Data Breaches Digest - Week 33 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 10th August and 16th August 2026.

11th August

12% increase in ransomware incidents affecting industrial organisations worldwide

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

Can your internet search history be accessed through WiFi?

Cisco warns of high-severity ClamAV flaws with public exploits

Europe Ransomware Attacks Up 29%

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

Hackers hit Levi Strauss in cyberattack, corporate data stolen

Hackers target social media accounts to steal intimate images, FBI says

HCLTech says stolen data may be years-old after hacker’s data breach claims

Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G

Microsoft SharePoint flaw now exploited in ransomware attacks

Previously unseen entry vector used to breach Polish energy plant

Ransomware Attack disrupts Hospital Doors, Elevators, Ventilation and Air Conditioning in Canada

Ransomware gangs don’t need control system access to disrupt industrial production

Samsung Patched 176 App Flaws, Including Camera Recording and Data Theft Bugs

Security hole in HP thin client disk encryption: key available with a single script

South Korea: Voice Phishing Scammers Impersonate Public Institutions With Forged Documents

South Korea, US warn of Gunra ransomware targeting healthcare, finance and critical infrastructure

This open-source VPN manager is secretly owned by an attacker, researchers warn

US and South Korea warn of Gunra ransomware targeting government agencies

Valve Warns European Hardware Buyers Following Logistics Data Breach

10th August

71% of CISOs spend 10+ hours on board reports

77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data

A data breach at one of Steam's logistics partners may have exposed customer data in Europe

A data breach at shipping giant Ceva Logistics is rippling across banks, retailers, Steam gamers, and beyond

AI Agent Exploits Gym System Vulnerability, Cancels Waitlist Booking in Australia

AI assistant hacks gym website in first known Australian autonomous cyber attack

AI, mobile fraud drive Africa’s cybercrime losses to $484 million

Ajax caught in CEVA hack fallout, fans left waiting

Anesthesia Group of Albany Data Breach Exposes Protected Health Info

ANIBC Association Data Breach Exposes SSNs and Health Information

Armenian police warn of new phishing scheme purporting to be a bank

At A Loss - Courts Struggle to Define “Loss” Under Computer Hacking Law

BdThemes plugins supply-chain hack creates rogue WordPress admins

Brinks Home data breach puts 1 Million customers on alert

Can AI Distillation be treated as a Cyber Attack

Canadian Hacker Pleads Guilty in 2024 Ticketmaster Hack and Snowflake Inc. Breach

Cass Health Warns Patients of MyChart Phishing Scam

CEVA Cyberattack Hits Eight European Warehouses as Retailers Face Data Breach and Delivery Delays

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

China-Linked Hackers Exploit N-able Flaw in Ransomware Attacks

China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns

China-Linked Hacking Group Weaponizes N-central Flaw in New Ransomware Wave

Clover Health faces four class-action lawsuits over data breach

Critical Progress LoadMaster flaw now actively exploited in attacks

Cyber Attack Sparks California City Emergency

Cyberattack hits North Carolina ports, raising supply chain risks

Cyberattack on Steam hardware shipper leaks names, addresses, and order data

Data Breach Cost Climbs to ₹25.5 Crore in India

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

DeadLock Ransomware Puts Its Negotiation Portal On-Chain

Defense supplier IEH Corporation discloses Microsoft 365 mailbox breach via phishing

European Steam Hardware Customers Hit by Cyber Attack

"Expect fake messages" - Valve's EU shipping partner suffers a data breach, so if you bought a Steam Machine or Steam Controller, you may need to be on guard

Fake The Odyssey Downloads Are Hiding Password-Stealing Malware

Fake Zoom Installer Targets Mac and Windows With Overlord RAT

FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure

Framework Computer Data Breach: US-Based PC Brand Warns Users After Metabase Zero-Day Exploit Exposes Personal Details

Framework discloses data breach tied to Metabase zero-day attack

Framework Laptop Data Breach Traces Back to a Metabase Zero Day

“Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls

Gila Health Resources Data Breach Exposes SSNs

GitHub Dependabot malware alerts now cover eight ecosystems

Go-Based macOS Malware Steals Crypto and Secrets

Guernsey: Charities hit by data breach involving software provider

Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA and Steal Enterprise Data

Hacker Linked to Ticketmaster Snowflake Breach Pleads Guilty in 165-Company Attack

Hackers Are Building ChatGPT-Like AI To Read Stolen Files And Create Phishing Scams

Hackers Are Going Phishing For European Steam Machine And Controller Owners

Hackers breached a small Polish energy plant via private Access Point Name (APN) last year

Hackers phish their way into US defense manufacturer’s Microsoft 365 account

Health Sciences Centre investigating ransomware incident affecting facility systems

Independent Solutions Wealth Management Data Breach Exposes Personal Information

ING and Ace & Tate report security incident at logistics partner

Interlock Ransomware Abuses Volatility3 and WinPmem to Dump Windows Credentials From Memory

Isle of Man: Election letter data breach lands Cabinet Office a reprimand

Isle of Man: School caused potential safeguarding issue with data breach

James C. Standring, DDS Data Breach Exposes Information for 6,658 Patients

Kimsuky Advances Attacks with Local LLMs, AI

Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

Kimsuky hackers weaponize AI-generated crypto documents in spear-phishing campaign

Kimsuky Testing Leaves Internal IP and Attack Infrastructure Artifacts Exposed

Klaviyo Sign-Up Bug May Have Exposed Passwords to Ad Trackers

Korea's data-breach wave hits creator media, 3Pro TV latest target

LawCare warns contacts of scam risk after data breach

Levi Strauss Hit by Cyberattack, Corporate Files Accessed

Levi Strauss Hit by Cyberattack, Hackers Use Social Engineering to Steal Corporate Data

LexisNexis shuts down services after suspicious activity on servers

Major data breach at Unlimited Technology Systems exposes data of 3.8 million

Mental health charity LawCare urges vigilance after data breach

Metabase zero-day exploited to access Framework customer data

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

New StormEncryptor ransomware used by former Medusa affiliate

New Zealand sanctions Russian hackers, propaganda groups over Ukraine war

Newcastle University confirms data breach after ExfilSquad claims 440k records

NHS Tayside investigates alleged data breach

Nichirei Hit by Cyberattack; Russian Hacker Group Leaks Stolen Data on Dark Web

North Korea’s hackers using AI for attacks, cybersecurity firm says

North Korea's Kimsuky Deploys AI in Spear-Phishing Attacks

North Korea's Kimsuky integrates AI into cyberattacks targeting crypto and finance

North Korean cyber group deploys AI tools to automate attacks and phishing campaigns

North Korean Hacker Group 'Kimsuky' Suspected of Independently Developing AI Tools for Cyberattacks

North Korean hackers are upgrading their tactics, using AI to develop more sophisticated cyberattack tools and phishing attacks

North Korean Hackers Build Local AI Tools For Attacks

North Korean Hackers Deploy AI to Refine Spear Phishing Attacks

North Korean hacking group builds AI tools for cyberattacks, report says

North Korean spies are running local LLMs to cause AI mischief

Northern California City Enacts Emergency Measures After Ransomware Cripples Municipal IT and 911 Routing

OpenAI locks down Astra over potential critical cyber capabilities

OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

OpenClaw agent independently hacks gym website to move its owner up the queue

Origin Energy data leak cybersecurity lessons have experts worried

OSF Healthcare Settles with HHS Over HIPAA Violations Following Ransomware Attack

