Data Breaches Digest

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 12th October and 18th October 2026.

📅 18th October

AI-Powered Phishing Threatens U.S. Midterm Elections, FBI Warns

Chinese couple indicted after hiding laptop in Kobe hotel to launch massive phishing scam

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

Cyberattacks rise 48% worldwide in September

Fake VPN download site steals administrator credentials to give attackers direct access to corporate networks - but delivers official signed software so victims never suspect a thing

Florida begins notifying drivers affected by data breach and offers free protection: what you need to know

Florida Takes Action to Notify Drivers Impacted by Data Breach, Offers Free Protection: Key Information You Need to Know

Hacker reveals 68,000 AI toys could be hijacked to tell users their parents died

Hackers exploit SiteGuard WAF flaw to run commands as admins

Hackers heat supermarket freezers across France, spoiling food and sparking fires

Hackers Lurked in California Student Testing Files for Months, Millions Exposed

Handala Releases Confidential Documents from Israeli Cognitive Warfare Center

Health card, fake refunds and bonuses: how to avoid scams involving phishing emails

Hollys confirms customer data breach, urges immediate password changes

Hollys Data Breach Exposes Customer Personal Information

Massive Data Breach At Testing Contractor ETS Exposes Personal Records Of Millions Of California Students

Millions of California students hit by data breach

More Rewards Data Breach: 3-Day Gap, 4 Chains Hit

More Rewards Data Breach: What Save-On-Foods Shoppers Should Do Now

Oracle Health data breach exposes nearly 20 million patients

Ransomware Forces Insurance Changes for Nearly Half of Singapore Firms

Ransomware Groups Now Threaten Victims’ Families

Ransomware Surges 53% Year-on-Year as KillSec Arrest Made

South Korea: Voice phishing fraud cases more than doubled in 2025, data shows

South Korea: Voice Phishing Scams Double, Exceed 10,000 in Domestic Banks

📅 17th October

AI Enabled Ransomware, New Threat

California student data breach exposes records of millions, including disability status

Data breach of More Rewards customer information

Drupal patches critical RCE flaws, warns exploits may emerge soon

Florida DMV Breach: ShinyHunters Claims 500K Files

Hacker Accesses Data of Millions of California Students

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Microsoft disrupts Chinese-language phishing kits behind 1bn scam messages

Millions of California students' data exposed after hackers lurk in third-party testing system for months

More Rewards customers’ data accessed in a cybersecurity breach

Napoleon Perdis data breach affects 340,000 of the cosmetics company's clients

Napoleon Perdis hit by massive cyber attack as almost 340,000 customers have personal details exposed

Napoleon Perdis reports data breach affecting 339,000 customers

Northern Ireland: Dungannon man pleads not guilty to terrorist charges over Police Service of Northern Ireland (PSNI) data breach

Pediatric health network, vendor to pay New York $2.1 million after data breach

Ransomware budgets should fix basics first

Ransomware gang puts 2.6TB of sensitive Maryland government data up for sale

Redfin, Rocket Sued Over Employee Data Breach Kept Quiet for Months

Rogue AI agents hacked into Indian companies without anyone noticing

State Bank of India (SBI), Subsidiaries’ Customer Data Allegedly On Dark Web: 3.75 Lakh Records, 2,722 Documents Claimed In Data Breach

The calendar invite is the new phishing vector, and email filters aren't catching it

Where to track ransomware in Germany, Spain and the UK

📅 16th October

37% of ransomware attacks involve psychological or physical threats, global survey found

A Phishing Page Exploits a Recent Ledger Supply-Chain Incident

AI Fuels Ransomware Attacks and Threats Against Families

AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records

AI phishing kits are making micro businesses worth attacking

AI Weaponized in 84% of Ransomware Attacks, According to a New Survey

Al Jazeera journalists targeted by spyware through online ads

Alabama Nursing Renewals Reopen 6 Weeks After Ransomware; Nurses’ Data Stolen

Amazon’s new wearables listen to conversations, sparking privacy concerns

Android adds AI-powered scam alerts, hangs up on bank impostors

Angola, Nigeria, Kenya Top EMEA as Global Cyber Attacks Jump 48% Year-on-Year in September

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

Austin Independent School District (ISD) data breach exposes personal information of nearly 45,000 people

Australia targeted in massive phishing network takedown

Australian tech company with links to Defence, law enforcement allegedly breached by ransomware attack

Average total cost of data breach by industry

BAE Systems cyberattack disrupts US federal court operations

Baltimore suburb confirms August data breach after ransomware claims

Beware of this new phishing scam lurking in your work calendar

BeyondTrust patches zero-day exploited in attacks since August

Bristol primary school hit by second cyber attack as records exported in data breach

Burger King Japan confirms data breach, 11.18 million app records

Burger King Japan data breach exposes 11 million customer records

Burger King Japan data breach exposes 11.18 million app member records

Burger King Japan Data Breach Impacted 11 Million Customers

Burger King Japan Data Breach Impacts 11.18 Million App Member Records

Burger King Japan Says Breach May Affect 11.18 Million Accounts

Burger King's app breach exposed 11 Million records, customers advised to be cautious

Canada: Ontario man wanted for defrauding northern Albertan Indigenous government of $857,000 in targeted cyberattack

CenterPoint Energy Data Breach: More Than 1 Million Texans Affected

Central New York Shoppers Face Online Issues Due To Hannaford Cyber Attack

Central Ohio Primary Care Breach Hits 1.4 Million After Social-Engineering Scam

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

CERT-In warns of AI agents accessing Indian organisations’ data without permission, flags hacker attacks

China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns

China-Linked Hackers Exploit Critical BeyondTrust Zero-Day to Steal Credentials

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign

Chinese couple in Japan accused of hiding computer in hotel room to send 480,000 phishing emails

Chinese Phishing Network Uses 17,000 Domains to Target Japanese Banks and Steal Credentials

Claude Code Desktop Flaw Let Malicious HTML Steal Developer Credentials

Claude Code's preview pane could leak your secrets

Comic CMoa and ACCESS confirm two data breaches, from Japan to Taiwan

Connecticut Medical Data Breach Hits 62,871, Costs $2.7 Million

Connecticut Settles 2024 Data Breach That Compromised 58,000 Residents’ Information

Court of Justice of the EU: Phishing - the bank must reimburse the customer even if they have been negligent

Critical Atlassian Flaw CVE-2026-21589 Hits Eight Products and Lands on CISA’s Exploited List

Critical BlockStrap flaw lets hackers run code on Magento servers

Critical Linux kernel vulnerability leads to full KVM escape

Cyber Attack Shuts Down Refrigerators at 700 French Supermarkets, Resulting in Food Losses and Fires

Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing

Cyber-attack response becomes defining test of consumer trust for apparel brands

Cyberattack on BAE Systems Disrupts Bankruptcy Court Operations Across the US

Cyberattack throws US bankruptcy courts into chaos nationwide: What does it all mean?

