Stolen Staff Passwords Opened the Door

Global Group Ransomware Abuses WinMerge to Deploy Encryptor

Gold Star Mortgage Sued 3 Days After BrainCipher Hit

Hackers hit EU data transfer platform as tech sovereignty push grows

Hackers stole millions of US military personnel records during months-long data breach

Hackers Use Fake Zoom and PDF Installers to Deploy Remote Access Tools on Windows PCs

Hawaii joins multistate settlement over Labcorp data breach

How disposable domains make phishing campaigns cheap and hard to stop in Nigeria

HP warns of AI lures & QR phishing targeting crypto

Huge Pentagon data breach exposes personal files of 3 million people

“I’ll Be Watching You”: The Office of Personnel Management (OPM) Data Breaches, FBI Data Breach, and a Hit Song from The Police

India Tops Asia-Pacific Ransomware Claims in August 2026

iPhone Security Warning: Apple Says iOS 26 Flaw May Have Been Exploited

Ireland: One in three small businesses report cyber attacks

Kaspersky Identifies Ongoing Phishing email Campaign Mimicking Zoom and Docusign

Kiteworks Recommended Brief Shutdown: Threat Intel Enabling Proactive Security or Overreaction?

Know Your Enemy: Browser-Based Attack Techniques in 2026

Lamb Weston Data Breach Impacts 7,175 Individuals

Major McDonald's data leak exposes 28 million customer details

MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

Michigan: Multi-State Settlement Reached With Labcorp Over 2019 Data Breach

Microsoft to block Entra ID script injection attacks starting October

Mobile malware warning from Ukrainian researchers includes iPhone exploit kit

Momentum Group company responds to data breach claims

Most open critical and high flaws are over 90 days old

Most organizations need six months or longer to roll out new security controls

Not All AI Risks Are Cyber. The Pentagon, Anthropic and the Strange Case Where the Safety Feature Became the Security Risk

OneMain Financial Breach Hits 16,988+ in 2 States

Onslaught of Linux kernel bugs forces cyber pros to rethink security boundaries

OpenAI apologises to Australia over government portal data breach

OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised

OpenSSL Fixes DTLS Out-of-Bounds Read in Security Updates

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

OpenSSL Flaw Could Expose Heap Memory and Crash Applications

Over 543,000 valid credentials exposed in public GitHub repositories

Pentagon Confirms Major Data Breach Exposing Sensitive Information of Over 3 Million People

Pentagon data breach exposes info of more than 2.7 million US military and civilian personnel

Pentagon Data Breach Exposes Personal Data of 2.8 Million Living People and Nearly 300,000 Deceased

Pentagon data breach exposes Social Security numbers, personal info of 2.76 Million US military, civilian personnel

Pentagon Recordkeeping Unit Alerts 3 Million After 10-Month Data Breach

Phishing Without Red Flags: How QR Codes, ConsentFix and AI Are Beating Old Checks

Poppins Payroll Data Breach Impacts Hundreds: Financial Info Exposed

Public GitHub code reveals a major issue: over 500,000 secret keys are exposed

Ransomware Attack on Financial Lender triggers customer lawsuit within 48 Hours

Ransomware gangs steal 896 terabytes of data over a year

Ransomware surges 600% as AI lowers cybercrime cost

Rogue AI incidents hit ‘tens of thousands’: Can businesses trust these tools?

Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters

Russian state hackers use new RedFlick technique to push malware

Ryuk ransomware operator ordered to pay $1.2 Million after US extradition

ShinyHunters and the New Reality of Identity Theft

ShinyHunters insists it is “fine” after FBI arrests alleged leader

ShinyHunters Says Operations Are ‘Completely Fine’ After Umbreon Arrest, Warns Negotiating Victims

ShinyHunters Suspect Arrested, FBI Data Breach Claim Under Spotlight

Singapore sees first data breach linked to AI use

South African air traffic control firm investigates ransomware-linked malware in Operational Technology (OT) network

South Korea: Telecoms industry opposes no-fault compensation for voice phishing losses

South Korea Imposes 3% Data Breach Fines

South Korea toughens data-breach penalties, elevates CISO to executive

Stevens Point says ransomware attempt behind city cyberattack

Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)

TeamViewer urges users to patch severe flaws “as soon as possible”

Terrebonne Parish Government offline after cyber attack

The Mental Health Association Data Breach Settlement Agreed

This invite-only AI agent may be a hyped-up privacy nightmare, but users are selling early access on eBay