Pass-the-Passkey Attacks Expose Windows 11 and Microsoft Entra ID, Bypassing MFA

Payroll Pirates Abuse Microsoft Graph to Find HR and Finance Staff After Account Compromise

Payroll Pirates AiTM Campaign Hijacks Microsoft 365 Sessions to Hunt Payroll and Finance Mailboxes

Payroll Pirates AiTM Phishing Hijacks Microsoft 365 Sessions and Targets Payroll Emails

Play Ransomware Masquerades as PsExec to Blend Into Legitimate Windows Administration

Poland uncovers second heat plant cyberattack that went hidden for months

Princeton Family Eye Care Data Breach Exposes PHI and PII

Ransomware attack on Health Sciences Centre affects doors, ventilation and air-conditioning

Ransomware attacks increasingly target managers, not just CEOs

Ransomware Attacks on K-12 Trend Down, Higher Education Trend Up in 2026

Ransomware Attackers Compromise Multiple Employees Inside the Same Company

Ransomware Hackers Are Going After Your Managers. 62% of Victims Hold Senior Roles

Ransomware Kingpin Gets 16 Years for Global Cyberattacks

Ransomware Operators Disable EDR, Backup Software and Windows Telemetry Before Encryption

Ransomware, cloud attacks remain key threats in 2026

Researchers find cyber attack risk in SIM-controlled IOT devices

Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant

Romance scams get a new twist: fake girls invading DMs to promote OnlyFans accounts

Russian military hackers pose as recruiters to target Ukrainian IT workers

Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity

Shropshire hospital charity supporters put on alert after Beacon data breach

Signed up for Klaviyo? Dozens of advertisers may have seen your password

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

SonicWall SMA1000 flaws now exploited by ransomware gangs

South Korea warns of new voice-phishing scam laundering stolen funds

South Korea’s Financial Supervisory Service (FSS) targets crypto voice phishing scams in system upgrade

Steam contacts users after cyber attack leaves personal details compromised

Steam Data Breach: Valve Warns EU Hardware Buyers

Steam hardware purchasers in Europe exposed: data breach hits Valve’s logistics partner

Steam Machine and Steam Controller Customers in Europe Hit by Cyber Attack

Steam Machine and Steam Controller Hit By Cyber Attack In Europe

Storm-1175 actor deploys new StormEncryptor ransomware after N-central vulnerability exploitation

Suisun City Declares Emergency After Cyberattack Disrupts Systems

Suisun City, California, Shutters Network Following Cyber Attack

Tata Consultancy Services (TCS) Says No Customer Data Breach After Claims Of Employee Information Leak

Tata Consultancy Services (TCS) says no customer data breach, continues threat monitoring

Tech industry is buzzing after a Claude agent hacked into a gym

The Crime Began Well Before the Breach

The Financial Guys Data Breach Compromises Social Security Numbers

The Next AI Safety Challenge Isn't Intelligence, it's Authority

Think before you click: Why phishing remains one of the biggest cyber threats

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

Two class action lawsuits filed against Frontier Airlines over data breach

U.S., South Korean government agencies caution to be on lookout for Gunra ransomware gang

Understanding Spam: What It Is, Why You Get It, and How to Stop It

US Sanctions Iranian $6 billion Crypto “Exchange” Shelbit

Valve confirms that Steam users are affected by Ceva Logistics data breach

Valve informs customers about data breach, personal data stolen

Valve Issues Warning To Steam Machine Customers Following Cyber Attack

Valve notifies Steam hardware customers of a data breach

Valve Steam Hardware Buyers Hit by CEVA Logistics Data Breach

Valve tells Steam hardware customers in Europe their personal data ‘was likely compromised’ in a cyber attack

Valve User Data Leaks In Cyber Attack On European Supplier

Valve Warns Steam Hardware Owners After Vendor Data Breach

Valve warns Steam Machine and Controller users about scam emails after data breach

Valve warns Steam users in Europe of data breach at shipping partner

Wellpoint Data Breach Affects 101,047 Texans

Why India’s Ransomware Risk Is Becoming A Business Risk

Why managers are ransomware's top targets now - and 6 ways to stay safe

Why ransomware is increasingly becoming an operational threat

WordPress Plugins Compromised Without a Single File Change

XSS2Shell Vulnerability Puts 500 Million WordPress Sites at Risk of RCE

Ransomware Operator Claims - Week 31 2026

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 27th July and 2nd August 2026, kindly assisted by our partners.

DBD discovered and researched 227 Ransomware Victims over 43 Countries and Islands claimed by 36 Data-Leaking Ransomware Operators, including 1 Newly Discovered Ransomware Operator last week.

For further analysis on these (and any historic) Ransomware Operator Claims, including the Victim Names and Industry Sectors attacked, please use our PRiSM application.

Download PDF



Data Source: Data Breaches Digest. Flag Icons created by Freepik and provided by Flaticon.

Data Breaches Digest - Week 32 2026

Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 3rd August and 9th August 2026.

9th August

Active phishing targeting Eurobank customers: Fake SMS "9,428 points" leads to eurobanktes.vip

American Addiction Centers Discloses Another Data Breach

Arizona: FBI Records Show Hacker Took 633k Maricopa County Voter Files Before 2020 Election, Prosecutors Declined Charges

"Buy Gift Cards for a Loan": New Voice Phishing Scam Spreads in Korea

Financial Supervisory Service (FSS) warns Korea as voice phishing rings launder funds via gift cards

Framework confirms customer data breach through Metabase zero-day

Framework customer information accessed in data breach 2026

Framework’s Data Breach Revealed Customer Data: Here’s What to Know

Google Warns of Hackers Targeting US Financial Firms with Fake Calls

India: Supreme Court issues notice on plea seeking CBI probe into alleged medical data breach affecting 2 lakh Indians

North Korean Hacking Group Develops AI Tools for Cyberattacks and Phishing Campaigns

Oculus Pathology Data Breach Exposes Social Security Numbers & Health Info

OpenAI Pauses Development on Powerful Astra Model Over Autonomous Cyberattack Risks

Ransomware gangs skip the CEO, head straight for the 40-something IT manager

Ransomware Halts Coca-Cola Fairlife Dairy Production

Scammers duped California city into wiring nearly $1 Million meant for recreation center

Scammers impersonate Korean officials as proxy-purchase fraud surges

Secrecy Surrounds Croatia’s Arrest Of Alleged Serbian State-Linked Hacker

Singapore: Police warn of iMessage phishing scams impersonating Singapore Courts, Traffic Police

South Korea: 3Pro TV Data Breach Exposes 460,000 Records, Including 2,979 Bank Accounts

South Korea: Data Breach Hits 17,000 Democratic Party Members, Fueling Blame at Leadership

South Korea: Financial Supervisory Service (FSS) Issues Consumer Alert Over Voice Phishing Laundering via Mart Gift Certificates

South Korea: Former Democratic Party Secretary-General Apologizes for Data Breach

South Korea: "Impersonating Public Officials to Induce Proxy Purchases"... About 5,000 Suspected New Phishing Accounts Flagged in One Month

South Korea: "Loan Approval if You Accumulate Gift Certificate Purchases"...New Voice Phishing Scam Triggers Consumer Alert

U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data

8th August

A ransomware attack targeted Oklahoma Manufacturing Alliance

AI Breaches Surge 56% as Cyber Attack Costs Skyrocket to $6 Million

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

Belarusian Hacker Sentenced to 16 Years in U.S. Prison

Cyprus: Police confirm investigation into Makarios Drousiotis over alleged personal data breach