Cybersecurity Incident at BAE Systems Takes Federal Bankruptcy Noticing Center Offline

Data breach confirmed at school in Bristol after targeted cyber attack

Data Breach Hits Florida Highway Safety Records, State Offers Free Credit Protection

DDoS attacks can knock services offline before links reach capacity

Defence Committee publishes Afghan data breach response and presses government for clear answers

Dexcom class action claims weak security led to data breach

Dutch group sues Meta after it refuses to alter its "spy glasses"

Dutch police urge Ahold Delhaize to file cybercrime report after major cybersecurity incident

Eilik AI robot exposes over 8 million private chats

European Court of Justice (ECJ): Banks must initially reimburse phishing losses

Fake Arch Linux Arch User Repository (AUR) packages exploit typos to run malware with root privileges

Fake calendar invites hit thousands of businesses in Microsoft credential phishing campaign

Fake Ledger firmware updates: SlowMist reports phishing pages with a replica Genuine Check

FBI and CISA warn of AI phishing ahead of US elections

Five Questions Security Teams Must Be Able to Answer About Every AI Agent

Florida: State provides information about driver license and motor vehicle data breach

Florida Department of Highway Safety and Motor Vehicles (FLHSMV) Data Breach Letters Are Going Out: What Florida Drivers Should Do

Florida driver license and motor vehicle records potentially exposed in data breach

Frontline Education Data Breach Impacts School Employees

GhostBat RAT Targets Indian Android Users with Fake mParivahan and eChallan Apps

Google Chrome Fixes 10 Security Flaws, Including Critical Use-After-Free Vulnerability

Google Rolls Out New Android Protections Against Scam Calls and Phishing Attacks

H&M investigates potential data breach after ShinyHunters claims cyber attack

Hacker Gets Data on Millions of California Students, State Education Department Says

Hackers disguise phishing as promising business opportunities

Hackers Exploit Critical Nextcloud Collabora Flaw to Execute Remote Commands

Hannaford digital outage drags on after parent company cyber attack

How Cybersecurity Startups are Tackling AI-Generated Phishing Attacks

India becomes the latest country to report rogue AI agent activity

Isle of Wight Council confirms 69 families affected in data breach

Japan's Keio Corporation Confirms Ransomware Group "Qilin" Claims Data Release

Japanese authorities target websites selling phishing tools used to mastermind scams

Ledger Users Warned of Fake Firmware Update Scam

Ledger, Again: Another Attack, Another Phishing Wave - How Can Users Protect Themselves?

Microsoft and Proofpoint Disrupt Chinese Phishing Network Behind 100 Million Emails Monthly

Microsoft Disrupts CoGUI Phishing Kit Linked to Over 100 Million Malicious Emails a Month

Microsoft exposes how USDT-funded phishing network targeted 75,000 organizations

Microsoft Seizes Domains Behind Chinese Phishing Kits Linked to 1 Billion Malicious Messages

Microsoft, Health-ISAC dismantle phishing infrastructure targeting critical infrastructure, healthcare sector

Mid Florida Dermatology & Plastic Surgery Data Breach Affects 85K Patients

Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia

Multiple grocery stores impacted by cyber attack

NTT Docomo Confirms Phishing Emails Displaying "Official Badge" on Docomo Mail, Suspends Badge Display for Affected Companies

OpenAI Claims Model Helped Solve Insider Threat Concern

OpenAI Details Three More Cases of Agents Gone Wild

Oracle Health data breach exposes nearly 20 million patients

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

Phishing scammers capitalise on Ledger panic with fake firmware update

Poole Group investigating LockBit ransomware attack

Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments

Ransomware Groups Increasingly Resorting to Real World Threats

Ransomware Recovery Isn’t a Backup Problem. It’s an Identity Problem

Ransomware's human toll: hospital patients and owners who broke down

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Researchers Expose Hacker’s AI Toolkit Revealing Second PaperCut RCE Attack Path

Romanian property transactions halved following ransomware attack on land registry

Roughly 1-Million Effected By CenterPoint Data Breach; Victims Not Yet Notified

Russian man linked to deadly London hospitals hack arrested

Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns

Shinhan Bank, Hit by 25,000-Customer Data Breach, Has Lowest Security Budget Among South Korea's Big Five Banks

Singapore faces AI-linked ransomware at 1.5 times global

Singapore Reports Higher AI Linked Ransomware Attacks

Skynox7 Proxyjacking Campaign Hijacks 140+ Edge Devices Across Almost 35 Countries

Solutions30 confirms cyberattack, hacker claims 10 million data records

SOURCENEXT Warns of Potential Data Breach Affecting 22.51 Million Records Due to Unauthorized Access, Urges Password Changes

Stolen AI API keys are paying for hackers’ autonomous scans

Study Links Ransomware Attacks to Threats Against Staff

Survey Finds AI Involved in 84% of Incidents at Ransomware-Hit Firms

Targeted ads installed Candiru spyware in zero-click attacks

The cyber talent shortage? Job postings just hit a four-year low

The Danish National Registry Could Use A Lesson In How To Create A Strong Password

The Essential Eight Is Being Replaced: What Australian Organisations Need to Know

The Human Breaking Point: A Reality Check on the 2026 State of Cybersecurity

TP-Link Tapo camera flaw lets hackers seize full control - update urged

UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

UK: Ofqual finds improved cyber attack recovery in schools

Valhalla Pediatric Network Pays $2.7 Million Over Breach Exposing 825,000 New York Patients

Weeks after data breach, Florida Department of Highway Safety and Motor Vehicles (FLHSMV) says it will let drivers know if their records were hacked

What Is Smishing? How SMS Phishing Works?