Times Car Data Breach Hits 6.6 Million Member Accounts

Times Car Rental says data breach affected 6.6 million accounts

US sanctions 10 over ATM malware scheme tied to Tren de Aragua

Vulnerability disclosures double to 10,000 per month as AI fuels exploitation

When Security and Sustainability Report to the Same Boardroom

Who is Rui Pinto? The hacker behind Football Leaks whose work led to Manchester City investigations

Why Space Infrastructure's Biggest Cyber Risk Never Leaves the Ground

Zscaler ThreatLabz 2026 Ransomware Report finds AI‑assisted attacks drive 275% rise in data theft

📅 29th September

17.3 Trillion Microsoft Records Exposed

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

A fake journalist used a real Calendly link to phish a tech founder

After Five Years in Hacker Crosshairs, Manufacturing Must Take the Target Off Its Back

Alleged Rockstar Games Hacker Arrested, Ordered Multiple Murders

Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials

Andover Still Reviewing Possible Data Theft Six Weeks After Cyberattack

Apple Fixes CoreGraphics Flaw Used in Targeted Attacks

Apple patches CoreGraphics zero-day flaw exploited in attacks

Apple patches zero-day exploit possibly used in “extremely sophisticated” attacks

Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)

Arizona Supreme Court data breach exposed reports on children in foster care

Arizona Supreme Court says hackers stole residents’ personal data

Astrana Health Data Breach Exposes Confidential Information

Astrana Health Notifies Securities and Exchange Commission (SEC) About Social Engineering Incident

Australia’s next data breach could target these woefully porous government departments after alarming hack on Medicare by a rogue OpenAI agent

Automated AI agent used to breach cybersecurity nonprofit Dutch Institute for Vulnerability Disclosure (DIVD)

Azure Standard Data Breach Exposes Financial Information of Customers

Borrower sues Gold Star Mortgage a day after ransomware gang claims data theft

Carrefour France faces data breach after cyber attack at supplier

Clop Ransomware Group changes Server and vows Not to Pay ShinyHunters

Critical Authlib authentication bypass flaw leaves countless apps in danger

Custom ChatGPTs push ClickFix attacks to deploy RAT malware

Cyber attack on data exchange service FTAPI

Cyber Crime in the West Midlands: What Local Businesses Should Know

Cyber Skills Diminish Quicker than Organizations Can Build Readiness

Cybersecurity Awareness Is Patient Safety

Data breach at Colruyt’s Jims fitness chain much larger than thought

Deepfakes at schools overwhelmingly target girls and women – and most involve explicit content

Deepfakes become a board priority once an executive falls for one

Digital health applications: HelloBetter reports data breach after cyberattack

Dutch Hacker Arrested in ShinyHunters Probe Tied to FBI Breach

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

Dutch police arrest a suspected ShinyHunters member; court orders 90-day detention

Dutch Police Arrest Convicted Hacker ‘Umbreon’ in ShinyHunters Probe as Group Hits FBI Job Site

Dutch police arrest ShinyHunters hacker accused of planning two murders

Dutch Police Arrest ShinyHunters Suspect as FBI Pursues New Leads

Dutch police arrest suspected member of cyber-crime group that claimed FBI hack

Dutch ShinyHunters Suspect Investigated for Trying to Arrange 2 Murders

Eskenazi Health Data Breach Exposes Sensitive Personal and Medical Info

Eskenazi Health data breach exposes Social Security and medical data

Ex-employee sues Springfield business over data breach affecting 2,667

Fake iPhone Duo Preorder Page Deploys DarkSword iOS Exploit With No Tap Required

Fake Microsoft Store Pages Deliver a RAT That Lets Attackers Watch and Control Windows PCs

FBI Grapples With Fallout From Massive Data Breach

FBI tells ShinyHunters members to turn themselves in after recent arrest

FBI’s Top Cyber Guy Warns ShinyHunters Crew That They Better Watch Their Backs

Feds warns hackers after ShinyHunters arrest over FBI jobsite data breach

Forget Me Not: Connecticut’s New Privacy Law Collides With OSINT and Threat Intelligence

Former ShinyHunters hacker arrested in what could be an elaborate frame job in FBI hack

Former US Air Force members sent to prison over Business Email Compromise (BEC) attacks

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

Fun For Less Tours Data Breach: PHI and PII Exposed

GitHub’s AI agent found 24 Android app vulnerabilities

Hacker-for-Hire Economy: How Cyber Mercenaries Turned Digital Revenge Into a Business