Devon and Cornwall Police warn of scam risk after data breaches

Football club Ajax, ING, and Ace & Tate hit by logistics firm data breach

Framework Data Breach Exposed Customer Contact Details via Metabase

Framework data breach hits all customers after Metabase zero-day attack

Google Mandiant Overhauls Hacker Naming System

Google’s top hacker hunter explains why hacking groups get codenames

Hackers breach TrueConf to trojanize client installers with backdoors

Levi Strauss Data Breach - Hackers Gained Access to the Company’s Systems

Levi's Data Breach: Three Phone Calls, No Exploit

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

One Letter Away: How to Spot the ‘Meta Verrified’ Phishing Scam on Facebook

Private Internet Access Received 19 Legal Requests in Q2 2026, Produced No VPN Logs

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

Ransom Cartel ransomware creator sentenced to 16 years in US prison

Received a Text About Unpaid Tolls? The Federal Trade Commission (FTC) Says It’s Probably a Phishing Scam

Southampton charity among 1,500 hit by cyber attack

Storm-1175 Deploys New StormEncryptor Ransomware, Likely Exploiting N-able Flaw

Trezor phishing ad and BTCPay exploit put Bitcoin users at risk

Unlimited Technology Systems Data Breach Exposes Data of 3.8 Million Healthcare Patients

When AI Becomes the Hacker: The Hugging Face and Meta Incidents May Force a Reckoning for Cyber Insurers

Woodhaven Lakes victim of ransomware attack Thursday

7th August

3.8 Million Impacted by Unlimited Technology Systems Data Breach

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

200 accounts compromised in Swiss government’s Microsoft SharePoint breach

A Fake Voicemail Is All It Takes: New AiTM Campaign Bypasses MFA Across US, Canadian, and European Firms

Ace & Tate also reports data breach at logistics company

Addressing Vulnerability Management Together in the Age of AI

AI Voice Phishing Attempts Target Major Hedge Funds as Financial Firms Expand AI Security Collaboration

AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

Amgen hit with class action over data breach

Apple rushes out emergency fix for screen sharing flaw on Macs - update ASAP

As AI Outpaces Regulation, Trust is at Risk

Attacker phished way into US defense supplier's Microsoft 365 account

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?

Barracuda warns calendar invites are being used for phishing via .ics files

Beckett Sued Over Data Breach That Hit One Million Accounts

Being a North Korean Hacker Is About to Be Less Fun

Canada Data Breach Costs Hit Record $7.11 Million as Vendors Become Top Risk

Canadian Hacker “Waifu” Pleads Guilty to Stealing Data from Over 165 Organizations

Charity Commission issues guidance for charities after Beacon CRM data breach

Chinese AI model Kimi escaped its cybersecurity testing environment, researchers say

City of Coweta hit with system-wide ransomware attack

City of Coweta officials share details into ransomware attack

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

Computer maker Framework notifies ‘all customers’ of a data breach

Connecticut Official Warns of Election-Related Scams

Cornwall residents warned after fresh data breach scams surge

Cushman & Wakefield Data Breach Exposes Social Security Numbers

Cyber-attack targets Washburn County Government

'Data breach' at hospital investigated over claims Minnie Merriman's medical records were accessed

Data breach at Nordic e-scooter company Ryde exposes 4.5 million customer accounts

Data Breach at Unlimited Technology Systems Exposes 3.8 Million Patients

‘Data breach’ investigated amid claims Minnie Merriman’s health records accessed

Flagstar Bank Agrees to 31.5 Million Data Breach Settlement

Flagstar Bank To Hand Out $31,500,000 To Settle Class Action Lawsuit Filed Over Data Breach

Framework customer information was accessed as part of a data breach

Framework Laptops Hit by Data Breach Exposing All Customers

French rugby club Stade Français restores systems after cyberattack, probes data leak

Fresh data leak hits Ajax: football club makes urgent appeal to fans

Google Links Redact Extortion Group to BlackFile Rebrand

Google Links UNC6671 to Multiple Extortion Brands After BlackFile’s Apparent Retirement

Google Links Wall Street Phone-Scam Wave to Rebranded Hacker Group

Google warns Blackstone, Bridgewater, Bain Capital, KKR, TPG, Moody's targeted by hackers through phone calls; shares hacker used for attack

Google warns hackers are targeting finance firms through voice phishing: How the scam works

Gut feeling does nothing against AI spear phishing texts

Hackers leak sensitive Victorian court data to dark web

Hackers target major US financial firms with phone-based ransomware campaign

Hackers targeted US private equity, other firms including Blackstone, CME, data shows

Hamilton Township Municipal Utilities Authority says attempted cyber attack was removed

Healthcare and Victim Support Charities Affected by Beacon Cyber Incident

Investigation into alleged NHS data breach over death of 9-year-old Minnie Merriman

Investigation into claims NHS staff accessed medical records of schoolgirl who died on camping trip

Irregular, firm behind AI hacking incidents, won't say if there were more

Justice for Colombia Beacon CRM Data Breach

Korean Bar Association and Broadcasting Media Communication Review Committee (BAMISIMWI) Block Access to 31 'Lawyer Impersonation Phishing Websites'

Levi Strauss & Co. says hackers stole corporate data in cyberattack

Lincoln Cathedral affected by cyber attack

Levi Strauss discloses data breach after social engineering attack on employees

Levi Strauss says hackers breached employee computers, accessed corporate data

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

Metabase SQLi zero-day exploited in customer data-theft attacks

Microsoft 365 Adversary-in-the-Middle (AitM) Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Microsoft starts sending out emails to warn about big Entra ID change to authentication

Military device manufacturer discloses cyber incident to Securities and Exchange Commission (SEC)

Millions impacted by Greater Cincinnati healthcare data breach

Minnie Merriman, 9, death probe as NHS staff in 'data breach' storm

Modular Computer Manufacturer Reports Data Breach

Mozambique, United Nations Office on Drugs and Crime (UNODC) target ransomware threats

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

New Vanta Stealer Malware Targets Gamers, Crypto Users, and Web Apps

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP

NHS Investigates Data Breach After 9-Year-Old's Murder

NHS investigating after hospital staff accessed records of Wakefield girl Minnie Merriman

NHS Launches Urgent Probe Over Slain Schoolgirl Data Breach

NHS Tayside investigates data breach into Minnie Merriman medical records

Nigeria: Court Remands Alleged Hacker Accused of Diverting ₦800 million From Suntrust Bank

Nigerian scam leeches nearly $1M from Pittsburg coffers in phishing operation

North Carolina Ports confirms cyberattack disrupting operations

North Carolina Ports restoring gate operations after cyber attack

Over $900K scammed from City of Pittsburg in phishing attack

‘Phantom Hacker’ scam resulting in billions of dollars in losses nationwide

Phishing site impersonates Trezor in top Google search result, draining user funds

Point72 Among Major Hedge Funds Targeted in Cyberattack on Wall Street Through Voice Phishing Campaign

Portal Confirms Short-Lived X Account Takeover That Pushed a Wallet Phishing Link

Ransom Cartel Ransomware Creator Gets 16 Years in US Prison

Ransomware attack targets City of Coweta

Ransomware attacks spike as world distracted by AI

Ransomware Gang Holds Stade Francais Player Data for Ransom

Ransomware Surges in July After Q2 Lull

Regulator issues guidance to charities impacted by Beacon CRM data breach

Regulator urges charities affected by Beacon data breach to communicate with stakeholders