When Your Ransomware Negotiator Works for the Other Side

Whistles pauses online orders after parent company TFG London hit by cyber attack

Yamato Transport confirms data breach, 5.31 million records stolen

📅 15th October

1 Million Impacted by CenterPoint Energy Data Breach

1.4 million impacted by Central Ohio Primary Care Physicians data breach

87% of Ransomware Attacks Target Active Directory, Entra ID and Okta

92% click rate: Kaspersky warns about the most effective workplace phishing baits

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

AI Agents Expose Credentials Through CLI Arguments, Secret Stores and LLM Context

AI Security Audit Uncovers 24 curl Vulnerabilities Enabling Credential Theft and Command Injection

AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire

AI-armed hackers tear through corporate Japan’s neglected defences

Andover Cyberattack Review Continues Without New Findings Announced

Android gets AI defenses against messaging scams, fake calls

Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms

Banks must refund phishing victims immediately even in case of 'gross negligence', rules European Court of Justice (ECJ)

Bank of America hires 1,000 contractors to fix flaws found by Mythos

Bristol primary school hit by second cyber attack as records exported in data breach

Brooklyn District Attorney Dismantles Crypto Scam Targeting Russian Speakers: 240+ Domains and 110+ Servers Disrupted

Burger King Japan Confirms Data Breach Exposing 11.18 Million User Records

Burnaby school district confirms student and staff data stolen in ransomware attack

Cartoon Network Data Leak Exposes Over 200GB of Internal Animation Files From Popular Shows

CenterPoint Energy Data Breach Impacts 1 Million Texans

Central Ohio Primary Care says health info breached in cyberattack

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CISA Warns Hackers Are Exploiting Ivanti VPN Zero-Day to Steal Credentials and Data

Cisco Secure Email Gateway Flaw CVE-2026-76519 Is Under Active Attack, With No Workaround

Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

Concerns for a supermarket Swiss cyber attack

Critical Next.js Vulnerabilities Let Remote Attackers Execute Malicious Code and Crash Servers

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

Danfoss equipment targeted in French cyberattack

Data Breach Impacts a Million CenterPoint Energy Customers

DATA BREACH? States of Guernsey reports itself over Digital Greenhouse tender email

Denmark data breach: How a ‘123456’ password exposed 8.8 million records

Denmark data breach: Weak ‘123456’ password allegedly exposes 8.8 million personal records

Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

EU Court: Banks must immediately refund unauthorised payments despite customer negligence

EU court says banks must refund phishing victims before proving negligence

EU privacy watchdog raises concerns over privacy risks of smart glasses

European X alternative W Social denies leaking personal data to the open web

Every law enforcement data request crosses his desk: Microsoft’s Norman Barbosa speaks on global data battle

Fake Arch Linux packages push malware with root privileges

Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign

Fake CAPTCHAs are tricking users into running malware on their own devices

Fake Chrome App Hits 100,000+ Downloads After Appearing as Sponsored Google Play Result

Fake Chrome app racks up 100,000 downloads - with Google's own ads pushing it above the real thing

Fake Traffic Challan Texts Are Stealing UPI PINs From Android Users in India

Federal bankruptcy courts dealing with outages after contractor cyberattack

Federal courts knew Australian data was sent to India more than a decade ago but took no action, emails reveal

France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack

French supermarket cyber-attack highlights the importance of spoilage coverage

Frustrated Ransomware Gangs Turn to Real World Threats

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

Global law enforcement disrupts massive phishing-as-a-service ecosystem

Grandview Family Medicine Data Breach Affects 13,310

Grok Bot catches phishing emails, but could expose users to attacks

Hacker Claims ‘123456’ Password Exposed 8.8 Million Personal Records in Severe IT Breach

Hacker Uses ‘123456’ Password to Breach Denmark’s National Population Database

Hackers Chain Fortinet Vulnerabilities to Deploy Memory-Resident Malware on Firewalls

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

Hackers stole probation data in Legal Aid Agency (LAA) cyber attack

Hackers Use ClickFix and Python Tunnels to Prepare Systems for Ransomware Attacks

Hackers Use ClickFix to Deploy Lorem Ipsum Malware Loader and Gain Remote Access

Hackers used AI in most ransomware attacks and threatened staff, Semperis report found

Health Prime International Data Breach Exposes Social Security Numbers

Healthcare Ransomware Attacks Doubled Since This Time Last Year

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

Holland & Knight Breach Exposes SSNs of 14 Clients

How to respond to a ransomware attack

Hunter Neurology investigating patient data breach claims

In Denmark, a hacker accessed the state registry using the password "123456" - the leak was noticed only after 12 days

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1st

Information Commissioner’s Office (ICO) Reprimands Metropolitan Police Service Over Third-Party Data Leak

Inside the Phishing Marketplace Microsoft Just Took Down: 2,300 Fake Templates Exposed

International operation dismantles network behind a billion phishing messages

Ireland: 'People are constantly being duped' - Kildare residents urged to be vigilant against phishing calls

Iron Man Phishing Kit Uses 2,360 Fake Pages to Target Victims Across 130 Countries

Iron Man Phishing-as-a-Service Kit Impersonates Banks, Couriers and Government Agencies Worldwide

Ivanti's multi-headed zero-day exploited in the wild: CISA says patch now, but one flaw has no fix

July 2026 Healthcare Data Breach Report

KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

Legal Aid Agency cyberattack: Compromised data goes back to 1978

Legal Aid Agency Data Breach Update: 250,000 Pre-2007 Records Confirmed, Earliest From 1978, Included Offender Data

Lexington Hospital Data Breach Affects 67,000

Magna Hospitality Data Breach: 385 GB of Data Stolen

Major British fashion brand PAUSES online orders after being hit by cyber attack

Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages

Microsoft disrupts phishing network behind more than a billion scam messages

Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1 Billion Malicious Messages

Microsoft Shuts Down Phishing Kits Generating 1 Billion Messages

Microsoft takes down Chinese tools behind over a billion phishing emails

Microsoft Takes Down Global Scam Network Behind 1 Billion Messages

Microsoft, Japan Take Down Network Behind 1 Billion Scams

Microsoft, partners disrupt phishing kit ecosystem behind cybercrime operations

Missouri Central Credit Union Data Breach Exposes Financial Account Information

More than 1 million customers affected in CenterPoint Energy data breach

Multiple Citrix UniconOS and XenServer Flaws Let Attackers Escalate Privileges and Compromise Hosts

n0n Group Threatens 38 Maritime Firms, $14 Million Demand

New Aoki Infostealer Targets AI Coding Assistant Credentials

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

OLVX Marketplace Dismantled After Joint FBI-North Macedonia Probe

Online ads helped deliver Israeli spyware to devices visiting Al Jazeera, 120,000 websites

