Data Breaches Digest - Week 42 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th October and 18th October 2026.

📅 12th October

Admin Password “123456” Led to 8.8 Million Danish Central Person Register (CPR) Data Breach

AI Use Outpaces Governance in Small Businesses

AI vulnerability patching has a grading problem

Alleged Qilin ransomware leader extradited from Japan to face charges in Germany

Amazon Fire TV Cube hacked using 4-year-old bug: movie fans are not scared, they’re ecstatic

Anthropic Reveals Claude AI Exploited Server Flaws and Bypassed Security Restrictions

ASOS Data Breach Highlights How Social Engineering Can Bypass Corporate Security

ASOS hackers claim responsibility for Air France-KLM data breach

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Attackers Use Power BI Phishing to Install Multiple RMMs and Maintain Persistent Access

Bargain Android phones ship with preinstalled malware, and users can’t delete it

Bitcoin Hardware Wallet COLDCARD’s X Account Hacked to Post Phishing Link

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

Canadian Ransomware Negotiator Edward Dubrovsky Arrested on Extortion Charges Amid FBI ShinyHunters Crackdown

Check Point warns of 48% rise in cyber attacks worldwide

CISA Warns of Active Attacks Exploiting 10-Year-Old Apache Struts RCE Vulnerability

ClingSTUN Malware Threatens Your IoT Devices: Expert Advice on Detection, Prevention, and Recovery

Critical AnyDesk Linux Flaw Lets Attackers Execute Remote Code With Root Privileges

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Cyber attack disables hundreds of French supermarket freezers

Cyber-attack like OpenAI Medicare breach ‘seems likely’ in UK, says minister

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison

Data breach at Rohlík. Conversations with AI have also been revealed

Dutch police take down malicious proxy network exploiting 178,000 devices

European supermarket giant limits operations amidst cyberattack

Fake Google Calendar entries give phishing scams a new way to reach consumers

Fake Power BI Documents Trick Users Into Installing Rogue ScreenConnect RMMs

FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach

FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation

FBI seizes Chinese hacker tools targeting Taiwanese infrastructure and universities

Fridges in French supermarkets hit by cyber attack

Geopolitics and the cyber resilience gap belong in your threat model

Germany is the second most frequent ransomware target worldwide

GitLab warns of max severity code execution vulnerability

Global Online Retailer ASOS Has Been Hacked

Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time

H&M investigates potential cyber-attack

H&M Investigating Possible Data Breach

Hacker reveals how BYD Shark 6 was compromised on Four Corners

Hacker ‘Wenhao’ Claims Dominican Republic Electoral Registry Breach: 6.8 Million Records and 5.6 Million Photos

Hackers Exploit Palo Alto GlobalProtect Flaw to Gain VPN Access and Deploy Ransomware

Hackers Heat Supermarket Fridges to 50°C in France Cyberattack

Hackers threaten to expose KFC data, as breach allegations circulate

Hidden implant in Ledger hardware wallets linked to $93 Million theft

How DNS traffic exposes phishing domains before they go live

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

International money-laundering gang recruited 15,000 money mules to funnel hackers’ cash

iRhythm Data Breach Impacts at Least 360,000 People

Isle of Man Police officer dismissed over data breach

Japan declares 'cyber emergency' over massive hacker attacks. Stolen documents can be sold on the darknet for 15 cents

Japan Declares First Cyberspace Emergency as AI Turns Ransomware Into Carpet Bombing

Karaoke Giant Reveals Data Breach Impacting Eight Million

Karaoke giant warns 8.7 million customers exposed in supplier data breach

Kenya among EMEA’s most attacked countries as cyber attacks surge 48%

KFC Named in Gentlemen Ransomware Group’s Latest Breach Claim

L&Q warns web services may remain down ‘for some time’ following last month’s cyber-attack

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Low-cost Android phones are arriving with malware that owners can’t uninstall

Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted

Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access

Microsoft Teams to Detect Malicious QR Codes and Warn Users of Phishing Attacks

MoneyGram under threat as hackers claim data breach

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

Net Closes Around ShinyHunters with Another FBI Arrest

New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing

One in five Brits encounter fake profiles or AI bots: the growing romance scam threat

Phishing emails are baiting your AI assistant

Ransomware Hackers Exploit Palo Alto Networks GlobalProtect VPN Authentication Bypass Vulnerability

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Researchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections

Retail giant Ahold Delhaize takes systems offline after cyberattack

Seoul National University Faces 588 Hacking Attempts in 2026

SIM-swap fraudster jailed for stealing $265K in crypto to fund luxury lifestyle

South Africa: Democratic Alliance (DA) exposes Lesufi government’s two-week delay in reporting e-Panic data breach to Information Regulator

South Africa: Gauteng e-Panic Data Breach - Democratic Alliance (DA) Demands Answers Over Two-Week Delay To Information Regulator

Tabung Haji Services Back Online After October 8 Cyberattack, Depositors’ Savings Confirmed Safe

"The biggest change in ransomware is not simply that attacks are becoming more sophisticated, it's that AI is making them easier to scale and harder to predict": Two groups account for a third of UK ransomware attacks

The Gentleman Hacking Group Claims MoneyGram, Deloitte, and KFC Data Breaches

The Philippines records 10 claimed ransomware victims in August

Thousands of European wind and solar systems exposed to potential cyberattacks

Two Face US Charges for Sextortion and Cyberstalking in Puerto Rico

UAT-11985 Uses Real-Time Google Phishing Kit to Steal Credentials and Session Tokens

UK: Supreme Court to Rule on Compensation in Data Breach Claims

US disrupts two cyber-espionage tools used by Flax Typhoon

Warlock Ransomware Hits 4 Sectors via SharePoint Bug

Windows PCs missing key updates could lose security fixes in 2027

World’s worst password “123456” linked to breach of 8.8 Million Danes

Data-Leaking Ransomware Report - September 2026

Welcome to last month's DLR Report, an exclusive presentation of Data-Leaking Ransomware Operator's Global and US Victims that were claimed between 1st September and 30th September 2026.

DBD discovered and researched 854 Global Ransomware Victims over 93 Countries and Islands, including 347 US Ransomware Victims over 48 States and Districts, claimed by 84 Data-Leaking Ransomware Operators in September 2026.

DBD also discovered and researched 11 New Active Ransomware Operators called BLACKLOCKS, BlueWhale, ENDZONE, Galago, Global Cybernetic Collective, IAmNotAVillain, n0n, Spirals, The Seven Deadly Sins, ULOSE and Vexy Ransomware in September 2026.

Download PDF



Data Source: Data Breaches Digest.

Ransomware Operator Claims - Week 40 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 28th September and 4th October 2026, kindly assisted by our partners.

DBD discovered and researched 250 Ransomware Victims over 56 Countries and Islands claimed by 50 Data-Leaking Ransomware Operators, including 3 Newly Discovered Ransomware Operators last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 41 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 5th October and 11th October 2026.

