Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 19th October and 25th October 2026.📅 25th October
AI coding agents hijacked using AGENTS.md file in Downloads folder
Another Major Hardware Wallet Provider Suffers Data Breach as Security Concerns Mount
Anishinabek Police Suspend Crime Stoppers Use Following Reported Data Breach
City of Columbia says it was victim of ransomware attack, asks State Law Enforcement Division (SLED) to investigate
Cybercriminals Impersonate cPanel As AI Tools Sharpen Credential Phishing Attacks
Dropbox Phishing: How to Identify Scam Emails
Eversource Sued Over Alleged Data Breach After Ransomware Group’s Claim
If AI can already think like a hacker, why aren’t we using it to our advantage?
India: Central Board of Film Certification (CBFC) Data Breach Exposes Scripts and Cut Orders of 500+ Films, Censor Board Orders Security Audit
India: Cyber attack knocks out TG-iPASS, government says backup available
India: Ransomware attack encrypts TG-iPASS database, portal goes offline
India: Scripts, Censor Records of Over 500 Films Leaked in Central Board of Film Certification (CBFC) Data Breach
India: Telangana Government Portal Under Ransomware Siege
Jaguar Land Rover cyber-attack was ‘state-sponsored’, former minister suggests
Keystone Says Shopify Breach Exposed Customer Shipping and Order Data
Microsoft Teams to Use AI for Detecting Phishing Attacks Using Teams Conversations
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
Over Half of Ransomware Cases in Korea Suspended, No Arrests This Year
Peel Crime Stoppers: programme paused after data breach
PHP2Shell Exploitation Attempts Continue Amid Suspected North Korea Global Scanning Activity
Retail Cybersecurity Statistics 2026 and Data Breach Trends
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
📅 24th October
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
Canadian privacy watchdogs powerless to hold Crime Stoppers accountable for data breach
Capcom confirms data breach affecting 11.7 million CAPCOM ID records worldwide
Capcom confirms data breach that affected 11.7 million users
Capcom Warns of Phishing After 11.7 Million CAPCOM ID Records Exposed
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
City of Columbia confirms ransomware attack disrupting online services
Columbia city manager confirms ransomware attack behind service outages
Columbia, South Carolina, Ransomware Hits 4 City Services
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
Hacker group claims to have accessed 86.3 lakh Rajasthan police emails; probe on
Hackers steal 8.3 Million records from crime tip platform used by schools, police nationwide
Keystone Wallet Data Breach Exposes Shipping Details, Raising Phishing Fears
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
Microsoft Teams Adds AI Phishing Detection for External Chats Starting in Early November
Microsoft Teams to Use AI to Detect Phishing and Impersonation
Navigate360 Admits Hack 7 Months On, 8 Million Tips
Norfolk council cyber attack test caught out 'too many'
Ottawa Police pause Crime Stoppers programs after a data breach
Park24 to pay ¥3,000 to Times Car users hit by data breach
PHP-ocalypse: How two critical web bugs almost broke the internet
Pizza Hut Japan suffers data breach exposing customer information
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
Saskatchewan Crime Stoppers pauses tip lines after data breach
Saskatchewan Crime Stoppers programs pause tip intake due to national data breach
Saskatchewan Crime Stoppers programs pause tip lines after data breach
Singapore: Personal data of 110,000 members of Alliance Medinet breached; several insurers affected
Singapore insurance customers among 110,000 hit by Alliance Medinet data breach
SPECTER Attack Uses USB Power Signals to Leak Data From Air-Gapped PCs
State Bank of India (SBI) Assures Customers of Safe Funds After Suspected Data Breach
Switzerland: Data protection officer launches investigation into cyber attack
University Of Copenhagen Hit By Cyber Attack
📅 23rd October
11 Million Impacted by Capcom Data Breach
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
A Computer Hidden Behind a Hotel Fridge Allegedly Helped Send 480,000 Phishing Emails
Abandoned Popcorn Time app exposed millions of devices to RCE attacks
AI Didn't Break Vulnerability Management: it Exposed its Biggest Weakness
AI is taking cybersecurity jobs at junior and experienced levels alike
AI-powered ransomware aimed at Singapore firms outpace global attacks
American Chamber of Commerce in Korea (AMCHAM) and Cisco urge Korea to replace aging IT gear to block hacker threats
Anthropic’s AI Found Two New Crypto Bugs in Simulations. A Real Hacker Exploited One 4 Days Later
As Greater Toronto Area (GTA) police forces pause Crime Stoppers use in wake of data breach, what does it mean for investigations?