Russian hackers target hotel Wi-Fi to steal corporate data

Ryde Data Breach Exposes 4.5 Million Nordic Accounts in Major Cyberattack

Samsung’s August Update Patches 56 Security Vulnerabilities Across Galaxy Devices

San Francisco's Levi Strauss Confirms Employee Data Breach Amid Global Hacking Wave

Sawyer Savings Bank Data Breach Affects Operations

Secrecy Surrounds Croatia’s Arrest of Alleged Serbian State-Linked Hacker

Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks

Sheffield Hospitals Charity hit by cyber attack

Snowflake attacker pleads guilty to hack of 165 companies’ data

Snowflake Hacker Pleads Guilty After Breaches Exposed Data of at Least 100 Million People

South Africa’s largest private security company suffers data breach

South African payment distribution agent for FNB and the National Credit Regulator hit by data breach

South Korea: 17,000 Democratic Party (DP) members' personal data leaked while party remained oblivious for 11 months

Standard MFA Won’t Stop Hackers Who Route Microsoft 365 Phishing Through Google

Swedish Ryde Electric Scooters Suffer Massive 4.5 Million Account Data Breach

Swiss government says SharePoint-linked data breach affected hundreds of accounts

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

The Dangers of Phishing and Spear Phishing

The Netherlands: Ajax, ING and Ace & Tate hit by data breach

This MacOS ClickFix Scam Doesn’t Just Steal Your Crypto, It Takes a Cut and Leaves the Rest

Trezor Phishing Site On Google Claims 80 Victims

UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

UNC6671 Vishing Gang Hijacks Microsoft 365 and Okta Accounts to Extort Financial Firms

Understanding Calendar Invite Phishing Scams: How Attackers Abuse .ics Files And How To Defend Against It

Unlimited Technology Systems breach impacts 3.8 million people

Unlimited Technology Systems data breach impacts 3.8 million people

Updoc Data Breach Exposes Patient Contact Information Following Third-Party Security Incident

Updoc Telehealth Platform Hit By Data Breach Exposing Patient Contact Details

US cloud 'kill switch' is as dangerous as ransomware, European businesses fear

US fuel gauge exposure fell by more than half in three months

US seeks extradition of Iranian hacker arrested in Montenegro

Vishing group UNC6671 now focuses on extorting M&A firms

Washington sends Montenegro a request for the extradition of an arrested Iranian hacker

What Better Security Assurance Means for Threat Detection Success

Where Is SilverFox Attacking? Mapping the Hacker Group's APAC Targets

WinRAR vulnerability being exploited in ransomware attacks, CISA warns

Your phone doesn't block SIM swapping attacks by default: Turn on these carrier settings now

6th August

4.5 Million Ryde accounts affected in latest data breach

Agentic Ransomware and Kernel-Level Evasion Are Compressing the Window Operational Technology (OT) Defenders Rely On

AI failed to properly patch software flaws 74% of the time

AI Pretends To Be Human And Sweet-Talks Three Actual Humans In Attempt To Pull Off Daredevil Cyber-Attack

AI Voice Phishing Fuels Wave of Cyberattacks on Wall Street

Amazon Web Services (AWS), Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

Amsterdam’s De Bijenkorf Hit by Logistics Cyberattack, Orders Delayed

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

Arkansas Oral & Maxillofacial Surgeons Data Breach Exposes SSNs

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Australian telehealth provider hit by data breach

Average Canadian data breach cost hits record $7.11 million

Average data breach cost soars to ₹25.5 crore

Beacon CRM Advises UK Charities to Treat Database as Compromised

Beacon CRM confirms cyberattack exposed UK charity data

Beacon cyber attack: Arts charities warned additional data may have been accessed

Beckett Faces Proposed Class Action Over 2025 Data Breach

Belarusian cybercriminal behind Ransom Cartel gets 16-year prison sentence

Belarusian hacker sentenced to 16 years for Ransom Cartel ransomware scheme

Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison

Bol also warns of a data breach at a logistics partner

Bol follows De Bijenkorf in warning of data breach as leaked data appears on dark web

Bradford-Scott reaches $2.39 million settlement over 2023 data breach

Brighton surgery campaigners shocked at data breach

Brinks Home data breach puts 1 Million customers on alert

Brown Health Medical Group-MA notifies over 311,000 people of data breach

Browser security is where software, data, and AI meet

Bupa unaffected as Partnered Health Group patient data stolen in cyber attack

Canada: Ontario's privacy commissioner continues investigation into Waterloo region hospital data breach

Canadian Hacker Admits to Snowflake Breach That Hit AT&T, Ticketmaster

Canadian hacker pleads guilty in scheme that breached 165 companies

Canadian Hacker Pleads Guilty Over Snowflake Extortion Campaign

Canadian Hacker Pleads Guilty to Stealing Billions of Records From 165 Cloud Customers

China-linked LightSpy spyware caught targeting victims in 13 countries, including the US

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs

Citadel, Point72, and Two Sigma Targeted in Coordinated Wall Street Vishing Attack

City of Pittsburg says it fell victim to $913K phishing scam based in Nigeria

ClickFix attack pushes macOS infostealer for crypto theft attacks

Critical Cisco IMC bug gives attackers root, Proof-of-Concept (PoC) is out (CVE-2026-20200)

CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate

Data breach: Mohali insurer moves Supreme Court for Central Bureau of Investigation (CBI) probe against rivals

Did a Hacker Steal 630,000 Arizona Voters’ Files Just Before the 2020 Election?

Discounted Claude access bought on the gray market may expose every prompt you send

Dutch department store De Bijenkorf hit by hacker attack

Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records

Florida man protests Flock cameras by blocking them with signs

Four Prosecutors Refused To Pursue Hacker Behind 2020 Breach Of 633K Arizona Voters

Freeway Insurance Data Breach Exposes Financial Account Information

Georgia Water Utilities Are Reported Cyber Attack Targets

Google says hackers are calling financial firm employees to hack and extort victims

GuideStone warns members about growing ‘Phantom Hacker’ scam

Hacker pleads guilty to stealing data from more than 165 Snowflake customers

Hackers targeted US private equity, other firms including Blackstone, CME, data shows

Heart of America Data Breach Exposes SSNs and Medical Records

Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group

How Multifactor Authentication (MFA) can fail organizations in a phishing attack

India: Health-Tech Company Moves Supreme Court Seeking CBI Probe Into Cyber Attack & Data Theft

India: Supreme Court Issues Notice On Vitraya Technologies' Plea Seeking CBI Probe Into Alleged Medical Data Breach Affecting 2 Lakh Indians

India: Supreme Court seeks government response on plea for CBI probe into leak of medical data of 1.5 lakh citizens

Inter-Con Security Exposed 276,000 Records in ShinyHunters Breach That Claimed 2.7 Million

Interpol warns AI now powers more than half of cybercrime cases in Africa

Kali365 Targets US Organizations with Data Theft via Device Code Phishing

Kaspersky warns ransomware abuses BitLocker, prints notes to coerce pay

Kill switch fears now rival ransomware as a top security risk for European businesses

Kodak Breach: ShinyHunters Claim 2.2 Million Records

Lumma Stealer Malware Found in Pirated Copies of the “The Odyssey”