📅 11th October

Canadian cybersecurity executive arrested as FBI cracks down on ShinyHunters ransomware gang

Canadian Ransomware Negotiator Arrested Amid FBI Hacker Crackdown

Canadian ransomware negotiator arrested on federal charges amid FBI hacking probe

Coldcard investigates phishing link posted on its X account after exploit

COLDCARD Investigates Phishing Post on Official X Account After Previous 1,789 BTC Theft

Coldcard Probes How Phishing Link Landed on Its Verified X Account

Coldcard Probes Phishing Post From Official X Account After $115 Million Wallet Exploit

COLDCARD warns Bitcoin users about phishing scam on X

COLDCARD Warns of Phishing Post on Its Official X Account

COLDCARD Warns Users After Its Official X Account Posts Phishing Link

Coldcard X Account Hit by Phishing Scam After $100 Million Fiasco

Cyberattacks in Europe Surge and Grow Increasingly Sophisticated

Cybersecurity Expert Tied to ShinyHunters FBI Data Breach

FBI Arrest Ties Ransomware Negotiator to Its Own Hack

FBI Arrests Ransomware Negotiator, 54, on 2 Counts

FBI contractor removed after data breach due to unapplied security patch

GenAI Tools Fuel Ransomware’s $432K Payouts

Germany Arrests Alleged Qilin Ransomware Leader After Extradition From Japan

How to recognize an AI-generated phishing email

IDCF Cloud: Ransomware hits 495 organizations in Japan

India: Hacker Alters Mining Rates on Government Portal, Causes ₹62.21 Lakh Loss in Aligarh

Japan declares cyber emergency after hackers expose data of millions of citizens

Japanese cloud provider IDC Frontier hit by ransomware attack

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

One in five Cumbrian businesses hit by a cyber incident, yet nearly half remain unconcerned about cyber threats

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Qilin Group: Suspected leader extradited to Germany

Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access

Ransomware hits IDCF Cloud in Japan, 495 organizations including JR East

Ransomware negotiator arrested on federal charges as FBI probes hacking of personnel files

Ransomware Negotiator Held in Philadelphia as FBI Pursues ShinyHunters Network

Settra Ransomware Is the Last Thing That Happens

What to do if you suspect a calendar phishing scam

Who is the Canadian ransomware negotiator arrested in the US?

‘You have a meeting’: the calendar phishing scam growing exponentially

Zscaler Report Finds AI-Assisted Ransomware Attacks Drive Massive Data Theft and $328 Million in Extortion Payments

📅 10th October

“123456” password used in massive Danish CPR data breach

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

ARTEX AI, Claude agents used in cyberattacks on South Korean banks

ASOS Confirms a Data Breach - The Rogue Alert Was Only the First Warning

ASOS data breach: What customers need to know after names, contact details and search histories hacked

Australian cyber experts’ tip-off lead FBI and Australian Federal Police (AFP) to alleged hacker group

Brazilian police seize $1.7 Million in crypto from phishing ring’s wallets

Canadian ransomware expert Edward Dubrovsky arrested in federal hacking probe

Canadian ransomware negotiator arrested amid FBI hacker crackdown

Cyber executive arrested in case allegedly tied to ShinyHunters hackers

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

FBI Arrests Suspect in ShinyHunters Employee Data Breach

FBI Director Kash Patel says FBI has arrested another person tied to ShinyHunters hackers

Florida cybersecurity owner accused of misleading ransomware victims; prosecutors allege his firm charged them over $19 million while secretly paying hackers more than $8 million

Florida ransomware expert said his company could decrypt attacks without paying hackers; prosecutors allege he charged victims more than $19 million while secretly sending over $8 million in ransom payments

Goldman Sachs Clients Among Those Affected by Ernst & Young (EY) Data Breach

Hacker who leaked Grand Theft Auto VI (GTA VI) to be tried shortly before game's release

Holland & Knight Breach Exposes SSNs of 14 Clients

How Cyber Insurers Assess Policyholder Risks and Verify Security Improvements

How to check if your email or password was in a data breach (and what to do next)

Ireland: Donegal Gardaí urge vigilance as AI makes phishing emails more realistic

Manchester City whistleblower Rui Pinto to remain under police protection

Multiple major US law firms hit by data breaches, Social Security numbers exposed

Passkeys vs Passwords: Phishing Resistance Wins, but Recovery Still Matters

Phishing Scams Target Ledger Users as Fraudulent Sites Surge

Phishing Sites Impersonating Ledger Surface in Google Search as $86 Million Drain Probe Widens

Ransomware claims more than double in The Philippines

Ransomware Recovery Scam Allegedly Turned Victims Into Profit

Resorttrust Reports Data Breach Affecting 62,000 Records

Revolut data breach: the bank pays for new ID documents for 680 customers, and what you can do now

The Hacker Behind the 2022 Grand Theft Auto 6 (GTA 6) Leak Will Stand Trial on November 9th

Thousands of cheap Android devices infected with preinstalled malware

US offers $10 Million reward for Chinese hacker who stole COVID research

📅 9th October

5 Ways To Limit the Damage of One Bad Phishing Click

$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack

16-year-old allegedly led ransomware gang behind hundreds of attacks

53 companies in Japan hit by Qilin ransomware group

2022 Grand Theft Auto 6 (GTA 6) Hacker Arion Kurtaj Set for November 9th Trial

8,500+ European Wind, Solar Systems Exposed

A new “Secure Folder” Auth phishing scam targets Microsoft accounts

Advantest says ransomware attack compromised personal information

AI Agent Security Checks for DevSecOps Teams: Excessive Permissions, Human Approvals, and Untracked MCP Connections

AI Training Critical as Governance Challenges Grow

AI-Powered Pentest Tool Used to Breach South Korean Banks

Andover Confirms Cyberattack Reached Its Systems, Investigation Continues

Anthropic can’t reliably control its AI agents. It’s cutting off its internal evals from the live internet instead

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

Anthropic offers free AI security scans to open-source maintainers

Any-Time Home Care Data Breach Impacts 30,017 Individuals

Arizona Court Employee Fell For Phishing Email Exposing Personal Information Of 1.3 Million People

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Attackers unidentified in most hacking attacks on financial firms

Bangladesh: Hacker group claims access to data of 1.9 crore Pathao users

Belarusian hacktivists admit to 2023 breach of Russian state healthcare network

Bookoff Group Holdings Says Up to 6.43 Million Customer Records Potentially Leaked in Japan Data Breach, Including Password Hashes

Cash App is expected to begin sending out $15 million in data breach settlement payments in October

Cause of data breach at ASOS ruled out as customers urged to 'remain cautious'

China-based hacker used AI coding agent in attacks on South Korean banks

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix warns admins to patch new NetScaler RCE flaw immediately

Co-creator of Empire Market dark web marketplace given 40-year sentence

Companies want autonomous IT operations but hesitate to let AI act alone

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Critical Telegram Desktop bug: hackers can steal accounts with a single click

CrowdStrike finds possible bank hacker's CV in exposed AI session logs

CrowdStrike Uncovers Suspected Chinese Hacker Using AI Coding Tool Against Banks

CVE-2026-47483: NVIDIA DCGM Exporter Flaw Left More Than 12,000 GPUs Exposed, Researchers Say

Cyberattack on Japanese cloud firm hits railways, police and food suppliers, 495 organizations exposed

Cybercriminals Increase Use of RMM Tools in Phishing Campaigns

Cybersecurity CEO accused of pocketing millions by secretly paying hackers

Data Breach at Ricardo: Personal data from 890,000 user accounts was exposed

Data Recovery Deemed Difficult After Ransomware Attack on Japan's IDCF Cloud; 495 Companies and Municipalities Affected

Department of Justice (DOJ) and FBI Seize Microscan and FishHub, Hacking Tools Tied to China’s Flax Typhoon

Discord Blocks New Installs of Double Counter After Hacker Hijacks the Security Bot

Ernst & Young (EY) data breach puts spotlight on data security at Big Four as clients demand tighter controls

Estate agency warns clients over data breach linked to third-party provider

Everest Ransomware Claims Data Theft from Flydubai and Boeing

F.B.I. Arrests Key Suspect in ShinyHunters Hack of Its Own Agents’ Data

Family Farm & Home Data Breach Affects 14,032 People

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

FBI arrests another suspected ShinyHunters hacker after agency breach

FBI Arrests Founder of Ransomware Negotiation Firm

FBI arrests suspect from hacker group that targeted Grand Theft Auto (GTA) and the FBI itself