Attacks on Tech Firms Behind Most Third-Party Data Breach Victims
Australia has toughest data breach fines in APAC
Australian Broadcasting Corporation (ABC) wipes staff devices exposed to new, sophisticated cyber attack
Barrie Police suspend Crime Stoppers promotion after data breach
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations
Canada: Chatham-Kent police pause participation in Crime Stoppers after national data breach
Canada: Crime Stoppers on pause following national vendor data breach
Canada: Crime Stoppers pauses tip taking following data breach
Canada: Local police continue to avoid Crime Stoppers as Toronto reports data breach
Capcom affected by data breach, over 11.7 million Capcom ID accounts compromised
Capcom Confirms Data Breach Affecting Nearly 11.8 Million CAPCOM ID Records
Capcom Confirms Data Breach Exposed More Than 11.7 Million Capcom ID Accounts, Says Credit Card Details Remain Safe
Capcom confirms major cyberattack: Data breach affects 11.7 million accounts
Capcom data breach: up to 390,000 people potentially affected across 11.7 million Capcom ID accounts
Capcom Data Breach Compromises Over 11.7 Million Accounts
Capcom data breach confirmed - around 11.7 million accounts thought to have been affected
Capcom data breach exposes 11.7 million account records
Capcom Data Breach Exposes 11.7 Million CAPCOM ID Accounts Worldwide
Capcom Data Breach Results In Unauthorised Access To More Than 11.7 Million 'CAPCOM ID' Accounts
Capcom hit by data breach, compromising over 11.7 million Capcom ID accounts
Capcom Hit by Massive Data Breach: Over 11 Million Players Warned of Scam Risks
Capcom ID Data Breach Impacts Nearly 12 Million Accounts
Capcom reports data breach affecting millions of user accounts
Chinese Hacker Deploys Fully Automated AI Agents to Breach 100 Companies at Trivial Cost
CISA and FBI Warn of SafePay Ransomware Threat
Computer hidden behind a fridge in a hotel room in Japan had been sending lakhs of phishing emails to steal card details since over a year; used hotel Wi-Fi; here's how it was traced
Crime Stoppers had 'potentially one of the most harmful data breaches' Canada has seen. What's next?