Online fraud: banks must immediately reimburse customers, even in cases of negligence

Over 350 French supermarkets affected by cyber attack on Danfoss

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

Personal information of students, parents and staff stolen by ‘criminal actors’ in Burnaby cyberattack

Phishing 2026: Cybercriminals combine AI and new attack channels

Proof-of-Concept Exploit Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability

Ransomware: Hackers use AI to threaten workers' families

Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families

Ransomware extortion gets personal as attackers target employees’ families

Ransomware gangs threaten Australian executives & families

Ransomware planning still starts too late

Ransomware Victims’ Employees and Families face Swatting and other Cyber Threats

Secure Health Data Breach Compromises Protected Health Information

Security incident knocks out UK Housing Ombudsman’s case management system

Semperis report: Australian cyber executives face physical threats in ransomware attacks

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in Commonwealth of Independent States (CIS) Government Attacks

Singapore and United States Expand Cyber Cooperation Around AI, Critical Infrastructure and Ransomware

Sourcenext Breach Exposes 22.5 Million Accounts and Their Passwords

South African lab Ampath confirms cyberattack, disputes hacker’s claim of 80 million patients

South Korea names two crypto firms in breach wave that also hit major banks

South Korea’s OK Savings Bank Suffers Data Breach; 250 Customers Affected

Southville Primary school in Bristol hit by targeted cyber-attack

Space Bears claims ransomware attack on Alma Center, Italy

String of Ransomware Cyber Attacks Prompts First “Cybersecurity State of Emergency” Declaration From Japan

Suspected Kazakhstan-linked hackers target governments across former Soviet states

Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware

Tebra Data Breach Impacts Protected Health and Sensitive Personal Info

The Front Door Is Guarded But the Back Door Isn’t Even Locked

The internet’s attack surface moves at very different speeds

Two Arrested, Laptops Seized in U.S. Crackdown on North Korea Worker Scams

UK data watchdog warns Metropolitan Police over shadow IT data breach

UK Legal Aid Agency: Hackers stole records dating back to 1978

UK Legal Aid Agency Confirms Hackers Stole Sensitive Records Dating Back to 1978

UK Legal Aid Agency Data Breach Exposes Personal Records Dating Back to 1978

UK Legal Aid Agency Hack Scope Widens After Forensic Review

UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978

Vibetech Database Exposes 13.7 Million Records Including AT&T and FBI Data

Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool

'What appears to be a simple scam message is often the visible end of a much larger transnational cybercriminal operation': Microsoft leads global takedown of phishing network which sent over a billion messages

Wood Buffalo Royal Canadian Mounted Police (RCMP) charge suspect after $857,000 spear-phishing scam

Zero-click spyware infecting devices through online ads, researchers say

📅 14th October

'123456' Password Linked To Data Breach Exposing 8.8 Million Danish ID Numbers

'123456' password was all a hacker reportedly needed to expose over 8 million people's personal data

'123456' password was the only thing standing between hacker and data of 8.8 million people

AI Agents Could Gain Ability to Self-Replicate

AI Behind 84% of Ransomware? It Is a Vendor Survey, Not a Count

AI Fuels Record Microsoft Patch Tuesday Report

AI Is Rewriting the Playbook for Bank Phishing and Payments Fraud

AI linked to 84% of ransomware attacks, new report finds

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

Akira ransomware attack highlights Multi-Factor Authentication (MFA) gaps in VPN and RDP access

Ampath says data breach claims of “80 million patient records” are overstated

ANSSI Says Copeland and Dixell Fridges Were Also Hacked in French Supermarket Attack

As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

Australia: Mandurah State Emergency Service (Mandurah SES) confirms operations unaffected by ransomware attack

Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched

Brooklyn District Attorney’s office disrupts crypto scam targeting Russian community

Careless hacker leaves gift card fraud blueprint open: What did we learn?

Check Point Reports LiteLLM Flaws Enabling Admin Takeover and API Key Theft

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records

Cisco patches new Secure Email Gateway zero-day exploited in attacks

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Congressional probe faults Match Group for failing to rein in dating app scams

Costa Solutions Data Breach Impacts 22k: PHI and PII Exposed

Crunchbase Data Breach: ShinyHunters Leak Exposes Roughly 560,000 Emails, Now on Have I Been Pwned (HIBP)

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

Cyber Attack Hits Fridges in French Supermarkets, Spoiling Food Worth Millions of Euros

Cyber attacks grew 48% year-on-year in September

Death Threats, Laptop Farms, Stolen IDs: Inside North Korea’s Job Scam

Department of Justice (DOJ) Charges 14 in North Korean IT Worker Scheme, Seizes 180+ Devices in Texas

Disaster info service halted in parts of Japan over data breach fears

Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus

DragonForce Ransomware Profile: From Affiliate Program to Cybercrime Cartel

Evanston Township High School District (ETHS) faces uphill battle following June ransomware attack

Fake AI-written event invites steal Google accounts in attack on Taiwan

Fashion retail’s cyber-attack fallout: ‘Substantial’ drop in orders and tighter checks

FBI arrests Saudi OpenAI engineer over covert recording device

FBI Data Breach Highlights Risks of Unpatched Oracle PeopleSoft Vulnerability

FBI raids 40+ laptop farms helping North Korea pocket US tech salaries

FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

French Supermarket Cyber-Attack Impacts More Refrigeration Controllers

Global takedown hits network behind 1 billion phishing messages

Google's developer website had a remote code execution flaw worth $90,000

H&M faces data leak threat as suspected breach trail leads to warehouse supplier

Hacker claims that he used the password that security researchers have been warning internet users to stop using since over five years to hack into Denmark's national registry

Hacker Pulls $86,000 in Locked Tokens From a Shared Crypto Vault

Hacker Says a "123456" Password Got Them Into Denmark's ID Register, Exposing 8.8 Million People

Hacker targets Ivanti Connect Secure in chained exploitation

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Hackers could disable your local supermarket fridge for just $6

Hackers could steal OpenAI, Anthropic keys through LiteLLM bugs

Hackers stole records dating back almost 50 years in legal aid cyber attack

Hackers Turned French Supermarket Freezers Into Ovens Overnight

Hirudo Android malware replaces banking apps to evade security checks

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

Holton Community Hospital (HCH) patient information involved in data breach

How to Close the Hybrid Security Gap Across Clouds

Hundreds of supermarkets in France hit by hacker attack

IDC Frontier Says No Data Leak in Ransomware Attack; 194 Customers Can Restore from Backups