FBI disrupts Flax Typhoon hacking tools used in global cyberattacks

FBI Seize Phishing Tools Used by China-State Sponsored Hackers

FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

FBI Seizes Flax Typhoon Hacking Tools Linked to Chinese Contractor

FBI Takes Down China-Linked Tools That Scanned US Utilities

FBI touts another ShinyHunters arrest in response to data breach

FBI Warns FortiBleed Campaign Still Active, Hits 86,000+ FortiGate Devices

Feds Say Ransomware Expert’s Miracle Cure Was Just Paying the Hackers

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

Fraudster who targeted ransomware victims appears in US court

Germany arrests alleged core Qilin ransomware member after extradition

Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

Guangdong Hacker in 20s Uses AI in Attacks on South Korea's Finance

Hacker claims simple password allowed access to 8.8 million Danish CPR numbers

Hacker retained access to Danish CPR register for nearly 22 days before breach was discovered

Hacker returns 15,000 BNB to 79thVault in rare hack recovery

Hacker Returns 15,000 BNB to 79thVault in Rare Crypto Recovery

Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks

Hackers revive old Hikvision camera trick in spy campaign

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring

Home, Hope and Healing Data Breach Exposes Social Security Numbers and Medical Information

Hundreds of thousands impacted by data breach at biosensor firm iRhythm

IDC Frontier: Customer Data Recovery Challenging After Ransomware Attack, Affecting 495 Entities Including Businesses and Local Governments

IDC Frontier Ransomware Hits IDCF Cloud, 495 Organizations

IDCF Cloud Ransomware: 4 Zones Unrecoverable, Backups Fail

Japan confirms arrest of Russian Qilin operative, extradition to Germany

Japan’s IDCF Cloud Ransomware Disrupts 495 Organisations

Jefferson County services are nearly back to normal after data breach

Kakao Golf leak hits 34,000; data breach reports near annual record

Kash Patel announces arrest of suspected ShinyHunters co-conspirator after FBI jobs portal breach

Key Considerations for Outsourcing Security

Lawson Confirms Data Breach: Over 2.15 Million Records Exposed

Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty

Leaked Chat Logs Show Silent Ransomware Extorted Over $200,000,000 in 6 Months Without Encrypting Data

Madison County restores some online services hours after website shut down

Major AI Firms Pledge Data Protection Changes Following UK Privacy Watchdog Push

Man admits to running network of 15,000 money mules for cybercriminals

Manchester City whistleblower to remain in witness protection

Martin Brothers Data Breach Exposes SSNs and Contact Details

MATCHBOIL Malware Evolves as UAC-0099 Continues to Target Ukraine

Max severity SonicWall SMA1000 flaw now exploited in attacks

Microsoft: Outdated Windows devices will stop receiving security updates

MonsterCloud CEO charged in alleged ransomware recovery fraud

MonsterCloud CEO Zohar Pinhasi Accused of Paying Hackers, Defrauding Victims

Moorman Harting & Co. Data Breach: 17,765 Individuals Impacted

More Japanese Firms Hit by Large-Scale Data Breaches

Morgan Services Data Breach Exposes Social Security Numbers

New email attacks target both humans and AI in the same message

New ransomware trends: hijacking Active Directory instead of encrypting data

Nikkei suffers cyber attack, sensitive data of employees exposed

Nvidia monitoring bug could have knocked AI offline

Oracle Health data breach in 2025 compromised data of 20 Million people

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Pathao data breach: Hackers claim data of 19 million users

Pathao data breach claim puts 1.9 crore users at risk, hackers demand $400,000

PCI Security Standards Council (PCI SSC) calls for human approval of AI agent actions involving cardholder data

Peach Aviation: Ransomware Attack Disrupts Email Delivery Services

Phishing Attacks Using Remote Management Tools Surge, Report Finds

Phishing emails now target AI assistants alongside human recipients

Photon Health Data Breach: PHI and PII Exposed

Q3 2026 Sets New Record for Ransomware Attacks

Qilin hacker caught in Japan and handed over to Germany

Ransomware consultant said he would decrypt data, is accused of paying ransoms instead

Ransomware Hits Japan IDCF Cloud, 495 Clients Down

Ransomware Recovery Scam Nets $11 Million as AI Hits Banks

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Ricardo Reports Data Breach Affecting 890,000 Accounts

Russian Hacker $10 Million Scheme: Oleg Korniev Pleads Guilty in International Money Laundering Operation

Singapore: At least S$185,000 lost to phishing scams involving hotel bookings since January

Singapore: At least S$185,000 lost to scams involving hotels since January; 148 cases reported

Singapore: Beware of scams impersonating travel platforms, $185,000 lost since January

Small construction firm collapses after ransomware attack, while another narrowly avoids disaster

Southern Company reports data breach affecting 400,000 utility accounts

Splunk Patches 22 Vulnerabilities, Including Critical Flaw With CVSS 9.8

Spokane Schools Cyber Attack May Have Compromised Data

Springfield, Massachusetts, Schools Data Breach Affects Former Employees

Surveillance company Flock cuts staff as privacy backlash grows

Suspect arrested in FBI hack that exposed employee information

The Clock Has Run Out on Traditional Cybersecurity

‘The gap was not the awareness’: The company phishing trainings you loathe aren’t enough when nearly 1 in 4 security pros say their MFA is optional

These Aren’t the Decryption Keys You’re Looking For: Ransomware, Ransoms and the Illusion of Alternatives

Thousands of customers at risk after leading estate agency partner suffers data breach

Thousands of Swiss pensioners may have been affected by a data breach

Thousands of wind and solar park systems sit exposed on the internet across Europe

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Trump Mobile hackers threaten T-Mobile: “You're in big big trouble”

UAT-11985: AI-Assisted Phishing Campaign Targeting Taiwan Researchers with Malicious QR Codes

UK and Allies Warn of Cyber Threat from China’s Integrity Technology Group

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

US Offers $10 Million Bounty for Accused Chinese Hacker

US Offers $10 Million Reward for Chinese Hacker Allegedly Linked to China’s Intelligence Agencies

US seizes vulnerability scanning and spear phishing tools used by China-sponsored hackers

US targets alleged China-linked hacking network with domain seizures

Valley Oaks Health Data Breach Settlement Gets First Nod from Court

Webbers Estate Agents reports client data breach

Webbers Estate Agents warns clients of data breach at third-party provider

What the BPFDoor backdoor tells us about attacks on the network edge

Wikimedia Says Rogue AI Agents Abused its Platforms

📅 8th October

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

28 million Discord accounts have been affected by a data breach

53 companies in Japan hit by Qilin ransomware group

$76.7 million awarded to Desjardins customers affected by 2019 data breach

87 Bristol schools targeted by cyber attack

200 phishing victims take action against Argenta over €4.5 million in losses

Advantest Data Breach Confirmed Eight Months After Attack

Advantest Data Breach Exposes Medical Information and Contact Details

AI-Assisted Attacks Hit South Korean Banks, Exposing Hacker Records

Andover Confirms Unauthorized Access To Systems During Cyberattack

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

ASOS: Hackers tricked way into employee account before sending rogue push notification

ASOS confirms breach of customer data after hackers send rogue app notification

ASOS Confirms Breach: Names Leaked, 0 Passwords

ASOS Confirms Data Breach Linked to Stolen Employee Credentials

ASOS Data Breach: 1 Employee Account, 0 Information Commissioner's Office (ICO) Filing

ASOS Data Breach: Hackers begin sending threatening messages to Customers

ASOS data breach: What hackers accessed from customer accounts revealed

ASOS Data Breach Exposes Millions of Customer Records

ASOS explains how hacker was able to send threatening notification to customers

ASOS hack was worse than thought and customers’ personal information at risk

ASOS hackers took more personal details than first revealed

ASOS issues warning after 'full extent' of data breach emerges

ASOS links data breach to social engineering attack, credential theft

ASOS provides update on cyber attack as investigation continues

ASOS says customers’ names, contact details and search histories hacked

ASOS says hacker accessed customers’ search histories along with names and contact details