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
Curaçao Scraps Gambling Licensing Portal After Data Breach
Cyber Breach Hits Quest Diagnostics, Patient Records May Be Affected
Data breach: State Bank of India (SBI) says it individually informed all affected customers
DaVita faces $15 million payout over major patient data breach
Data Breach at Manhattan Law Firm Involved PHI of 197,000 Individuals
Devastating Data Breach at Crime Stoppers Across Canada Exposes Tipsters and Their Personal Information
Educational Testing Service (ETS) Sued Over Data Breach Affecting Current, Former California Students
eMudhra quits issuing trust certificates after blunder triggers Java and Python updates
European Commission opens Digital Services Act (DSA) probe into Booking.com over scams
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Federal Communications Commission (FCC) bans two devices with surveillance chips linked to Huawei
Fortinet says patch now, details later, but experts warn of hacks before November 10th disclosure
Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information
Giving away your old TV? You should wipe it just like you would your phone
GoDaddy Revokes 404,607 SSL Certificates After Policy Errors
Hacker leaks 281 GB of data from Germany's far-right AfD party
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense
Hadouken! More than 11 million customer records exposed by Capcom data breach
Halton police suspend their use of Crime Stoppers following data breach
Hewlett Packard Enterprise (HPE) patches eight max severity RCE and auth bypass AOS flaws
INTERPOL’s Operation Serengeti III Disrupts 10,909 Malicious Networks
'It's been relentless' say IT workers on frontline of PHP cyber-security scramble
Jailbroken DeepSeek V4 Helped Hacker Steal 5,200+ Indian University Records in AI-Powered Cyberattack
Japan: Digital Agency reports data breach via website vendor
Japan AI Cyberattack Simulations Planned as PHP Flaws Disrupt Services
Japan's Arcadia Says Up to 3.14 Million Email Addresses May Have Leaked; 1.42 Million Phishing Emails Also Sent
JETS Limited reports data breach but says core payment networks unaffected
Kingston Police issue statement following report of Crime Stoppers data breach
Kingston Police issue statement on Crime Stoppers following Toronto data breach
Korea Electric Power Corporation (KEPCO) personal data breach grows to 35,528 victims, including retirees and contractor staff
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Loblaw CEO apologizes to 2 million shoppers for personal data hack, offers free credit monitoring
Loblaw notifies customers of data breach - Here’s what Ontario shoppers need to know
Loblaw says March data breach affected about two million Canadians
Luxembourg secondary schools fall victim to phishing attack
Magna Hospitality Group discloses data breach 17 months after intrusion
Microsoft 365 accounts compromised at 79 organizations, no passwords needed
Microsoft partner PwC is facing data breach claim
Microsoft Teams to get AI-powered, context-aware phishing detection
Microsoft Warns of AI-Powered Attacks Linked to ConnectWise Compromise
Morgan Stanley, Bank of America, Citi have started blocking AI agents
Nearly 12 Million Capcom ID Accounts Affected in Huge Data Breach
Nikkei hit by second cyber attack in a month, sensitive data exposed
Oneonta City School District closed due to ransomware attack
Oneonta city schools close following ransomware attack
Oneonta school district closed through Monday after ransomware attack
Ottawa police suspend use of Crime Stoppers after data breach uncovered
Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign
Patient Data Likely Accessed in Quest Diagnostics Hack
Peel Police suspend Crime Stoppers partnership following major data breach
Peel Regional Police pause Crime Stoppers over data breach
Pentagon faces lawsuit over Data Breach affecting 3 million People
Pentagon Sued Over Data Breach Hitting 3 Million+ People
PHP Security Vulnerability Sparks Global Cyber Attack Attempts
PHP shares mitigation for new RCE vulnerability with no patch
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
PHP’s nightmare is far from over: new unpatched vulnerability found
PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Probe begins into Rajasthan Police data breach in Jaipur
PwC Data Breach Claim - Everest Ransomware Group Claims to Have Stolen 590 GB of Data
Quest Diagnostics confirms breach of lab systems, patient data now at risk
Quest Diagnostics confirms data breach exposed patient records
Quest Diagnostics investigating data breach involving patient records
Quest Diagnostics reports patient data breach
Quest Diagnostics warns of potential data theft after attack on lab service system
Rand Mutual Assurance probes alleged theft of 1.68 million claim records
Ransomware Hits Palo Alto VPN Patched 5 Months Ago
Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Resident Evil developer Capcom confirms breach involving more than 11.7 million account records
Resident Evil maker Capcom warns of phishing after 11.7 million records exposed
Resident Evil Maker says no game disruptions after breach, but users should stay vigilant
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
Safety company acknowledges hack seven months after breach exposed millions of crime tips
Scammer admits to fraud scheme targeting US military personnel with stolen PII
Singapore: At least $180k lost to Carousell buyer phishing scam
Singapore: Over $180,000 lost in phishing scams on Carousell since July
Southwestern Ontario police forces pause, review participation with Crime Stoppers after data breach
State Bank of India (SBI) Data Breach: 3,897 Customer Records Containing Personal Information Exposed
State Bank of India (SBI) data breach explained: What are your rights if personal data is leaked?