Investigation following a data breach at TUI Belgium as a result of targeted phishing attempts

Ireland: Department of Justice leaked Garda whistleblower's identity two weeks after data breach with another

iRhythm said June data breach exposes data of over 360,000 people

Japan: Customer data breach suspected at sushi delivery operator

Japan halts disaster information services over data breach fears

Japan on Cyberattack Alert as Ransomware Wave Hits Major Brands and Exposes Millions of Records

Japan Warns of A2B Attacks: Hackers Use Public Android Apps to Reach Backend Servers

JM Bullion Data Breach Exposes Social Security Numbers

JPMorgan blocks outside AI agents from customer accounts

Kannarr Eye Care Data Breach Affects 14,003 Patients

Ledger asks sellers across Asia to halt sales after supply-chain attack

Massive Cyber Attack Threatens Release of Data from 38 Maritime Companies

Meta confirms GitHub data breach, hackers expose personal information of 1500 employees

Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem

Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs

Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

Microsoft Disrupts Chinese-Language Phishing Market Behind 1 Billion+ Messages

Microsoft Disrupts Phishing Supply Chain Behind 1 Billion-Plus Scam Messages, Starting From Japanese Police Tip

Microsoft fixes 1,400+ vulnerabilities in October, exceeding 2025’s annual total

Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)

Microsoft Fixes Record 1,413 CVEs in October Patch Tuesday

Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack

Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

Microsoft Shuts Down Chinese Phishing Empire Behind Billion Messages to 75,000 Organizations

Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals

Microsoft Takes Down Chinese-Language Phishing Services

Microsoft Takes Down Massive Chinese Phishing Marketplace

Microsoft, Health-ISAC and partners take down popular phishing kit services

Microsoft, Japan Took Down a Notorious Cybercrime Phishing Network Responsible For Global Scams

Mid Florida Dermatology Data Breach Impacts 85,585 Patients

MIP Holdings attackers rank fourth on ransomware leak sites, says Microsoft

More than 1 million customers impacted by CenterPoint Energy data breach

Most companies count AI agents as insiders, and CISOs worry about their own liability

Netherlands, Belgium Face Grocery Supply Disruptions After Ahold Delhaize Incident

Newly Exploited Vulnerability in Ivanti Connect Secure

North Macedonian police arrest alleged administrator behind OLVX cybercrime market

Northern Ireland: Men plead not guilty to terrorist charges over Police Service of Northern Ireland (PSNI) data breach

OK Savings Bank Confirms Data Breach Affecting 250 Customers

OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

OpenAI engineer arrested for allegedly trying to eavesdrop on executive meetings

Oracle Health Data Breach Impacted Over 20 Million Patients

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Passkey Authentications Double but Adoption Remains Slow

Passkeys offer greater security as AI lowers phishing barrier

Patching and preventing issues: What are the lessons you can learn?

Personal data stolen from Meta’s GitHub: Why was it even there?

Phase Eight, Hobbs and Whistles owner joins growing list of fashion retailers targeted by hackers

Ransomware actors reportedly escalating to physical threats and violence

Ransomware attack on IDC Frontier affects nearly 500 organisations in Japan

Ransomware Gangs Embrace Physical Threats, Family Stalking?

Ransomware gets personal: 'We-know-where-you-are kind of stuff'

Ransomware jumps 600% in Australasia, but New Zealand cyber cover stays soft

Refrigeration System Cyberattack Impacts 700+ Retailers

Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

Revolut data breach may be linked to $800,000 robbery

Rochester cybersecurity experts stress employee training amid rising AI phishing threats

ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads

Russian travel booking platform suspends reservations after cyberattack

SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python

Saudi national charged with planting spy device in OpenAI executive conference room

Securing the Leap to Autonomous AI

Semperis 2026 Ransomware Report Reveals Increases in AI-Driven Attacks and a Rise in Physical Threats Against Executives and Their Families

Singapore: New cyberincident helpline promises triage callback within two hours

South Korea: 17 Arrested for '010' Spoofing in Voice Phishing

South Korea: Two Men in Their 20s Get Heavy Sentences for Role in 1.1 Billion-Won Phishing Using Spoofed "010" Numbers

Spyware manufacturer had access to data harvested by former Polish government, current Prime Minister says

Study finds AI involved in more than 84% of Ransomware Attacks

TFG London cyber-attack puts fashion retailers on alert as security concerns grow

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime

The Netherlands: Supermarket rivals benefitting as Albert Heijn cyber woes continue; Phishing warning

TUI Confirms Data Breach Amid WhatsApp Booking Scams

U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud

Ubiquiti patches high-severity security bugs in its security appliance AI Key

Universal Dermatology Data Breach Affects 35,295 Patients

Vietnamese woman arrested in Japan for allegedly laundering scam money

Volkswagen dealership network hit by major data breach in Germany

What Did A New Report Reveal About AI Use In Ransomware Attacks

What happens to your information after a data breach

What Your IP Address Reveals Every Time You Visit a Website

Windows update patches a whopping 1,400 security bugs - including 2 zero days

Yam Store: The Phishing Network Behind a Billion Messages

📅 13th October

14 Million Credentials Re-Exposed by AI Development Company

21 months, $100 million, one Qilin suspect in custody

'123456' password linked to Denmark data breach affecting 8.8 Million people

A cyber attack disrupts French retail chains. Cooling systems are under attack and losses in the millions of euros

A Cybersecurity Expert Said He Could Beat Ransomware. Prosecutors Say He Paid Hackers Over $8 Million

Ahold Delhaize Cyberattack Takes Giant, Food Lion, and Stop & Shop Websites Offline, Impacts European Online Orders

AI Is Now Fighting on Both Sides of the Cyber War, Singapore Warns

AI Scams Target Crypto Users, Not Protocols, and Wallet Security Is Catching Up

Albert Heijn outage very likely a cyber attack, experts say

All Souls St Gabriels School investigating cyber incident in wake of ransomware claims

Amazon Fire TV Cube Rooted Using Four-Year-Old Arm Mali Vulnerability

American Medical Collection Agency (AMCA) agrees to $6.44 million settlement over 2018 data breach