Maine-based hotel chain sued for data breach affecting thousands

Meta AI Model Breached External Organization During Cybersecurity Test

Meta AI model hacked a company during misconfigured cyber test

Meta is the Latest to Say It’s AI Model Hacked Into Another Company

Meta Joins OpenAI and Anthropic in Reporting AI Exploit Incident

Meta’s AI Just Became the Third Model to Hack a Real Company During Testing

Metropolitan Police ordered to tighten data security after sensitive information leaks

More than 600,000 voter files ripped off Arizona site in 2020 by hacker, but Department of Justice (DOJ) didn't prosecute

New Era Technology's Vendor Data Breach Exposes Employees' Social Security Numbers

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes

New York City Regional Center Data Breach Exposes Social Security Numbers

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Nigeria: Court Dismisses ₦100 million Privacy Lawsuit Against First City Monument Bank (FCMB) Over Alleged Data Breach

Non-human identities are 91% of everything active in production

Novel-reading apps used users’ phones to generate fake ad traffic

NVIDIA Group Proposes SAFE Initiative for Agentic Threat Intel Sharing

One GitHub Issue Could Compromise Major AI Coding Workflows

OpenAI, Anthropic incidents highlight growing cybersecurity risks, National Cyber Security Centre (NCSC) says

OpenAI Tightens AI Evaluation Safeguards After Testing Incidents

Orova Ransomware Breaches Five Hong Kong Firms; Securities and Futures Commission’s First Cyber Fine Lands Same Day

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

Patch Me If You Can - The VPN, the Backup Server, and the Browser Zero-Day

Ransom Cartel: Ransomware creator sentenced to 16 years

Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service

Ransom Cartel Leader Sentenced to 16 Years in U.S.

Ransom Cartel Mastermind Once Known as ‘J.P. Morgan’ Sentenced to 16 Years; Canadian Man Pleads Guilty to Snowflake Data Theft

Ransom Cartel operator Maksim Silnikau jailed for 16 years

Ransomware Exploits Windows BitLocker to Encrypt Data, Even Prints Ransom Notes on Office Printers

Ransomware’s Biggest Advantage Comes Before Encryption

Scottish NHS probe claims staff snooped on records of ‘murdered’ schoolgirl Minnie Merriman

Settlements Resolve Data Breach Lawsuits Against McKenzie Health System & Aspire Health Alliance

Snowflake Data Theft: Canadian Hacker Pleads Guilty to 165 Hacks

Snowflake Hacker Moucka Pleads Guilty: Stale Passwords and No MFA Opened 165 Cloud Vaults

Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records

Snowflake Hacker Pleads Guilty in US Court

Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

Snowflake hacker pleads guilty to stealing data from more than 165 companies

Snowflake hacker pleads guilty, faces up to 32 years in prison

South Africa is Africa's cybercrime epicentre

South Korea restricts Lotte Card operations over data breach affecting millions

South Korea's government overtakes telcos as top cyber attack target

Stop fixating on cyber tactics and start disrupting attacker behaviour

Suppliers, logins, and AI tools are all becoming attack paths

Swiss government SharePoint breach compromised 200 accounts

TeamPCP Traced Back to 2020 Cryptojacking Operation

Telehealth company hit by data breach

Telehealth provider Updoc targeted in data breach

Three in four AI-generated vulnerability patches leave something broken

Toolkit Hidden Inside Oracle Database Evades Endpoint Tools

Token theft now is an industry: platforms reselling access to LLM using stolen API keys

Tor, Private Relay, and other browser-level proxies don’t protect iOS and macOS users

TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

UK AI tests found 19 unauthorized agent actions involving Anthropic and OpenAI models

UK charities rocked in Beacon CRM mass data breach

Unlimited Technology Systems Data Breach Affects 3.8 Million Patients

Updoc patients notified of security breach where personal information may have been stolen

Violent Physical Crypto Thefts Surge to $30 million in Losses

Voice-Phishing Scams Targeting Top Funds Push Billionaires to Strengthen Security

Wall Street hedge funds face wave of voice phishing attacks

Washburn County Government experiencing cyber attack, all systems shut down

What is a data breach? The best tools to protect yourself after a cyberattack

What People and Organizations Can Do After a Database Exposure

White House Declassifies 2020 Maricopa County Voter Data Breach

Why the Ontario Hacker Guilty Plea Changes Everything We Know About Cloud Security

Your Face Sure Rings A Bell: Facial Recognition, Wrongful Arrests and the New Alibi for Bad Policing

5th August

15 TP-Link Omada vulnerabilities let attackers hijack routers and intercept camera traffic

311,000 Impacted by Brown Health Medical Group-MA Data Breach

Agentic AI: The New Frontier of Cyber Risk

AI Agent Created Fake Identities to Attempt Cyber Attack on GitHub, UK Watchdog Reveals

AI agent deception moves from theory to reality in UK cyber tests

Another massive NPM worm: 444 packages with 2 billion monthly downloads infected with malware

Anthropic AI agent faked identities, phished real developers in UK government hacking test

Apple Challenges UK Demand For Access To Encrypted iCloud Data

Apple Photos Privacy Case Advances, With Up to $32.5 Billion Alleged Exposure

Apple’s Private Relay can leak your real IP address

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove

Beacon CRM, Widely Used by Charities, Suffers Data Breach

Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brown Health Medical Group Data Breach Hits 311,000

Building Public Trust in AI‑Enabled Security

Canadian hacker pleads guilty in Snowflake data breach case, stealing data and extorting people for millions

Canadian man pleads guilty to Snowflake hacks that led to 165 breaches

Canadian pleads guilty to Snowflake cloud data-theft attacks

ChainDrop Worm Hits 400+ npm Packages with Two Billion Monthly Installs

Chinese telcos maintain deep US presence despite Salt Typhoon links, House committee says

Chinese-made Zbtlink routers have a backdoor, researchers say

Christian organisations caught up in cybersecurity breach

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

City of Pittsburg falls victim to phishing attack

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

COLDCARD security audit phishing attack installs remote access tool

Countering AI-Driven Phishing in the Age of Agentic AI

Coupang posts biggest quarterly loss since New York listing, driven by a massive data breach fine

Coupang records quarterly loss as data breach fines weigh down bottom line

Coupang Suffers Q2 Loss Amid South Korean Data Breach Fines, Despite Rising Sales

Coupang swings to Q2 loss on data breach fines

Coupang swings to record $798 million loss in 1st half after data breach costs

Coupang swings to record quarterly losses as data breach penalties in Korea hit earnings

Criminals Use AI to Build Botnets, Steal Crypto, and Hijack Live Cameras

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

CrowdStrike Warns AI Adoption Is Creating ‘Underdefended’ Attack Surfaces

Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents

Daedong-USA settles US data-breach class action involving 10,000 customers

Data breach: 100K+ British police officers' contact details leaked on dark web

Data Breach: Zenith Bank affirms unauthorised access to customers’ e-mails, phone numbers

De Bijenkorf warns customers after possible data breach at logistics partner

Dutch retailer De Bijenkorf warns customer data may be exposed after cyber incident

Fake Bank of America Phishing Scam Installs Remote Access Malware

Fake Open VSX Extensions Harvest Private Repo and CI Data

Fake Telstra "Duplicate Payment" Refund Scam Targets Australians

Five things to know about Suno’s data breach - and the hack that exposed how the AI music company trains its models

Frontier Models Engage in Unsanctioned Behavior During Testing

Get Ahead of the Alerts and Secure What Matters Most

Greatness Phishing Service Spoofs RingCentral to Steal Microsoft 365 Accounts

Greatness Phishing-as-a-Service (PhaaS) Bypasses Email Security and MFA to Hijack Microsoft 365 Accounts