Hackers Are Stealing AI Keys. The Cost Can Reach $600,000

Hackers exploit Citrix NetScaler zero-day to deploy web shells

Hackers exploit SQL injection flaw to steal patient data from Polish medical software provider

Hackers Turned Ethereum Into a Secret Messaging System for Malware

Hackers Use Hijacked University Emails to Scam Students, Pose as FBI Agent

Hawaiʻi settles $2.3 Billion data breach lawsuit filed with 43 other states

Japanese railway operator Keio hit by ransomware attack

Japanese Railway Operators Hit with Weekend Cyber Attacks

Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown

Kiteworks patches critical flaw, brings customer systems online

Kiteworks Urges Customers to Restart Systems After Shutdown Notice

LLMjacking can run up your business’ AI bill fast - how to stop it

Malicious Custom GPT on chatgpt.com lures users into installing a RAT

Manage My Health, Health NZ get compliance notices for cyber attack

Meduza Locker Claims Ransomware Breach of Spain’s Junta de Andalucía

Meitav Trade says hacker accessed customer data through vendor API vulnerability

Microsoft Tracks NeedyMantis Post-Compromise Malware Targeting Telecoms and Government Contractors

Microsoft Warns NeedyMantis Malware Enables Persistent Network Access

Modoc Medical Center Data Breach Exposes Medical Information

Nearly 3 Million People Impacted by Defense Department Data Breach Exposing Sensitive Information

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

New Spectre v2 attack variant leaks Linux root password hash in minutes

New Spectre-v2 Branch Target Reuse (BTR) Attack Leaks Linux Memory Despite Existing Defenses

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

OneMain Financial Data Breach Affects 16k: Social Security Numbers Exposed

OpenAI apologizes for agents breaching Australian government websites without authorization

OpenAI apologizes to Australia after its AI agents breached government sites

OpenAI apologizes to Australia over Medicare data breach

OpenAI Disclosed Its AI Agents Accessed Four Australian Government Websites

OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

OpenAI’s GPT-6 Astra ran supply chain attacks despite being told not to

Pennington County provides update on July ransomware attack

Pentagon confirms data breach: over 3 million people affected

Pentagon Data Breach - Hackers Reportedly Accessed 3 Million People’s Sensitive Data

Pentagon Data Breach Exposes Records of More Than 3.05 Million People

Pentagon data breach exposes sensitive information on more than 3 million people

Pentagon Data Breach Exposes Social Security Numbers, Military Job Details

Pentagon Data Breach: Pentagon data hack exposes 3 million people's information as FBI probes another data leak

Pentagon database flaw exposed Social Security numbers of more than 3 million people

Pentagon Defense Manpower Data Center (DMDC) data breach exposes records of over 3 million people

Pentagon Personnel Agency Data Breach Impacts 3 Million People

Phishing Abuses RMM Tools for Persistent Access

Phishing Exposure Nears 70% Across Key US Industries. What Should Security Teams Do?

Planet 13 data breach lawsuit highlights cannabis industry ID security risks

Polish Medical Software Hit by Cyberattack, Patient Data Stolen

Popular games on Google Play contain trackers from Russia, China, and Israel, study finds

Ransomware attack disrupts payment systems at Japan's Keio railway group

Ransomware Attack Hits Keio Railway Group Servers and Disrupts Business Systems

RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims

Russian-linked forensics software was used by London police and throughout Europe

Second data breach hits Revolut after service provider cyber attack

ShinyHunters Arrest: Dutch Police Detain Convicted Hacker

ShinyHunters says suspect arrested for Odido attack not affiliated with hacker group

ShinyHunters says they “never intended or planned to” publish FBI data

Should South Africa ban ransomware payments?

SilverFox Malware Campaign Uses Smart Filtering to Hide Fake Software Downloads From Researchers

Social Engineering in the Age of Synthetic Media

Spokane Public Schools Get Back Online After Cyber Attack

Springfield Contractor Hamilton Construction Sued Over Data Breach Hitting 2,667

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Still running iOS 26? Update your iPhones, iPads and Macs for this urgent security fix

Storm-3168 Targets Azure Storage, Key Vaults and Backups in Destructive Cloud Attacks

Suspected ShinyHunters hacker arrested after FBI data breach

Teen Hacker Finds Auth Flaw in Microsoft System With 17.3 Trillion Data Rows

Telecare Data Breach: Social Security Numbers Exposed

Three Million Affected in Pentagon Personnel Agency Data Breach

US Air Force members given over 6 years in prison for cyber theft of more than $2 million

Vietnamese man charged in $16 million 'pig butchering' crypto scam

Walsh Financial Services Data Breach Exposes SSNs and Financial Data

'We know how to find you': FBI official tells ShinyHunters hacker group to get in touch with agency

What can a person find about you in an hour?