Another major fashion retailer hit by cyber attack

Anthropic warns self-replicating AI could spread to your smart devices

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

ASOS Cyber Attack: What UK Businesses Can Learn About Cyber Risk and Insurance

AT&T, Amazon, and PayPal credentials found exposed by AI company

Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach

Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

Aviation Communications Security: Addressing Legacy Technology, Threat Detection, and Modernization Challenges

BBC International Data Breach Exposes Sensitive PHI and PII of Employees

British Indian AI minister warns of 'inevitable' cyber-attack on UK

Calendar invites emerge as new phishing route targeting work meetings

Callback Phishing: No Link, No Attachment, Just A Phone Number

Canadian ransomware negotiator arrested amid FBI hacker crackdown

Company netted at least $60 million charging sextortion victims for help it didn’t provide

Coupang Data Breach Fine Reaches Record $466 Million: National Assembly Summons Executive Over Stolen Key

Cyber attack heats up hundreds of fridges at French supermarkets

Cyber attack hits 480-plus French supermarkets: Fridges overheated to 50°C, food spoiled, fires reported in several stores

Cyber attack hits Hobbs, Whistles and Phase Eight as customers warned of delays

Cyber attack hits hundreds of French supermarkets, heating fridges to 122°F and sparking fires

Cyber attack targets French supermarket refrigerators

Cyber incident hits grocery stores in US, Netherlands and Belgium

Cyber-attack on French refrigeration systems exposes insurance blind spots and retail risks

Cyberattack on TFG London Raises Data Security Concerns for Fashion Retailer

CyberXero Uses AI Orchestration Layer to Run Two Cyber Campaigns

Data Breach at Denmark’s Central Population Registry Impacts 8.8 Million People

Data Breach at South Korea's MG Community Credit Cooperatives Exposes Info of 400 Insurance Customers, Including Account Numbers and Balances

Data Breach Damages: How Courts Are Testing Alleged Harm at the Pleading and Class-Certification Stages

Data Breach Threat against H&M by ShinyHunters raises Cybersecurity Concerns

Deepfakes Are Driving $40 Billion of Fraudulent Transactions

Defenders Reluctant to Deploy Agentic AI as a Cybersecurity Tool

Denmark Data Breach Involving 8.8 Million Records Linked to ‘123456’ Password

Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

Docker Hub flaw let attackers impersonate users, tamper with images

Does Your CISO Have the Authority the Job Now Requires?

Empire Market operator sentenced to 40 years for $430 Million in illicit trade

EU Commissioner on Cyber Attack on French Supermarkets: Food Weaponization Now a 'Reality'

European Retail Firms Confirm Cyber Incidents

FBI arrests OpenAI employee accused of planting hidden recording device in conference room

Fifth of CISOs Take Time Off to Avoid Patch Tuesday

Fiji: Minister for Policing and Communications Ioane Naivalurua reviewing suspected cyber attack on Suva-based regional organisation

Fiji: US Embassy informs Government of suspected cyber attack on Suva-based regional organisation

First Physical Robbery Potentially Linked to Revolut Data Breach

Food safety fears grow as Copeland is named as second fridge supplier hit in supermarket hacking spree

France Supermarket Cyberattack: Hackers Raise Fridge Temperatures to 50°C, Spoil Food and Trigger Fires at Hundreds of Stores

French supermarket fridges cyber attack: What it means for the Food & Beverage industry

French supermarket fridges targeted in cyber attack

French Supermarkets Face Millions in Losses from Large-Scale Cyber Attack

French supermarkets targeted by cyber-attack on refrigeration systems

French supermarkets targeted in ‘large scale’ hacker attacks

From AI-enabled killer drones to AI-made pathogens: MI5 chief warns new era of cyber warfare

Ghostscript flaw lets hackers hijack servers via PDF uploads

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

H&M investigates cyber attack claims as string of fashion brands hit by data breach just days after ASOS hack

H&M investigates data breach after ShinyHunters claims

H&M investigating cyber attack claims, reports say

Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records - IT and data services company with weak passwords linked source of the hack

Hacker says IT company’s ‘123456’ password let them gain access to 8.8 million records

Hackers Force French Supermarket Fridges to Heat Up to 50C in ‘Unprecedented’ Cyber-Attack

Hackers Heat French Supermarket Fridges, Possibly Due to Unpatched Danfoss Controller Flaw

Hobbs and Whistles owner apologises as fashion chains hit by cyber attack

Hobbs and Whistles owner apologises to shoppers after being hit by cyber attack

Hobbs and Whistles owner investigates hack that may have exposed customer data

Hobbs and Whistles owner struck by cyber attack

Hobbs and Whistles owner TFG London hit by cyber attack amid growing wave of retail breaches

Hobbs and White Stuff owner hit by cyber-attack

Hobbs, Whistles and Phase Eight struck by cyber attack as 'investigation' underway

Hundreds Of Grocery Stores In France Targeted By Cyber Attack As Hackers Turned Up Fridge Temps To Spoil Food And Trigger Fires

Hundreds of UK supermarket fridges at risk of being HACKED after ‘large-scale’ cyber attack in France

IDARE Data Breach Affects 129,659 Users

Ivanti warns of Connect Secure zero-day exploited in attacks

Japan: Customer Data Breach Suspected at Sushi Delivery Operator

Japan declares 'state of emergency in cyberspace' as AI unleashes mass ransomware waves

Japan’s Data Breach Wave Highlights Growing Risks to Sensitive Information

Justice Department says North Koreans have infiltrated dozens of U.S. companies

Kimsuky Hackers Use Malicious Resume Documents to Deploy Funhouse Ransomware

Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware

Kimsuky Uses Quasar RAT to Deploy Funhouse Ransomware Through Multi-Stage Scripts

Korean Federation of Community Credit Cooperatives (KFCC) hack leaks 400 customers' data, promises full compensation

Ledger says hardware implant in cryptocurrency wallets stole recovery phrases

Lehigh Valley Data Breach Affects 17,892 People

LG smart TVs vulnerable: attackers can bypass webOS security and gain root

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Major fashion company sends warning to customers after data breach

Meta Security Breach Exposes Corporate Code, Employee Data on GitHub

MG Community Credit Cooperatives Federation insurance data breach includes ID and account numbers

Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

Microsoft Teams Phishing, ClickFix and Shai-Hulud npm Attacks Dominate Threat Report

Microsoft’s adtech firm Xandr faces record fine over sensitive Grindr user data

Millions Of Records, Dozens Of Companies: Inside Japan's Escalating Cyber Crisis

Mobileum Data Breach Exposes Social Security Numbers

Moldova: STISC warns of spear-phishing campaign targeting Government institutions