ASOS says hackers tricked an employee into handing over their work account login

ASOS warns shoppers over full extent of data breach after thousands sent sinister phone notification

Attackers Hijack Three country-code Top-Level Domains (ccTLDs) to Obtain Google Certificates

Australia: St Andrew’s Hospital reports personal data breach

Australian firms lag on passkeys as AI phishing rises

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls

Bridgewater Police warn of phishing email using department name

Bromcom notifies schools of data breach tied to legacy sign-on system

Canadian Mennonite University warns of data breach in cyberattack

Canadian VPN joins Signal, NordVPN and Windscribe in threat to leave Canada over surveillance law

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

Chinese hacker targeted South Korean banks using Claude, AI agent

Chinese Resident Clues in South Korean Financial Hacks

Chinese-speaking hacker possibly linked to AI-driven attacks on South Korean banks

Cisco Firewall Management Center Has Two CVSS 10.0 Unauthenticated RCEs - Interlock Ransomware Exploited One as Zero-Day

Cisco warns of critical flaws allowing Nexus switch takeover

Clio schools warns of phishing scam emails from ‘compromised’ district account

Clio, Michigan, Schools Targeted by Phishing Scam

Clover Health data breach exposes information of nearly 140,000 people

Coupang files lawsuits against 620 billion won fine over data leak

Coupang files lawsuits over $462 million in South Korea fines over data breach

Coupang files lawsuits to contest record $462 million South Korean data breach penalties

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

CrowdStrike finds possible bank hacker's CV among exposed AI logs

CrowdStrike Says South Korean Bank Hack Suspect May Be a 26-Year-Old Using ARTEX and Claude Code

Crypto hacker convicted of $53 Million theft after spending millions on rare Pokemon and Magic cards

Crypto theft campaign escalates on Firefox: 16 additional malicious extensions flagged

Crypto thief who splurged on gold grills sentenced in London

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers

Data breach: Estate agent’s Somerset customers’ details revealed in “security breach”

Data Breach Following a Cyberattack on the Federal Pension Fund

Department of Justice (DOJ) charges ransomware recovery CEO for secretly paying hackers

Desert Orthopaedic Center Data Breach Exposes Personal and Medical Information

Double Counter Data Breach Claims Cite 21.7 Million User Records

Dual-Threat Email Attacks Emerge: Single Phishing Payload Targets Both Human Eye and AI Mail Filters

Dutch intelligence agencies sound alarm over growing Chinese threat to edge devices

Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats

Even Prime Ministers Are Not Immune to Data Leaks

Fake AI Ad Portals Hit 6 Chatbots, Steal MFA Codes

Fake ChatGPT, Gemini Ads Hijack MFA at 6 AI Brands

Fake Decryption Tools Masked $11 Million Markup in Ransomware Recovery Scheme

FakeGit malware campaign returns with 17,610 malicious GitHub repos

FBI and Secret Service Warn of FortiBleed Lockout Threat

FBI disrupts Chinese hacking tools used to breach critical infrastructure

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets

First Financial Data Breach Affects 35,693 Individuals

Flock You and the Horse You Rode In On - Federal Court Rules Flock Violates Fourth Amendment

Florida cyber firm owner charged in alleged $19 Million ransomware payment scheme

Following Revolut’s Data Breach, the Digital Bank is Expected to Pay to Replace Identity Documents

Fortra Reports 475% Rise in Phishing Attacks Abusing Remote-Management Tools

French Police Arrest Two Brothers Over NudeLeaksTeens Platform Targeting 17,000+ Women and Girls

Germany arrests member of Qilin hacker group who was extradited from Japan

Germany Arrests “Qilin” Hacker Group Member Extradited from Japan

Global cyber attacks up 48% as ransomware and phishing climb

Goldman Sachs Ensnared in Ernst & Young (EY) Data Breach Earlier This Year

'Group of individuals' impacted by data breach at South Australian hospital

Guangdong hacker targets South Korea banks using Hong Kong servers, DeepSeek

GuidePoint Security Reports Record-High Ransomware Activity as Victims Rise 75% Year Over Year

Hacked Social Media Photos Sold Online: FBI Takes Down the Site

Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks

Hacker Who Hit Korean Finance Firms Exposed by AI Resume Request

Hackers Registered New Domain with Exact Microsoft Teams Interface to Steal Logins

Hackers take over Discord security bot, spam groups, and steal from credit cards

Hackers target two South Korean megachurches, potentially exposing congregant data

Harman Fitness Data Breach Exposes Personal and Health Information

Healthcare Highways Data Breach: PHI and PII Exposed

Hotel Phishing Campaign Uses Ethereum and TON Blockchains to Rotate Malware C2 Servers

How AI can fix cybersecurity compliance: From dashboards to continuous execution

Imagine the Possibilities Data Breach Exposes PHI and PII

International coalition seizes tools used by cyber firm behind Flax Typhoon

Italian Foreign Ministry under cyber-attack following Moscow’s accusations against Vice President of the Council of Ministers Antonio Tajani

Italy foreign ministry says it has come under cyber attack

Japan cloud service hit by ransomware attack

Japan extradites Russian man to Germany over role in Qilin ransomware group

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Japan Transfers Suspected Qilin Ransomware Figure to Germany

Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws

Known Cybersecurity Expert and Owner of Florida Ransomware Remediation Company Charged with Defrauding Clients

LabCorp will pay $2.3 million to 44 states for 2019 data breach

Laboratory Services Cooperative Agrees to Pay $6.1 Million to Settle Data Breach Litigation

Last year’s healthcare data breach at Oracle impacted 20 Million people

Law firm Sheppard Mullin sued in class action after data breach disclosure

Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal

Lawson Reports Data Breach Affecting Over 2.15 Million Records; Daiichi Kosho Also Hit With Up to 8.72 Million Potentially Exposed

Leaked chats show Russian extortion gang sending ‘agents’ into US law firms

Live Nation Faces Three Class Actions Over Data Breach Affecting SSNs, Health Records

Low-cost Android phones ship with residential proxy malware

Lubbock ISD Employees Affected By Major Data Breach Impacting Social Security Numbers

Medical devices patients rely on most are least prepared for quantum attacks

Microsoft Teams to get support for third-party deepfake detection tools

Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones

MonsterCloud boss charged over ransomware decryption fraud

MonsterCloud CEO Accused of Paying Ransomware Groups Behind Customers’ Backs

MonsterCloud Owner Accused of Billing Over $19 Million While Secretly Paying Ransoms to Decrypt Data

MonsterCloud Owner Charged With Secretly Paying Ransomware Demands

OpenAI used AI to draft disclosure after its agent hacked Australian government sites

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

Owner of Empire cybercrime market gets 40 years in prison

Pathao says cyber attack exposed users’ names, emails and phone numbers

Pro-Russian hacker group NoName targets Italian Foreign Ministry website

Publica Breach: One Supplier Hack Triggers Swiss Probe

Ransomware attack disrupts Japan's IDCF Cloud used by government clients

Ransomware attacks increasing in Japan

Ransomware claims surge in The Philippines

Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead

Ransomware Negotiator turns Cyber Criminal: A Twist in the Story

Ransomware recovery boss accused of secretly paying hackers

Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims

Ransomware recovery firm claimed it could decrypt files, but may have just paid hackers and pocketed the difference

Ransomware Recovery Firm Owner Charged With Secretly Paying Hackers While Billing Clients $19 Million

Ransomware remediation company owner charged with defrauding victims

Ransomware Response Firm CEO Accused of Data Recovery Fraud

Retail AI Security: Controlling Data Exposure, Shadow AI, and AI Agent Risks

Revolut compensates customers who have to apply for new identity documents after data breach