Hackers run khunt post-exploitation toolkit from Oracle database

Hereford Cathedral warns of data breach after cyber attack

Hong Kong: Securities and Futures Commission’s first ransomware-related enforcement action signals tougher cybersecurity stance

Hospital cyber attack exposed 150,000 records; attackers reportedly withdrew extortion demand

“I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails

Kali365 Exploits Microsoft Device Login to Access US Corporate Data

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Lawsuit filed after Maine Course Hospitality data breach affected more than 7,100 people

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Madera Community Hospital data breach exposes records of more than 150,000 patients

Major Hedge Funds Hit by Coordinated AI Voice-Phishing Campaign

Middle East data breaches now cost businesses $8 million on average as AI-powered attacks rise

Mobile Application Security Fails to Match Levels of AI Use

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

North Korea: Two arrested in Wonsan for smishing, voice phishing crimes targeting donju, the country’s wealthy market entrepreneurs

OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries

OnePoint Patient Care agrees to $2.12 million settlement over 2024 data breach

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

OpenAI, Anthropic AI agents implicated in new security breaches

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

Pakistan army drops WhatsApp over spying, data breach fears; switches to China's WeChat

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

Paperclip AI Flaws Let Unauthenticated Attackers Run Commands

Pittsburg: Nigerian Scam Leeches Nearly $1 Million From City Coffers In Phishing Operation

Pittsburg Targeted in Phishing Attack, Investigation and Recovery Effort Recover Majority of Funds

Point72, Citadel among hedge funds hit by AI vishing attacks

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

Popular Cloud Platforms used in over 200,000 Phishing Attacks

Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers

Prompt Injection Remains Biggest LLM Risk, Despite Limited Incidents

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Ransomware Attack Abuses Legitimate Windows Tool to Evade Traditional Containment

Ransom Cartel Leader Maksim Silnikau Sentenced In Alexandria

Ransom Cartel ransomware creator sentenced to 16 years in prison

Ransomware gangs are using AI to fake your clients' legal exposure

Ransomware group ShinyHunters hits major alarm company

Ransomware Hackers Are Hiding Malware Command Servers Inside Ethereum Smart Contracts

Ransomware Precautions With Service Provider Affecting Vincennes Community School Corporation (VCSC) Early in School Year

Researchers Document Instance of AI Agent Being Used to Hack Other Agents

Robin Sage 2.0: How LinkedIn Became a Counterintelligence Battlefield

Samsung joins LG in banning smart TV apps that secretly turn televisions into residential proxy nodes

Singapore: Over $1.2 million lost in courier phishing scams impersonating Ninja Van, J&T Express and others via iMessage

Singapore Removes Public Officers’ Contact Details: Government Tightens Defenses Against Scams

Snowflake hacker pleads guilty, faces up to 32 years in prison

Stolen Greatness Tokens Provide Microsoft 365 Access More Than Two Weeks After Phishing

Swiss canton Graubünden falls victim to cyber attack

Tails Linux critical vulnerability allows websites to deanonymize users: emergency patch available

The bizarre Credit Agricole phishing campaign: how the scammers did it

The Gentlemen Ransomware Affiliate Deploys EtherRAT via Ethereum Smart Contract C2

The six stages of a ransomware attack

Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

Uh-Oh. Which Company’s AI Model Is Reportedly a Hacker Now, Too?

UK Police Data Breach Exposes Contact Details of 100,000 Officers

UK Watchdog Says Anthropic, OpenAI Models Targeted Companies, People in Tests

UK’s AI Security Institute Caught Anthropic and OpenAI Models Trying to Hack a Real GitHub Project

US water utilities face wave of hacker attacks

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

VulnCheck Warns That Chinese Zbtlink Routers Include a Backdoor

Wall Street hackers launch AI voice cloning attacks targeting Citadel, Two Sigma, Point72

What stops attackers wrecking industrial plants is knowing how

'You can no longer spot phishing by grammar mistakes'

Your period app may be sharing more than just your cycle, Dutch regulator warns

Zenith Bank Confirms Data Breach as Cyberattacks on Nigerian Banks Intensify

Zenith Bank Probes Customer Data Breach, Says Funds Remain Safe

4th August

77 Open VSX extensions found harvesting developer info

150,000 Impacted by Madera Community Hospital Data Breach

ADT data breach impacted over 5.5 million accounts

AGIA Data Breach: Social Security Numbers Compromised

AI Accounts for Over Half of Cybercrime in Africa, Says Interpol

AI developers targeted via trojanized GitHub repositories

AI Fuelling Cybercrime Surge In Nigeria, Interpol Report Finds

AI is finding bugs faster than humans can fix them: How enterprise security teams must adapt

AI Is Making Cyberattacks More Dangerous. It's Also Becoming the Best Defence

AI slop infiltrates the CVE system: "the cited code didn't even exist"

Android app developers may be unwittingly sharing their users’ location data with advertisers

Australia: Alleged Top Education Group data breach could impact thousands

Average Data Breach Cost in India Reaches Record ₹25.5 Crore in 2026

Average Data Breach Cost In Middle East Reaches $8 Million In 2026

Average data breach cost in Saudi Arabia reaches SAR 27 million in 2026

Barracuda Networks Shows How AI Agents Can Compromise Business Email

Brown Health Medical Group-MA Data Breach Affects 312,000 Individuals

Businesses stop accepting screenshots as proof after AI makes fake bank transfers too easy

Cambodian scam centers used ChatGPT to lure Indian nationals, conduct investment fraud

Campaigners alarmed by Brighton and Hove City Council's online data breach

Canada: City of Cambridge warns of Christmas market phishing scheme

Canada: Parking ticket ‘phishing’ scam returns to Ontario towns

Canadians could be part of proposed Canadian Tire class-action lawsuit

CB Squared Services Data Breach Exposes Social Security Numbers

Chick-fil-A data breach: What customers should do now

Chrome to Block Policy-Abusing Extensions on Personal Devices

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

Cisco AnyConnect is a favorite ransomware entry point - Here is how to close it

Cloud and SaaS Environments Now Top Targets for Attackers

Corporate Travel Service Data Breach Exposes Social Security Numbers

Cyber Attack by Suspected Iranian Hackers Hits 36 Minnesota Water Utilities, Causing Outages

Cyber-Attack: Zenith Bank Confirms Unauthorised Access to Customer Contact Details

Cybercriminals Bypass AI Safety Controls by Splitting Malicious Tasks Across Multiple Sessions

Device Code Phishing Up 1,500% in 2026; Vishing Doubles

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

Downies Collectables continues to respond to ransomware incident

Doxa Insurance Holdings Data Breach Exposes SSNs

Dozens of officers accused of using Flock system to track women they know personally

English National Ballet suffers possible data breach following cyber attack

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

Fake Bank of America Phishing Emails Found Delivering Disguised ScreenConnect RAT via UAC Bypass

Fake IRS letters direct crypto holders to bogus compliance portal

Family Medical Associates of Raleigh Data Breach Exposed Health Information

FIDO for Bank Employees: A Path for Phishing-Resistant Workforce

Google Deletes 3 Agent Development Kit (ADK) AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

Google’s synced passkeys can be easily stolen with basic malware, researchers find

Greatness Phishing-as-a-Service (PhaaS) Adds Device Code Phishing to Bypass MFA and Steal Tokens