Morocco Flags AI Threats, Prioritizes Critical Infrastructure Defense

Most high-severity cloud security findings are downgraded once an AI agent checks the environment

Nearly 1 in 3 Organizations Face IT Support Microsoft Teams Schemes

Nippon Columbia Data Breach Exposes 8.6 Million Records

North Korean hackers target Ukrainian experts for possible intelligence on Russia's war

Norway Fines Microsoft’s Ad Firm Xandr $9.6 Million Over Grindr User Data Sharing

npm Trusted Publishing flaw exposed 1,500+ npm packages to takeover

OK Savings Bank data breach hits 183 customers via loan application page

OpenAI engineer arrested for allegedly planting spy device in office

Owner of fashion brands Hobbs and Phase Eight becomes the latest retailer to be hit by a cyber attack

Patch Tuesdays aren’t for everyone: 20% of cyber pros take time off to avoid them

Perseus House Data Breach Exposes PHI and PII

Phase Eight and Hobbs owner hit by cyber-attack, as H&M probes separate hack claim

Phishing Attacks Increasingly Exploit Remote Management Tools and AI E-mail Assistants

Phishing disrupts South Carolina Department of Education voucher payments

Qilin ransomware: Japan extradites gang leader to Germany

Ransomware Attacks Have Swept Japan. A.I. May Be Making Them Easier

Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers

Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

SAP warns of maximum severity OAuth2 SSRF security flaw

Scammers Are Using Calendar Invites To Trick You. Here's How

Self-replicating AI models could soon usurp your fridge, Anthropic warns

Singapore refreshes cyber strategy with new measure to block malware and phishing sites

Solutions30 Data Breach Claim: Hacker Offers 10+ Million Records for Sale

South Africa: Government department waited two weeks to report data breach exposing 280,000 South Africans

South African clothing retailer Foschini Group investigating cyberattack on British fashion brands

South Carolina Department of Education investigating after vendor targeted by phishing campaign

South Korea: Major Banks Block 3,273 Accounts Linked to Phishing Scams Via Easy Money Transfer Services in First Half of This Year

South Korea: Money Laundering Group Extorts 2.32 Billion Won from Gambling Sites

South Korea: Police Issue Nationwide Alert Text Over Fears of Voice Phishing Following Hacking Incidents

South Korea: Ring Involving Bank Workers Extorts 2.3 Billion Won from Gambling Sites Using Dummy Accounts

South Korea's Financial Supervisory Service (FSS) Launches On-Site Inspection of Yegaram Savings Bank Over Hacking Breach, Weighs Formal Probe

Suspected hacker says AI created program used in Danish CPR breach

Switzerland: Tens of Thousands of Pension Fund Records Stolen - Here's What You Need to Do Now

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

The big melt: French supermarket refrigerators targeted in widespread cyber attack

The Conference That Wasn't: A Fake Biotech Event Shows How Your Employees Might Let Ransomware in Through Your Front Door

The Data Breach Clock Starts Before You’re Ready

The latest phishing scam is targeting your calendar

The Philippines: Department of Trade & Industry (DTI) loses accounting records due to ransomware

TVING CEO Says AI Likely Used in Data Breach, Admits She Didn't Verify Whether Security Spending Was Sufficient

Two arrested as Department of Justice (DOJ) takes down laptop farms responsible for $3 million in North Korean revenue

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

UK high street fashion giant H&M shares fall after 'cyber attack'

UK Government Announces Sweeping New AI Security Plans

UK high street brands hit by cyber attack

UK Housing Ombudsman Service investigates 'security incident'

UK Regains Early Access to AI Models After Reported White House Reversal

UK supermarkets warned after French cyber attack spoils food

Unmasking the ransomware 'savior': The double agent working with extortionists

Winn-Dixie discloses data breach involving Social Security numbers

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

📅 12th October

Admin Password “123456” Led to 8.8 Million Danish Central Person Register (CPR) Data Breach

AI Use Outpaces Governance in Small Businesses

AI vulnerability patching has a grading problem

Alleged Qilin ransomware leader extradited from Japan to face charges in Germany

Amazon Fire TV Cube hacked using 4-year-old bug: movie fans are not scared, they’re ecstatic

Anthropic Reveals Claude AI Exploited Server Flaws and Bypassed Security Restrictions

Anthropic takes risky AI tests offline after models breach government sites

ASOS Data Breach Highlights How Social Engineering Can Bypass Corporate Security

ASOS Data Breach Led to Customers Receiving Unauthorized Push Notifications

ASOS hackers claim responsibility for Air France-KLM data breach

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Attackers Use Power BI Phishing to Install Multiple RMMs and Maintain Persistent Access

Bargain Android phones ship with preinstalled malware, and users can’t delete it

Beware of This New Phishing Scam Lurking in Your Work Calendar. Attacks Are Up 33,000 Percent

Bitcoin Hardware Wallet COLDCARD’s X Account Hacked to Post Phishing Link

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

Canadian Ransomware Negotiator Arrested in FBI Breach Probe

Canadian Ransomware Negotiator Edward Dubrovsky Arrested on Extortion Charges Amid FBI ShinyHunters Crackdown

Check Point warns of 48% rise in cyber attacks worldwide

CISA Warns of Active Attacks Exploiting 10-Year-Old Apache Struts RCE Vulnerability

ClingSTUN Malware Threatens Your IoT Devices: Expert Advice on Detection, Prevention, and Recovery

Critical AnyDesk Linux Flaw Lets Attackers Execute Remote Code With Root Privileges

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Cyber Attack: Giant, Food Lion, Stop & Shop Websites Down

Cyber attack disables hundreds of French supermarket freezers

Cyber attack leaves hundreds of French supermarkets with millions of euros of food ruined

Cyber Attack on Refrigerators in French Supermarkets Suspected to Cause Million-Euro Damage

Cyber attack scare for H&M: Fashion giant probes claims it was targeted by same group that hacked Jaguar Land Rover (JLR)

Cyber-attack like OpenAI Medicare breach ‘seems likely’ in UK, says minister

Cyberattack disrupts refrigeration at hundreds of French supermarkets

Cyberattack shuts down refrigerators at French supermarkets

Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Daiichi Kosho data breach puts 8.7 million records at risk in Japan