Revolut Pledges to Fund ID Replacements for Data Breach Victims

Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware

Russian hackers hide spyware behind bizarre cat feeding planner

Russian-aligned spies upgrade malware used in attacks on Ukrainian transport, energy firms

Scope of ASOS data breach wider than first reported

Secure Healthcare Data Breach Exposes Social Security Numbers and Medical Info

Security Leaders Share Additional Thoughts on Oracle Health Breach

Sheppard Mullin Data Breach Lawsuit Alleges Personal Information Was Stolen

Sheppard Mullin Faces Lawsuit After Data Breach

Shipping Association of New York and New Jersey Data Breach Exposes Social Security Numbers

Short-term risk from AI and cyber security has spiked

SoftBank Subsidiary Hit by Ransomware, Affecting 495 Companies and Local Governments

Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data

South Africa struggles to bounce back from ransomware

South Korea: Banks promise full compensation after hacks, but many may get left out

South Korean banks likely targeted by China-based hacker using AI agent

Suspected Chinese-speaking hacker uses AI to breach South Korean banks

Swiss pension fund hit by data leak after cyber attack on software provider

Teen Who Hacked FBI Arrested in Amman

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Tensorlake npm SDK 0.5.144 Compromised in ChainDrop/Shai-Hulud Credential-Stealing Attack

The FBI has seized tools used by Chinese hackers for cyber operations, officials say

The people who know passkeys best are still typing passwords

Thousands of cheap Android phones shipped with ad-fraud malware

TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US?

U.S. Offers $10 Million for Chinese Hacker Accused of Stealing COVID-19 Research

U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu

U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

Uranium crypto exchange hacker convicted for stealing $53 million

Uranium Finance Hacker Who Bought Pokémon and Magic Cards Convicted Over $50 Million Theft

US Government Moves $1 Billion in Bitcoin Seized From Bitfinex Hacker

US Puts $10 Million Bounty on Chinese Hacker Accused of Stealing COVID Research

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

US states sue TP-Link, claiming router ties to China expose millions of Americans to hackers

US-Israeli owner of Florida ransomware company charged with defrauding clients

Veradigm data breach exposes patient information after third-party vendor hack

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

We are fighting phishing at the wrong layer

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

Winn-Dixie Data Breach Exposes Social Security Numbers

You’ve heard of Phishing, but what is Quishing? How to spot fake QR code scams

YouTubers targeted with fake sponsorships and “channel verification” phishing

Zohar Pinhasi charged with wire fraud after using cybersecurity company to pay off hackers

📅 7th October

48% of Cybersecurity Professionals Rely on Passwords for Personal Accounts

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

100+ Ukrainian Websites Hacked to Install Lunex Stealer with ClickFix Lure

86,644 Firewalls in 194 Countries Breached With Stolen Passwords

Advantest confirms personal information stolen in ransomware attack

Alabama Securities Commission warns of online bill pay risks after Southern Company data breach

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

Anthropic Opens Claude Access to Red Teams and Verified Cyber Defenders

Aon Faces Unverified Ransomware Claim After Termite Leak Site Listing

Arizona: State court system hacked, Supreme Court warns of widespread data breach

Arizona court suffered data breach exposing 1.3 million people

Arizona courts say hackers stole info on more than 1.3 million people

ASOS Confirms Cyberattack, Data Breach

ASOS confirms data breach after “hacked” app alert reaches shoppers

ASOS Faces Investor Scrutiny After Cyber Attack Triggers Sharp Share Price Decline

ASOS hack - what happened to your data and should you be worried?

ASOS Hack Warning: Customers Urged to Watch for Phishing

ASOS opens investigation into potential customer data breach amid issues with third-party platforms

ASOS Says Some Customer Details Potentially Exposed Following Unauthorized App Alert and Hacker Claim Over Snowflake Data

ASOS share price drops after cyber attack

ASOS shoppers face data threat after cyber attack

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products

Attackers Hide AI Prompt Injections Inside Phishing Emails

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Australia: Unpatched server behind Victorian student data breach

Automation, AI agents or people? Sorting out who handles each security finding

Canadian Mennonite University students, staff victims of cyberattack

Canadian Mennonite University warns of data breach in cyberattack

Check your X.Org server version because a dozen vulnerabilities have been patched

Chinese AI Agent Fleet Uses Tencent Cloud to Bypass Amap Anti-Bot Protections

Coffee machine uses 1,000GB of traffic in 10 days, leaves IT Pro shocked

Cyber experts call on CISA to create mandatory federal Operational Technology (OT) rules

Cyberattack on South Korean Churches Exposes Data of More Than 1 Million Congregants

Cybersecurity Awareness Month 2026 - Don’t Make It Easy for Them

Cybersecurity Judgment: How Professionals Should Build It and Employers Identify It

CyberXero Uses 51 AI Agents to Target Ukrainian Critical Infrastructure and Mass-Exploit WordPress

Danish CPR Breach Highlights Challenge of Supply Chain Risk

Danish Population Register Breached, Leaking Data of Millions

Data breach victims face significant increase in loan denials, study finds

Denmark’s national ID system breach exposes personal data of 8.8 Million

Double Counter Data Breach Leaks IP Addresses of 28 Million Discord Users

Dread Dark Web Forum Hijacked, Operators Claim Control of Domain Keys

DriveWealth Data Breach May Have Impacted 2.5 Million

Dutch Tax Agency Reverses Microsoft 365 Cloud Migration Over Data Risks

EfficientIP Finds Malware Activity Quadrupled Since January, Overtaking Phishing as Top DNS Based Threat

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data

Ernst & Young (EY) Data Breach: 15-Day Hack, 81-Day Notice Gap

Ernst & Young (EY) Data Breach Exposes Goldman Sachs and Man Group Clients’ Data

Even with Operational Technology (OT) network visibility, critical infrastructure operators struggle with legacy equipment

Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)

Fake ChatGPT and Gemini Sites Used in AI Phishing Attack to Steal Ad Accounts and MFA Codes

Fake ChatGPT, Claude and Gemini Ads Use Browser-in-the-Browser Phishing to Steal Accounts

Fake ChatGPT, Gemini, and Claude Ad Tools Steal Logins and MFA Codes in New Phishing Campaign

FBI captures ATM jackpotting kingpin accused of stealing millions of dollars

FBI Removes Accenture Contractor After Missed Oracle Patch Led to ShinyHunters Data Breach

FBI Removes Accenture Contractor Following Employee Data Breach

FBI Removes Accenture-Linked Contractor After Employee Data Breach

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

FBI, Secret Service add to warnings of FortiBleed credential stealing campaign

FlyDubai data hijacked: hackers threaten to dump pilot data

FortiBleed Campaign Exploits Fortinet Firewalls and VPNs, FBI Warns

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

FortiBleed still a bleeding nuisance as FBI confirms ongoing attacks

Goldman Sachs client data exposed in Ernst & Young (EY) hack earlier this year

Hack exposes personal data of 5,000 Kia union members

Hacker caught double-crossing Gentlemen ransomware gang, diverting victims to keep all the loot

Hackers Claim ASOS Data Breach in Message Sent to App Users

Hackers crack Samsung Galaxy S26 with single email in zero-day attack

Hackers exploit critical Atlassian flaw after public Proof-of-Concept (PoC) release

Hackers hijack Google domains after breaching country-code Top-Level Domain (ccTLD) registries

Hackers hijack three country-code domain registries, obtain HTTPS certificates for Google domains

Hackers Impersonate ChatGPT, Claude and Gemini in Human-Operated MFA Phishing Campaign

Half of Cybersecurity Pros Still Rely on Passwords Despite Security Concerns

India: Karnataka High Court grants bail to hacker Sriki in money laundering case

Island reports fake AI-ad portals steering sign-ins in real time

Japan extradites suspected Qilin ransomware 28-year-old Russian member to Germany amid rising cybercrime records