Your car and its mobile app are probably handing over all kinds of data to tech companies

📅 28th September

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data

29CM Data Breach Wider Than Reported, With 30,000 More Records Exposed

44 State Attorneys General Reach Data Breach Settlement With Lapcorp

23,549 SIMBA Customers Have Identity Card Numbers, Phone Numbers and Other Details Exposed in Data Breach

23,549 Simba customers’ personal info leaked in data breach, including names & Identity Card numbers

80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjacking

AI Ransomware Wiped 100 Azure Accounts in 7 Minutes: Only Pre-Configured Locks Survived

AI Security Agents Struggle With Complex Bugs and Safe Patching

AI tests the limits of enterprise security governance

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Are Your Personal Data and Bank Details Safe? Cyberattacks Surge 27% as India Tops Asia-Pacific Threat List

Arizona court data breach: Cyberattack targets judicial network, protective orders

Australia: Labor defends AI crackdown over Medicare data breach

Bank of Korea (BOK) faces scrutiny over cybersecurity after staff data breach

Bank of Korea Suffers Data Breach, Exposing 186 Employees' Information

Bitget Restarts Bitcoin Withdrawals Following $387.5 million Wallet Breach

Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388 Million

Bright Smile Dental Care of Fishers notified of security breach

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

CISA orders feds to patch exploited Citrix flaws by Wednesday

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

Citrix NetScaler Hit by Two Critical RCE Flaws Already Under Attack

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

Citrix NetScaler under active zero-day attack: critical patches available, 22K servers exposed

Citrix Patches Critical Zero Days Under Active Exploitation

Clicked A Fake Link? 6 Immediate Steps To Take After Falling For Phishing

Clop ransomware gang moves to new server after Grav CMS vulnerability exploited

Cyber attack takes L&Q’s online services down as correspondence from 12,000 residents hacked

Cyberattack Disrupts Police Systems in Wales, Staff Data Under Investigation

Cyberattack on Polish medical software provider exposes patient data

Cyberattack on Welsh Police Force May Have Exposed Data

Cyble Threat Report: August 2026 Hits Record High with 1,034 Global Ransomware Victims

Dartmouth College reaches $750,000 settlement following data breach affecting 96,000 members of the Dartmouth community

Data breach affects 23,549 customers of Singapore telco Simba, personal data protection commission investigating

Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns

Democratic Alliance (DA) to report e-Panic button data breach to Information Regulator of South Africa

District of Columbia (DC) Health Agency Exposes 400,000 Beneficiary Records

Dutch man arrested in ShinyHunters investigation alleged to have been 'reformed hacker'

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

Dutch police arrest security professional in ShinyHunters investigation

Dutch police confirm arrest in ShinyHunters hacking investigation

Dutch 'reformed hacker' arrested in ShinyHunters investigation, police and boss say

Everything we know as East Suffolk and North Essex NHS Foundation Trust launch Noah Woods data breach probe

Ex-US soldier gets 70 months for role in AT&T, Snowflake data thefts

Fake American Express “non‑compliance” phishing scam targets Australians

Fake Email Thread Tricks AI Summarizer Without Hidden Text

FBI grapples with fallout from massive data breach

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day

FBI reportedly declares ‘cyber security incident’ after hackers steal agents’ personal data

Finastra reaches $3.13 million settlement in data breach lawsuit

Fishers dental office reports ransomware attack on patient records

Flink hackers turn to customers, demanding ransom to keep their data off the dark web

Flock tries to nuke interactive map built from its own data leak

Football Leaks and the hacker behind Manchester City’s charges

Former Moores staff victims of severe cyber-attack

Former US soldier gets nearly six-year sentence for hacking, extorting telecoms

Gabia Data Breach Exposes Information of 2,998 Customers

Gallagher Transport Data Breach Exposes Social Security Numbers

Gyazo Data Breach Exposes 23.6 Million User Records and Nearly Half a Billion Image Metadata