Dark Web Empire Market Co-Creator Raheim Hamilton Gets 40 Years in Prison

Data breach at Rohlík. Conversations with AI have also been revealed

Denmark CPR data breach exposes 8.75 million records via weak password

Did MoneyGram Get Hacked? Ransomware Gang Claims It Did

Dutch police take down malicious proxy network exploiting 178,000 devices

European supermarket giant limits operations amidst cyberattack

Fake Google Calendar entries give phishing scams a new way to reach consumers

Fake Power BI Documents Trick Users Into Installing Rogue ScreenConnect RMMs

FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach

FBI Arrests Cybersecurity Executive in ShinyHunters-Linked Extortion Investigation

FBI seizes Chinese hacker tools targeting Taiwanese infrastructure and universities

Fridges in French supermarkets hit by cyber attack

Geopolitics and the cyber resilience gap belong in your threat model

Germany is the second most frequent ransomware target worldwide

GitLab warns of max severity code execution vulnerability

Global Online Retailer ASOS Has Been Hacked

Google AitM Phishing Kit Uses WebSockets to Bypass MFA in Real Time

H&M becomes latest retailer to investigate cyber attack

H&M investigates potential cyber-attack

H&M ‘investigating claims it was hit by cyber attack’

H&M Investigating Possible Data Breach

Hacker reveals how BYD Shark 6 was compromised on Four Corners

Hacker ‘Wenhao’ Claims Dominican Republic Electoral Registry Breach: 6.8 Million Records and 5.6 Million Photos

Hackers cause chaos as French supermarket fridges turned up to 50C

Hackers Exploit Palo Alto GlobalProtect Flaw to Gain VPN Access and Deploy Ransomware

Hackers Force French Supermarket Fridges to 50°C in Major Cyber Attack

Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack

Hackers heat French supermarket fridges to 50C in 'large-scale' cyber attack

Hackers Heat Supermarket Fridges to 50°C in France Cyberattack

Hackers threaten to expose KFC data, as breach allegations circulate

Hackers turn up supermarket fridges to 50°C, threatening millions in food losses

Hidden implant in Ledger hardware wallets linked to $93 Million theft

How DNS traffic exposes phishing domains before they go live

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

International money-laundering gang recruited 15,000 money mules to funnel hackers’ cash

iRhythm Data Breach Impacts at Least 360,000 People

iRhythm data breach may affect 8.2 million people, hackers stole patient information

Isle of Man Police officer dismissed over data breach

It’s time to take action on cybersecurity in agrifood

Japan declares 'cyber emergency' over massive hacker attacks. Stolen documents can be sold on the darknet for 15 cents

Japan Declares First Cyberspace Emergency as AI Turns Ransomware Into Carpet Bombing

Japanese karaoke maker Daiichi Kosho reports data breach affecting 8.7 million records

Karaoke Chain Breach Hits 8.7 Million as Supplier Hacked

Karaoke Giant Reveals Data Breach Impacting Eight Million

Karaoke giant warns 8.7 million customers exposed in supplier data breach

Kenya among EMEA’s most attacked countries as cyber attacks surge 48%

KFC Named in Gentlemen Ransomware Group’s Latest Breach Claim

L&Q warns web services may remain down ‘for some time’ following last month’s cyber-attack

Ledger confirms spy chip implant behind wallet crypto thefts

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Low-cost Android phones are arriving with malware that owners can’t uninstall

Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings

Luxembourg: Pension Insurance Fund warns of phishing text messages

Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted

Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access

Microsoft Teams to Detect Malicious QR Codes and Warn Users of Phishing Attacks

MoneyGram under threat as hackers claim data breach

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

Net Closes Around ShinyHunters with Another FBI Arrest

New Unicode Characters Let Attackers Create Convincing Lookalike Domains for Phishing

Norway fines Microsoft advertising firm $9.6 million over Grindr data sharing

One in five Brits encounter fake profiles or AI bots: the growing romance scam threat

Pentagon data breach exposes personal information of over 3 million people

Phishing emails are baiting your AI assistant

Prominent Ransomware Negotiator Faces Extortion Charges

Ransomware gang allegedly raids The Money Store, two class actions follow

Ransomware Hackers Exploit Palo Alto Networks GlobalProtect VPN Authentication Bypass Vulnerability

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Researchers Discover New Domain Spoofing Techniques That Bypass Chrome’s Phishing Protections

Retail giant Ahold Delhaize takes systems offline after cyberattack

Seoul National University Faces 588 Hacking Attempts in 2026

ShinyHunters arrest number three: a Canadian ransomware negotiator

Shock and surprise after FBI arrests Canadian cybersecurity expert in ShinyHunters hacking case

SIM-swap fraudster jailed for stealing $265K in crypto to fund luxury lifestyle

SMBs lack AI governance

South Africa: Democratic Alliance (DA) exposes Lesufi government’s two-week delay in reporting e-Panic data breach to Information Regulator

South Africa: Gauteng e-Panic Data Breach - Democratic Alliance (DA) Demands Answers Over Two-Week Delay To Information Regulator

Supermarket Chains in Europe Feel the Heat of Cyberattacks

Tabung Haji Services Back Online After October 8 Cyberattack, Depositors’ Savings Confirmed Safe

"The biggest change in ransomware is not simply that attacks are becoming more sophisticated, it's that AI is making them easier to scale and harder to predict": Two groups account for a third of UK ransomware attacks

The Gentleman Hacking Group Claims MoneyGram, Deloitte, and KFC Data Breaches

The new phishing trick aimed at the AI reading your inbox

The Philippines records 10 claimed ransomware victims in August

Thousands of European wind and solar systems exposed to potential cyberattacks

Two Face US Charges for Sextortion and Cyberstalking in Puerto Rico

UAT-11985 Uses Real-Time Google Phishing Kit to Steal Credentials and Session Tokens

UK: Supreme Court to Rule on Compensation in Data Breach Claims

US disrupts two cyber-espionage tools used by Flax Typhoon

Warlock Ransomware Hits 4 Sectors via SharePoint Bug

Windows PCs missing key updates could lose security fixes in 2027

World’s worst password “123456” linked to breach of 8.8 Million Danes

XRP Ledger Patches Flaw That Could Have Created Unlimited XRP

Pages

Editor's Message

Monday, 19 October 2026

Data Breaches Digest - Week 43 2026

Sunday, 18 October 2026

Data-Leaking Ransomware Report - Q3 2026

Wednesday, 14 October 2026

Ransomware Operator Claims - Week 41 2026

Monday, 12 October 2026

Data Breaches Digest - Week 42 2026