Jefferson County phone system, online network taken down after possible cyber attack

Kaspersky flags Microsoft link phishing campaign

LG Uplus Faces Evidence Destruction Questions Over Data Breach

Live Nation Is Battling Multiple Class Action Lawsuits Following Its Latest Data Breach

Merrimack County says backups saved it from paying ransom after cyberattack

Oklahoma judge’s Flock ruling shows the power of Supreme Court’s digital evidence decision

Ongoing FortiBleed attacks lock out FortiGate VPN admins

Operational Technology Cybersecurity Coalition (OTCC) Urges CISA to Mandate Federal Operational Technology (OT) Security

Osaka Metropolitan University Hit by Ransomware, 130,000 Records at Risk

PeoplesBank discloses data breach at identity-verification vendor IDScan.net

Philippine organizations face rise in ransomware, phishing incidents in 2026

Philippine organizations see more ransomware, phishing incidents

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

PoeLLM malware infects exposed AI servers in cryptomining attacks

Proof-of-Concept (PoC) Exploit Released for Critical Atlassian Flaw That Can Lead to Jira Admin Access

Prosecutors demand 2 years in jail for Taiwan high-speed rail hacker

Qilin Hacker Detained in Japan

Ransomware attacks hit yearly high in August

Ransomware attacks jump 29% to hit new quarterly high in Q3

Ransomware Data Theft Surges 275% as Payments Sink

Ransomware has a new target. Is your backup ready?

Ransomware recovery CEO charged over secret ransom payments

Report Surfaces Sharp Increase in Malware Detections

Researchers Find 8,500+ European Wind and Solar Systems Exposed Online, With Full Control Possible at 180 Sites

Researchers Warn Fake ChatGPT and Gemini Sites Are Stealing MFA Codes

Retail and manufacturing named UK’s most security-exposed industry in new combined crime and data breach index

Russian cyberattacks against UK are 'Putin Tax' costing $3.3 billion, says lawmaker

Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach

Shinhan Bank likely to face collective lawsuit over customer data breach

ShinyHunters-Linked Hacker Arrested In Jordan

Silent Ransom Group Exposed in Data Leak

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

South Korea: AI Adoption Expands Security Vulnerabilities

South Korea: Bank data breach victims step up calls for compensation

South Korea: Two Seoul Megachurches Probe Suspected AI-Linked Cyberattacks as Data of 850,000 Members May Be Exposed

South Korea moves to deploy offensive cybersecurity after hospital data leaks

South Korean President Orders Probe After Financial Data Breaches

Suspected Data Breach at Korea's Largest Yoido Full Gospel Church: Personal Information of 850,000 Members, Including IDs and Phone Numbers, Potentially Exposed

Taiwan’s 104 Job Bank faces inspection after data breach

Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading

Thousands of Aussies potentially caught up in data breach at popular online fashion company ASOS

Toda Corporation Hacked: Data Breach Exposes Info of ~4,800 Employees, Up to 7,200 Business Partner Emails

Trump Mobile Data Breach: Hackers Claim Data on 3,615 Customers

Trump Mobile hit by fresh data breach as hackers claim 3,615 customer records leaked

Trump Mobile Suffers Data Breach (Maybe Again?)

UAC-0277 Hackers Compromise 100+ Websites to Spread LUNEXSTEALER via ClickFix Attacks

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

US posts $10 million reward for accused Chinese ‘Hafnium’ hacker

Veeam Backup & Replication Vulnerability Allow Attackers to Execute Malicious Script

‘We are sorry:’ OpenAI’s bid to prevent government data breach

We don't get Man City guilty verdict without hacker Rui Pinto, but it doesn't make him a hero

What ASOS customers should do after retailer hit by cyber attack

Wikimedia uncovers unauthorized activity by OpenAI’s AI agents across its platforms

Your Phishing Drill Numbers Are Lying to You

YouTubers targeted: convincing sponsorship offers lead to hijacked accounts

📅 6th October

8.8 Million Impacted by Data Breach at Denmark’s Central Person Register

8.8 Million People Affected in Major Denmark Data Breach

9 Common Ransomware Attack Vectors in 2026

Accenture Contractor Removed After FBI Data Breach Exposes Thousands of Employees

Accenture contractor removed from FBI following damaging data breach

AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed

Aldrich Services Data Breach Exposes Financial Account Information

Alleged ATM malware creator appears in Nebraska court after arrest

Alleged Hacker Attack on Online Retailer ASOS

Anderson School District 2 warns of possible data breach

Arizona: State court system hacked, Supreme Court warns of widespread data breach

ASOS confirms cyber attack

ASOS confirms cyber attack as customer data may have been accessed

ASOS confirms cyber attack, warns of ‘personal information’ access

ASOS confirms data breach after “HACKED” in-app notifications

ASOS Customers Receive Bizarre “Hacked” Message Amid Suspected Snowflake Compromise

ASOS customers receive threatening notification in apparent cyber attack

ASOS customers sent ‘hacked’ alert as shares plunge after warning echoes M&S cyber attack

ASOS cyber attack: Australian and UK customers sent threatening message as retailer investigates data breach

ASOS data breach: Hackers sent users a threatening message

ASOS Data Breach: Hackers Turn Retailer’s Own App Into a Ransom Note

ASOS hacked: App sends threat to customers

ASOS hacked: App users receive notifications apparently sent by hackers

ASOS hacked: message from hackers to app users, what to do now

ASOS hacked? A threatning 'we will leak it' alert has shoppers checking their accounts; is their data at risk and should customers delete the app?

ASOS hacked? Customers receive chilling notification claiming data was stolen

ASOS hacked in data breach affecting UK and Australia

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

ASOS investigating if client data base is compromised

ASOS Investigating ‘Unauthorized Activity’ Involving Apparent Data Breach Conducted by Hackers

ASOS Shares Slide 10% After Hacker Breach Claim

ASOS shares slide after hackers target online retailer

ASOS stock sinks 13% after hackers send threatening notification through its app

Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)

Atlassian Warns of Critical CVE-2026-21589 File Access Flaw in Data Center Products

Atlassian warns of critical file-access flaw in Jira, Confluence

Bolt Web Solutions Data Breach Exposes Social Security Numbers

China-linked TA419 targets US AI policy experts in phishing

Citizen Watch Says Data Breach at Outsourcing Partner May Have Exposed Personal Information of About 100,000 Customers in Japan

ClickFix Attack Hides VBScript Payload in Browser Cache

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Coupang CISO Apologizes for Data Breach at South Korea's National Assembly Audit; Shifts to Hardware-Based Key Management

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Critical Medical Devices Unable to Support Post-Quantum Cryptography (PQC) Transition

Cyber Threats targeting AI Experts at U.S. Legal Organizations, Universities and Businesses

Cybersecurity Awareness Month: Is AI Phishing Making Awareness Training Obsolete?