Hackers Are Running Ransomware Like a Business. Companies Are Paying the Price

Hackers can hijack QR code domains to redirect users to phishing sites

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

How Ransomware Groups Are Adapting by Using Encrypted Exfiltration Methods

India Tops Asia-Pacific Ransomware Claims With 24 Victims In August

JadePuffer agentic AI attacks target Azure, destroy cloud resources

JadePuffer criminals hijacked Azure identities and used them to blow up cloud resources

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

Japan Ransomware Activity Rises as Qilin Shows Signs of AI-Generated Tools

Japan travelers targeted by phishing scam mimicking hotel payment gateways

Japan's Keio confirms ransomware attack disrupted business systems

Kiteworks Systems Went Offline After Federal Threat Warning

Mass exploitation of Magento and Adobe Commerce critical flaw: 3,800+ online shops hacked

Model Context Protocol (MCP) Is Creating Major Governance Gaps, Researchers Warn

More than 3 million people affected by military data breach

More than 23,000 Simba Customers’ Personal Info Leaked in Data Breach

Nearly 400,000 Medicaid Beneficiaries Caught in Medicaid and DC Healthcare Alliance Data Exposure

New Mexico jury finds Meta deceived consumers about data privacy practices

New Scam in Europe: How to Avoid Losing Money

Noah Woods suspected data leak leaves NHS staff jobs at risk

OpenAI reportedly ditches model over safety concerns

Other users can watch your browsing and time your keystrokes through OS file notifications

Over 16,000 Supabase databases expose PII, passwords, auth tokens

Park24's Times Car Suffers Data Breach Affecting 6.6 Million Records, Including Driver's License Images

Pentagon Data Breach Exposes Unknown Number of Troops’ Social Security Numbers

Pentagon Data Breach and Kiteworks Targeted in Cyberattacks

Pentagon Data Breach Exposes Military Personnel

Pentagon data breach may affect 4 million

Personal information of over 23,500 Simba telco customers leaked in data breach in Singapore

Previously Convicted Dutch Hacker Arrested in ShinyHunters Odido Probe

Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon

Quantum random numbers can pass the tests and still leak clues to attackers

Ransomware activity hits 2026 high as industrial sector bears 31% of attacks and Qilin dominates

Ransomware Attack Hits Japan's Keio Corporation Group, Disrupting Card Payments at Retail Stores

Ransomware attacks hit 2026 high: India most Targeted in Asia-Pacific

Ransomware attacks hit 2026 high in August; India most targeted in Asia-Pacific

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

Renfe Cyberattack Hits Spain’s Rail Network as AI Role Probed

Researchers Discover Cybercrime Server Containing AI Tools, Phishing Kits and Stolen Data

ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns

ShinyHunters Hacks Rival Ransomware Gang Cl0p and Takes Over its Dark Web Tor Data Leak Site

ShinyHunters Says FBI Data Won’t Be Leaked When Ultimatum Ends

Simba data breach: Personal information of over 23,500 customers leaked

Simba data breach compromises personal information of more than 23,500 customers

SIMBA data breach exposes 23,549 customer records

SIMBA data breach exposes Identity Card numbers and personal details of over 23,000 customers

Simba data breach exposes personal details of over 23,000 customers

South Africa: Democratic Alliance (DA) to report e-Panic data breach to Information Regulator

Stake and Revolut both impacted by third-party cyber attack

Tech Support Scam Kit Uses Google Ads to Deliver Fake Security Alerts

Ten NHS staff removed over Noah Woods data breach

The devil is still in the email - but wearing a new mask

The Hacker Who Beat Manchester City, and What It Means for Every Boardroom

The Two Biggest Threats to Cybersecurity in 2026: AI - and Not Having AI

Threat Actor Claims 37,000+ Israeli Identity Records Leaked via Ministry of Defense API

Times Car confirms data breach affecting 6.6 million user accounts

Two Citrix NetScaler Flaws Are Being Exploited for Remote Code Execution, CISA Urges Patching (CVE-2026-88771, CVE-2026-88772)

UK: Critical national infrastructure bodies to receive briefings on heightened Russia threats

US: Critical Infrastructure Braces for Sweeping New Cyber Reporting Rules

US soldier gets 70 months in prison for extorting 10 tech, telecom firms

US, UK warn of exploited Citrix NetScaler zero-day bugs

Vendor hack exposes Bank of Korea staff data

World’s top ransomware group claims 2 more Australian victims