Hacker steals data of 31 thousand legal entities in Liechtenstein

Hackers Access Zenith Bank Customers' Email Addresses, Phone Numbers; Bank Investigates Cyber Incident

Hackers Breach Liechtenstein’s Registry of Beneficial Owners, Exfiltrating Data on 31,000 Entities

Hackers hit Zenith Bank, steal customers’ information

Hackers leak police staff data in major breach

Hackers steal over $130 Million by exploiting bug in offline hardware wallets

Hardware Wallet Firms Warn of Phishing Surge as Coldcard Losses Near $130 Million

How legitimate cloud platforms enable phishers to bypass MFA

INC Ransomware is Calling Victims - Pressure Tactics Post SonicWall Zero-Day Exploit

India: Data breach cost climbs to Rs 25.5 crore

India Records Highest-Ever Data Breach Cost at ₹25.5 Crore

India Records Its Highest Average Cost Of A Data Breach At INR 255 Million (INR 25.5 Crore) In 2026

India’s Average Data Breach Cost Hits Record ₹25.5 Crore in 2026

India's average data breach cost rises to record Rs 25.5 crore in 2026

India’s data breach bill hits all-time high as AI attacks take over

Interlock ransomware gang creates volatile situation

Intermarché Drive Customer Data Affected By Cyber Incident

Is Securing Data A Crime? The Sam Tunick Case Tests the Limits of Digital Self-Defense

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

Liechtenstein Beneficial Ownership Register Hit By Cyber Attack

Liechtenstein Cyberattack Exposes Data From Beneficial Ownership Register

Liechtenstein hackers did not get financial data, government says

Malware Can Now Hijack Your Google Passkeys Without Ever Asking for a Fingerprint

Manufacturers face rising ransomware and supply chain attacks

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Michigan dispensary faces sanctions after blocking Flock camera with “No Flock Zone” sign

Michigan, Georgia confirm public water system attacks linked to Iranian hacking spree

Michigan-based Financial Software Provider Preparing To Pay Out $5.5 Million In Data Breach Settlement

Microsoft shortens NuGet API key lifetime to improve supply chain security

Microsoft Uncovers Global Hotel Wi-Fi Malware Campaign

Neon One Data Breach: Sensitive Personal Info Impacted

New bill proposes lifetime identity protection for Office of Personnel Management (OPM) data breach victims

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

New XCSSET variant targets macOS devs via compromised Xcode projects

Nidec Announces the Second Report on Ransomware-caused Damage to and Possibility of Information Leak at an Overseas Subsidiary of Nidec Corporation

Open Door Health Center Data Breach: PHI Exposed

OpenAI, Anthropic AI agents targeted real people and systems in cyber tests

OSF HealthCare Pays $552,250 in Federal Privacy Settlement Over 2021 Ransomware Breach Affecting 53,907 Patients

PAMCAH Data Breach Exposes PHI and PII

Phishing attacks don’t look fake anymore: Watch for these 7 scams

Phishing attacks targeting China use overseas IPs to spread remote-control malware

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

Polish convenience store chain Żabka hacked through third-party account

Police National Legal Database (PNLD) confirms data breach: Contact details of British police and justice employees published on the dark web

Police National Legal Database (PNLD) Data Breach Exposes Police and Government Contact Details on Dark Web

Potential payment scam related to AnMed cyberattack

Prolific ransomware group behind SonicWall zero-day attacks

Raleigh Clinic Data Heist Puts 500 Patients’ Medical Files, Social Security Numbers at Risk

River Bank reports hackers deleted data stolen in June ransomware attack

River Financial Corporation says stolen data from June ransomware attack was deleted by hackers

Russian Access Broker Sells Network Access to Ransomware Gangs While Spying on Ukraine

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware

Samsung Will Ban Smart TV Apps Containing Residential Proxy Software

Scores of cultural organisations affected by possible data breach after cyber attack

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

South Africa: The cybercrime capital of Africa

Swiss IT agency hacked, 200 accounts compromised, SharePoint vulnerabilities suspected

TeamViewer: Financial regulator imposes fine after cyber attack

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

This ‘Vote for My Friend’ WhatsApp Message Could Hand Over Your Entire Account by Abusing Linked Devices and the Wa.me Domain

Total Losses From Coldcard Hack Top $100 Million as White Hat Hacker Drains Vulnerable Wallets

TP-Link patches Omada ZTP flaws allowing hackers to breach networks

UK police legal database breach exposes officer details, increasing phishing risks

UK’s Police National Legal Database Reveals Data Breach

University of St. Thomas to Compensate Data Breach Victims

Vincennes Community School Corporation Shuts Down Servers Due to Concerns Over Technology Provider Ransomware Attack

Vincennes school district shuts down servers after tech provider ransomware attack

West Africa emerges as Africa’s hotspot for email fraud, ransomware, Ponzi schemes

West Mercia Police warning as dodgy emails reaches all-time high

What to do if your personal information has been exposed

What we know about ongoing Coldcard hack that's stolen over $100M worth of bitcoin

WhatsApp Scam Hijacks Accounts via Linked Devices Feature

WhatsApp Voting Scam Revives GhostPairing Account Takeovers

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

Why Apple’s Recent Crypto Lawsuit Should Worry Australian IT Leaders

3rd August

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

100,000 UK police officers caught in hacker group’s ransomware debut

A Hacker’s Own Mistake Just Proved AI Can Run a Cyberattack With Almost No Human Help

Activision Issues Emergency Fix for Black Ops 2 Hacker Ban Crisis

Activision rushes out another Call of Duty: Black Ops 2 fix for the embattled PlayStation ports after a hacker started ruining lobbies by bricking accounts

AI Fuels 55% of African Cybercrimes as Losses Top $480 Million, INTERPOL Warns

AI Has Become Both Weapon and Target in Modern Cyberattacks

AI is both a cyber weapon and a massive target, CrowdStrike warns

AI Threats Push India's Data Breach Cost Up 11% To $2.79 Million

AI-led attacks push India's average data breach cost to record ₹25.5 crore

Alabama Bank Says It Trusts Ransomware Gang’s Word That Stolen Data Is Gone

Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

Allstate breach claim raises questions about scope of exposure

Allstate Investigates Data Breach Claims by Ransomware Grou

Alpine Agency Data Breach Exposes PHI and PII

American Bank trusts Ransomware Hackers claims of Data Deletion

AmGen Announces Cyberattack and Data Breach Involving Patient Data

Amgen contends with data breach, exposing patient information

Amgen discloses data breach involving patient health information stored in third-party cloud systems

Amgen hit with cybersecurity breach, patient data affected

Amgen reports data breach impacting patient and corporate information

Amgen says patient health data, IP stolen in cybersecurity breach

Apple challenges UK government’s latest demand for iCloud backdoor

Apple fights surge of questionable vulnerability reports

Apple fights UK's latest push for encrypted user data access

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)

Average cost of data breach in India hits record Rs 25.5 crore

Average data breach cost in Middle East climbs to $8 million

Average Data Breach Cost in the Middle East Reaches $8 Million in 2026, with One in Four Malicious Breaches AI-Enabled

Biotech giant Amgen says patient data stolen from third-party cloud systems

Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen

BlackFog reports 40% rise in undisclosed ransomware

Brinks Home Discloses Data Breach as Hackers Leak Files

Browser Security in the Age of Mythos: How AI Is Driving a Surge in Browser Risk Exposure