Danish data breach: Everything we know about the cyber attack that hit 8.8 million Danes

Data Breach Affects Alabama Power and Georgia Power Customers

Data breach at Denmark’s population register exposes 8.8 million people

Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)

Denmark Braces for Wave of Phishing Attacks

Denmark Data Breach Exposes Names, Addresses and ID Numbers of 8.8 Million People

Denmark Says Attackers Accessed Central Person Register (CPR) Data for 8.8 Million People via Company Account

Denmark sees serious data breach affecting 8.8 million people

Denmark's Biggest Data Breach? Hackers Access 8.8 Million Central Person Register (CPR) Records

Derbyshire automotive supplier takes £46 million revenue hit after customer cyber attack

Email attacks target both humans and AI in the same message

Engineer sentenced for locking over 3,000 devices on employer network

Ex-Engineer Daniel Rhyne Gets 32 Months in Prison for Sabotaging Employer’s Network and Demanding Bitcoin

Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

FBI Confirms Multiple Arrests in ShinyHunters Investigation

FBI Drops Accenture Contractor After Sensitive Data Breach

FBI Removes Accenture Contractor After Data Breach Exposes Employee Information

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

FBI Removes Accenture Contractor After PeopleSoft Breach Exposes Employee Data

FBI Removes Accenture Contractor Over ShinyHunters Data Breach

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

FBI removes contractor after missed security patch exposed employee data

FBI removes contractor working with its PeopleSoft system after data breach

Financial phishing campaigns exploit fragmented hosting, AI tools

FortiBleed remains active campaign, can lock out users or lead to ransomware attacks

From Phishing To Quishing - How To Protect Yourself From QR Code Scams

From ransomware to data breaches: How businesses can build financial resilience against cyber threats

Frontline Education Data Breach Highlights Third-Party Risks

Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks

Gentlemen Ransomware Affiliate Uses Stolen GitLab CI/CD Secrets to Breach Dozens of Organizations

Georgia Power Breach Exposes Data From 300,000 Accounts in 400,000-Customer Hack

Georgia Power data breach exposes information of 300,000 customers

Georgia Power says hackers accessed 400,000 customer accounts

GitHub Copilot CLI Vulnerability Could Enable Developer Secret and Local File Theft

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Hacker gang says it breached Deutsche Telekom’s IT arm

Hacker Group Claims to Have Stolen Trump Mobile Customers’ Personal Data

Hacker Rui Pinto’s technique for hacking Manchester City servers revealed

Hackers Message ASOS Users in Alleged Data Breach

Hong Kong Broadband Network modem QR code redirected to phishing site after domain lapse

How AI-Powered Phishing Works in 2026 (and How to Stop Scams in Their Tracks)

India: Mumbai Police Recover 25 Phones in Credit Card Phishing Case

Japan collars fugitive suspect of ransomware syndicate Qilin

Japan hands over ‘Qilin’ hacker group member to Germany

Japan hands over Russian national suspected of being ransomware group member to Germany

Japan hands over Russian ransomware suspect to Germany

Japan's Nimoca reports data breach affecting 521 customers; names and addresses not exposed

KillSec Ransomware Takedown: 16-Year-Old Named as Operator

Korean Prime Minister Warns of AI-Driven Phishing After Data Breaches

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Live Nation Data Breach Exposes Social Security Numbers

Massive Data Breach in Denmark Exposes Personal Info of 8.8 Million, Exceeding Total Population

Mississippi City Discloses Ransomware Incident

Nearly 100,000 Alabama Power Accounts Hit by Data Breach

Neopharm Labs Data Breach Impacts Current and Former Employees

Nikkei confirms Google account breach led to phishing attempts

Nikkei discloses breaches of employees’ Microsoft, Google email accounts

Nikkei Discloses Two Employee Cloud Account Compromises

Ninja Forms plugin flaw exploited to hack WordPress sites

No honor amongst thieves, as hacker betrays his own gang

Norway seeking temporary ban on smart glasses in public domain

NSE Insurance Data Breach Exposes SSNs and Medical Records

One missed security patch: FBI kicks out Accenture contractor after data breach

OpenAI addresses medicare data breach in Australia, promises faster incident reporting

OpenAI and Anthropic tell Australia they would welcome data breach rules, weeks after rogue AI agent hacked government websites

OpenAI faces scrutiny over Medicare data breach

OpenAI, Anthropic tell Australia they would welcome data breach rules

Oracle Health Data Breach From Last Year Was Reportedly Huge

Oracle medical data breach affected nearly 20 million people

Osaka Metropolitan University cancels classes after suspected ransomware attack

Pakistan: Phishing domains impersonate government agencies

PeoplesBank Data Breach Affects 23,731 Individuals

Phishing scam targets tourists applying for Schengen visas

Platt, Miller & Jacobs Data Breach Exposes Social Security Numbers

Post Claims Sale of Over 100 Million Rakuten Member Data; Rakuten States "No Data Breach Confirmed"

Potential widescale cyber attack on ASOS but head office “unaware”

Qantas 5.7 Million Customer Data Breach Suspect Detained in Jordan

"Qilin" Hacker Group Member Held in Japan, Sent to Germany

Qilin Ransomware Core Member, 28, Caught in Japan

Qilin Ransomware Member, 28, Extradited to Germany

Rakuten Drive Reports Data Breach, 15,000 Accounts' Stored Data Leaked

Rakuten Hit by Two Security Incidents: Confirmed Drive Breach Impacting 15,000+ Accounts and Unverified Claim of 101 Million Member Records for Sale

Ransomware Affiliate Double-Crosses RaaS Operator to Steal Victim Funds

Ransomware attack hits University of Illinois Chicago's College of Medicine

Ransomware Group 'Qilin' Operative Detained in Osaka, Extradited to Germany

Rare occurrence: Japan extradites ransomware suspect to Germany

Received a 4 a.m. call? Your Telegram may be hacked 5 minutes later

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

Researchers Determine That 2,514 Cybersecurity Events Occur Each Second

Rogue OpenAI agents made unauthorized Wikipedia edits and millions of requests to Wikimedia

Russian hackers found in hotel chain WiFis, targeting travelers

San Francisco wants to police its people with Israeli-made tech

Shares in British clothing company ASOS dive after hackers apparently send push notification

South Korea: Are Korea's financial defenses ready for an AI hacker army?

South Korea: Financial Supervisory Service (FSS) identifies 19 hacker IPs used in financial sector attacks, spanning 12 countries

South Korean officials believe AI agents were used to hack several banks

Stay alert, stay safe: Why cyber awareness matters more than ever

Stolen IFAPME data released for free on the dark web, exposing over 700K people

The Problem with Chasing IOCs: Why SOC Analysts Need More Context in Ransomware Investigations

Trump Mobile customers' data dumped - and some never even received their gold device

Trump Mobile Data Breach Exposed 3,615 Customers With No Response Team

Trump Mobile Data Breach Exposes Personal Details of Thousands of Users

Trump Mobile data breach hits family’s own cybersecurity chief

Trump Mobile data breach, BYOD gang leaks 3,615 customers' records

Trump Mobile leaves customers hanging following data breach: "We have no team to handle this."

UK: Police Urge Passkey Use After Surge in Cybercrime Profits

Unprecedented data breach in Denmark exposes 9 million citizens

US: Plans by CISA, Department of Defense (DoD) to Protect Elections May Be Too Little, Too Late

US-Bound Oil Supertanker Breached by Hackers

Voice Phishing Losses Hit Record 1.26 Trillion Won in Korea

Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits

Wikimedia Finds Unauthorized OpenAI Agent Activity Across Its Platforms

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

Wikimedia Says OpenAI’s Rogue AI Agents Possibly Behind May Wikidata Outage and Malicious Edits

World's Largest Ransomware Group Qilin Member Arrested in Japan

Your Service Desk Agents Can’t Out-Talk an AI

📅 5th October

3 ways to respond to time bomb ransomware

8 Steps to Take Immediately After Clicking a Phishing Link

16-year-old allegedly led ransomware gang behind hundreds of attacks

100,000 Alabama Power Customers Affected in Southern Company Data Breach

A Texas judge approves $177 million AT&T data breach settlement

AI slop submissions force Google to freeze its open-source bug bounty

Alabama Power says 100,000 customers affected by data breach

Alegeus Data Breach Exposes Social Security Numbers

Alleged developer of Ploutus ATM malware appears in US court after arrest

Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement

Apple iCloud Mail vulnerabilities allowed spoofed sender addresses

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

Apple tightens macOS disk access as AI agents become more powerful

Arizona Courts Cyber Attack Exposed 30 Years of Personal Data

Attackers Abuse Legitimate ScreenConnect Client in Phishing Campaign to Gain Remote Access

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security

Belarusian hacktivists spent two years inside Russian healthcare network, researchers say

Blackstone Data Breach Exposes Social Security Numbers

Bromcom notifies customers of personal data breach affecting SSO technology

California Subpoenas OpenAI Over AI Agent Cybersecurity Breaches

CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)

Citrix NetScaler Targeted Via New Zero Day

Citrix Warns of Actively Exploited NetScaler Vulnerabilities Affecting ADC and Gateway

City of Princeton confirms information taken during data breach

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

CVE-2026-88779: Citrix NetScaler Zero-Day Exploited in Targeted Attacks

Data breach at Denmark’s national population register exposes 8.8 million people

Data Breach in Denmark Exposes Personal Data of 8.8 Million People

Data breach in Denmark leaks personal data of 8.8 million

Denmark: Data of millions compromised in hack

Denmark data breach exposes 8.8 million people’s personal data

Denmark data breach exposes Central Population Register (CPR) records of 8.8 million people

Denmark data breach exposes information of 8.8 million people

Denmark data breach exposes personal details of 8.8 million people

Denmark hacker attack exposes data of 8.8 million people

Denmark investigates major Data Breach after 8.8 million Central Person Register (CPR) records Exposed

Denmark population registry data breach affects 8.8 million people

Denmark’s population database hit by major data breach

Denmark’s Population Registry Breached, 8.8 Million Affected

Desert De Oro Foods Data Breach Impacts Sensitive Personal Info of Employees

Detained ShinyHunters hacker reportedly helping FBI track down fellow members

Dutch Ex-Hacker Arrested Over Suspected Link To FBI Breach Gang

Fake brand discounts on social media prey on shoppers’ fear of missing out

Families United Network Data Breach Exposes Social Security Numbers

Family Physicians Data Breach Exposes PHI and PII

FitnessKPI denies data breach but confirms some logs still spilled

Frontline Education Breach Impacts K-12 School District Staff

Georgia Power customer data may have been accessed in data breach, company says

Georgia Power data breach exposes info of 300,000 customers

Google Gemini-Powered PageBreak Agent Finds More Than 500 XSS Vulnerabilities

Google halts open-source bug bounty program amid AI spam surge

Google Suspends Open Source Bug Bounty Over AI-Generated Reports

Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports

Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains

Hackers Abuse Trusted Remote Monitoring and Management (RMM) Software to Bypass Suspicion and Gain Remote Access

Hackers breached Denmark's national registry, exposing data on 8.8 million people

Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

Hackers hit Denmark: 8.8 million people exposed in a massive data breach

Hackers steal 8 million citizens’ records from Danish government database

How one person’s personal information can put the whole family at risk

How Remote Monitoring and Management (RMM) abuse gives attackers a way in that looks like business as usual

India: Supreme Court Refuses To Quash Star Health Data Breach Case Against Cybersecurity Researcher Himanshu Pathak

IQVIA fined $7.8 million for failing to properly anonymize health data

Iranian hacker accused of draining 31TB from university inboxes extradited to the US

Iranian hacker Amir Barati faces extradition to the US over alleged data theft campaign

Japan Plans Major Cyber Hunt to Detect Hidden Attacks on Critical Infrastructure

Japanese media group Nikkei discloses intrusions targeting employees and users

Joint FBI ‘Operation KillSwitch’ Dismantles KillSec Ransomware Network and Secures 110 Terabytes of Stolen Data

Lincoln Property Data Breach Exposes Sensitive Personal Information

Malicious VS Code Themes Hide GlassWorm Malware Targeting Developers

Managed Care of North America (MCNA) data breach settlement reached over breach affecting nearly 9 million people

Massive zero-day: cyber pro breaks out of virtual machine, takes root on KVM host

McLean Mortgage reaches settlement over 2025 data breach affected over 30,000

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Milk Dragon scam uses fake deals on social media to steal payment data

Millions of Airbnb, Uber, and Google records are for sale, hackers claim

More UK Schools Are Recovering Faster from Cyber Incidents

Most workers have encountered cyber threats at work, EU survey says

NEAR Intents Hack: Hacker Returns $3.8 Million After 48-Hour Ultimatum

NEAR Intents Hacker Returns $3.8 Million in Full

Nearly 40,000 phishing attacks hit US financial firms in H1 2026 - automated AI agents and a new Seychelles bulletproof host fuel aggressive new campaigns

Nearly 100,000 Alabama Power accounts affected by Southern Company data breach

New Dell System Update flaw lets hackers gain root privileges

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic

Nikkei Cyberattack Hijacks Employee Accounts, Sends 9,000 Spoofed Emails

Only 14% of 19.5 Million TVING Data Breach Victims Seek Compensation

Oracle health data breach touched nearly 20 million people

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)

Persona Dental Data Breach Impacts 3,386 Patients

Pilgrim Title Data Breach Compromises Government IDs and Financial Account Information

Potential data breach possibly affected as many as 100,000 Alabama Power customers

Ransomware disrupts University of Illinois Chicago medical school; hackers steal data

Ransomware gang threatens to dump more South African client data

Ransomware group threatens to leak customer data from top insurance companies in South Africa

Ransomware Hits JetBrains TeamCity Flaw, 9.8 CVSS

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Rejetto HFS servers now actively scanned for critical RCE flaw

Report Details AI Tactics and Techniques Used to Launch Cyberattacks

Restorative Therapies Data Breach: Medical Records Exposed

Security Industry Specialists (SIS) Data Breach Exposes SSNs and Driver's Licenses

Sensitive data breached in ransomware attack on Alabama Board of Nursing personnel systems

ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau

ShinyHunters Suspect Saif al-Din Khader Detained in Jordan, Helping FBI, Sources Say

Simple But Effective Hacking Surges

South African firms hit with R17 million ransomware recovery costs as attacks worsen

South Korea: "Posted Externally"...Emergency at Seoul Cyber University Over Personal Information Leak

South Korea Probes AI-Powered Cyberattacks After Major Banks Suffer Data Breaches

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea’s Shinhan Bank Hack Exposes Data of 25,000 Customers

Southern Company hit by data breach

St. Lucie County Finds Unpermitted Flock Cameras, Raising Privacy Concerns

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Star Health and Allied Insurance data breach case reaches Supreme Court

Star Health Data Breach: Supreme Court Refuses To Quash Criminal Case Against Cybersecurity Expert

Technical University of Denmark (DTU) Data Breach Exposes Data of Up to 200,000 People

Teen Scores $5K Bounty for JWT Flaw in Microsoft Titan Analytics Service

Teenager Suspected of Running KillSec Ransomware Group as Police Seize Servers in International Crackdown

Three questions a hospital CISO should ask a healthcare fintech vendor

TIAA Discloses Data Breach Exposing Social Security Numbers

Times Car Data Breach: 30,000 People Express Interest in Class-Action Lawsuit

Times Car Breach Hits 6.6 Million as Keio Confirms Ransomware

Times Car data breach exposes 6.6 million customer accounts in Japan

Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data

Unexpected Twist in $3.8 Million Crypto Attack: Hacker Returns All the Money!

University of Illinois Chicago affected by ransomware attack on medical school

University of Illinois Chicago College of Medicine systems impacted by ransomware attack

US, Australia warn of latest Citrix vulnerability after NetScaler advisory

What one hour of ransomware costs dairies, feedyards, hog barns and mills

Why AI-Written Phishing Is Outpacing the Native Filters Built to Stop It

Why Poppins Payroll Data Breach Is Particularly Concerning

Wikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool

World Acceptance Data Breach Impacts 51k Individuals

Zaxis Data Breach Exposes Social Security Numbers

Zscaler Report Finds 275% Jump in Ransomware Data Theft