Buying TikTok followers can expose users to scams and account theft

California man pleads guilty in ‘phantom hacker’ scheme with Arizona victim

Cardiovascular Institute Data Breach Exposes Personal and Health Info

CareCloud Data Breach Exposes Patients’ Health, Social Security and Credit Card Data

Chick-fil-A Faces Potential Legal Action Following Loyalty Account Data Breach

China-based hacker employs DeepSeek in autonomous threat campaign

China-Linked Threat Actors Weaponize New Vulnerabilities in Under a Day

Chinese Hacker Used DeepSeek Model To Attack 460 Systems On Autopilot

Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

CISA lays out new guidance for using open-source software

CISA warns water utility companies to disconnect internet-exposed controls after hacks

Claremedica Viking Data Breach Exposes Health Information

COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft

Coldcard Users Lose $89 million After Bitcoin Wallet Is Hacked

Cost of Org-level Data Breach Touches its Highest Level in India at Rs.25.5 Crore

Cyber attack in Liechtenstein: Data of 31,000 legal entities was stolen. The government has established a crisis cell to investigate the incident

Cyber attack on Liechtenstein steals data of 31,000

Duress passcodes explained: How they work and why they can land you in court

ExfilSquad hackers leak info of over 100,000 UK police officers, staff

Experts Warn of Evolving WhatsApp Hijacking Tactics Targeting Contacts

Fake Roblox Xeno script launcher pushes infostealer, RAT malware

Former workers sue defunct trucking company Yellow Corp. over data breach

From Ransomware to AI Attacks: INTERPOL reveals cyber threats facing Africa

'Generative AI is already changing what malicious software packages look like and how threat actors are beginning to probe AI-based code systems': Amazon flags North Korean hacker group as being behind the surge in open source supply chain attacks

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

Google’s Cyber Threat Actor Naming System Ditches Jargon, Makes Intelligence More Actionable

H96 Android TV Boxes Used for Ad Fraud and Residential Proxies

Hackers Breach Beneficial Owners Registry, Access Data of 31,000 Firms

Hackers claim Radia Inc. as the victim of a ransomware attack exposing patient records

Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short

Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations

Healthcare data breach: Telangana Cyber Security Bureau (TGCSB) registers case after Star Hospitals patients' records leaked online

HollowFrame Loader Uses Fake Python DLL to Evade Defender

Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts

Hotel Wi-Fi phishing attack targets Microsoft logins

House of Commons Defence Committee examines Afghan data breach, says Ministry of Defence (MOD) ‘should never have been left to run immigration casework schemes’

How AI-Assisted Attacks Are Breaking Legacy SIEM Tools

How can phishing-resistant authentication strengthen Anti-Money Laundering (AML) compliance across the accounting sector?

How Cybersecurity Vendors Are Preparing for the Post-Quantum Era

How Google used AI agents to find and fix 1,072 Chrome security bugs - in 60 days

How the World’s Most Active Ransomware Operation Expanded in H1 2026

How to keep your conversations with ChatGPT, Gemini, Copilot or Claude as private as possible

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

IBM’s 2026 Data Breach Report: 92% of AI Incidents Had No Access Controls

INC Ransomware chains two SonicWall SMA 1000 zero-days in attacks

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

India Records Its Highest Average Cost of a Data Breach at INR 255 Million (INR 25.5 Crore) in 2026

India's average data breach cost rises to record ₹25.5 crore: Scammers use AI in cyberattacks

India's average data breach cost rises to record ₹25.5 crore in 2026

Inside the Underground Business of the Android BTMOB RAT malware

INTERPOL identifies ransomware, AI-powered scams among Africa’s biggest cyber threats

Japanese telco Sakura Mobile informs customers of data breach

Kenya: Gambling regulator investigating licensed betting firms over alleged data breach claims

Kenya Emerges as East Africa's Cybercrime Hotspot as Mobile Money Fraud Surges

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)

Korea’s Largest Telco KT Fined $38 million After Femtocell Campaign

Latest Data Breach Scales at 43% of UK Businesses

Lazarus isn’t just stealing crypto anymore - it’s arming ransomware gangs

Liechtenstein Data Breach: Attackers Hack Anti-Money Laundering (AML) Registry, Exposing EU Security Flaw

Liechtenstein says hackers access information on 31,000 legal entities

Maine Course Data Breach: Social Security Numbers and Health Records Compromised

Mapping the malware blast radius a single alert won’t show you

MBK-owned Lotte Card hit with 1.5-month business suspension after massive data breach

Mea Culpa: Apple Confesses It Can’t Keep Up With AI Bug Reports

Members of Tycoon2FA syndicate suspected of providing phishing tools to groups targeting Singapore arrested

Microsoft Warns Globally of Russian Hacker Group Targeting Business Travelers via Fake Wi-Fi Login Pages

Middle East data breach costs hit $8 million as AI threats grow

Midnight Blizzard Targets Travelers via Captive Portals

Ministry of Defence (MoD) Afghan data breach was a 'foreseeable systemic failure', MPs find

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

N-able warns of N-central auth bypass flaw exploited in attacks

New DOUBLECUP ClickFix service hides malware in browser cache images

New Jersey: Phishing email leads to breach of Hackensack schools' computer systems

New Jersey Book Lovers Beware: Fake Barnes & Noble Deal Is a Phishing Scam

New Pass-ta-key attacks let malware hijack Google-synced passkeys

Onslaught of malware hits Arch Linux's major AUR repository, all uploads suspended

OpenAI reveals how criminals used ChatGPT to run scams

Padget Technologies Data Breach Compromises SSNs

Partnered Health responds to INC Ransom data breach claims

Passaic County didn't pay ransom, but cyberattack still cost heavily

Police National Legal Database (PNLD) Breach Exposes U.K. Police and Government Contact Details on Dark Web

Police National Legal Database (PNLD) Confirms Data Breach Affecting UK Police and Justice Staff

Polish retail giant Żabka breached via external service provider: data up for sale

Ransomware Attacks Are Hammering the Food and Beverage Industry

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks

Resilience analysis shows AI is strengthening existing cyber attack methods

River Bank obtained assurances from the attackers that the stolen data in the June attack was deleted

River Bank Says Hackers Deleted Data Stolen in Ransomware Attack

Russian Hackers Exploit Hotel Wi-Fi in New CaptiveCrunch Espionage Campaign

Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft says

Russian spies hijack hotel WiFi worldwide to infect travelers with malware, Microsoft warns

Russian state-supported cyber attackers targeting Western energy organisations

SafetyFirst Systems Data Breach Investigation Launched After Cybersecurity Incident

Sakura Mobile Data Breach Puts International Travelers’ Passport Data at Cross-Border Risk

Samsung bans smart TV apps that share users’ internet connections with strangers

South Korea: Seoul lawmaker criticizes 5,000-won compensation for 4.62 million-person data breach

South Korea warns of nation-state actors using phishing and compromised websites

Stolen BTC from Coldcard users nears $90 Million as people share their painful stories

Superb Shifts Data Breach Compromises SSNs and Government IDs

The Cost of Getting Hacked in India Just Hit a Record High. AI is One Big Reason

The OpenAI Hack Shows the Genie Is Out of the Bottle

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

UK Government Investments Suffered Data Breach

UK state investment agency discloses data breach exposing officials' details

Valley Kidney Specialists Data Breach Compromises Medical Records

Who’s legally to blame for Anthropic and OpenAI’s autonomous AI hacks? It’s complicated

Why the Browser is Security's Front Line in the Age of AI