State Bank of India (SBI) says customer funds unaffected after data breach
Tariffs and Supply Chain Security: An Emerging Security Challenge
The North Bay Service is pulling the plug on anonymous tips from the Crime Stoppers platform due to data breach
The Philippines: Phishing-related scams account for nearly 40% of banking fraud cases
Third-Party Post-Quantum Readiness: Assessing Vendor Risks and Protecting Legacy Systems
U.S. Banks Detect Unauthorized AI Agents Accessing Accounts
UltraMobile Imaging Identifies Data Breach Impacting 75,000 Individuals
‘We are deeply sorry’: Toronto Crime Stoppers suspends anonymous tips after data breach
When cyber attacks target the real world, not the data
Widespread Token-Spraying Attacks Target Microsoft 365 Accounts For Email Compromise
Winnipeg police suspend Crime Stoppers tips following data breach
Winnipeg police suspends use of Crime Stoppers following data breach
'Your funds are safe with us': State Bank of India (SBI) message to customers after major data breach
📅 22nd October
11 Million Impacted by Capcom Breach, Some Facing Unauthorized Changes
84% of Ransomware Attacks Involve AI as Cybercriminals Escalate Their Tactics
480,000 phishing emails sent from a PC hidden behind a fridge in a Japanese hotel room - Chinese couple arrested over fraud operation, scammers remotely leech Wi-Fi to target 2.4 million victims
A Hacker Tried to Turn an AI Chatbot Into a Tool for Attacking Other Servers
Africa cybercrime crackdown nets 1,462 arrests and over $105 million
Agencies warn of malicious activity by SafePay ransomware group
AI agent permissions are outrunning security
Amazon and Cloudflare report PHP2Shell cyberattack attempts as millions of websites race to patch
Amazon says PHP2Shell exploitation began 4 days before patches
Anthropic finds 94 cases where open-source projects drop security controls without warning
Application Protection in the AI Era: Lessons from AI-Powered Breaches at South Korean Banks
Are You the Insider Threat?
Arista patches new VeloCloud Orchestrator zero-day exploited in attacks
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Attackers abuse legitimate platforms to deliver phishing emails that pass authentication checks
Australia: Attorney-General urged to step in as court data breach concerns grow
Authorities disrupt nearly 11,000 cybercrime networks in Africa
Beware These Phishing Tricks After Historic Internet Meltdown
Booking.com has a scam problem. The EU wants answers
California Department of Education reports data breach
Canada: Halton cops halt use of Crime Stoppers after data breach
Canada: Intake of Crime Stoppers tips in Toronto, surrounding areas paused after data breach
Canada Confronts Crime Stoppers Anonymity Failures After Massive Data Breach
Capcom apologizes about unauthorized data breach of over 11 million Capcom ID accounts
Capcom Breach Hits 11.77 Million CAPCOM ID Accounts
Capcom confirms a data breach has affected over 11 million people, with emails, IP addresses, and birthdays caught up in the mix
Capcom confirms CAPCOM ID breach hit 11.77 million accounts
Capcom confirms data breach affecting 11.7 million accounts
Capcom Confirms Massive Data Breach Affecting 11.7 Million Users
Capcom data breach confirmed: More than 11 million accounts impacted
Capcom data breach exposes account details for over 11 million users
Capcom discloses data breach affecting 11.7 million accounts worldwide
Capcom Hit With Data Breach Affecting 11 Million Accounts, Warns Users of Potential Phishing Emails
Capcom ID Breach Affects Nearly 11.8 Million Accounts
Capcom reports large-scale data breach affecting approximately 11.77 million “Capcom ID” accounts. No credit card information compromised
Capcom Says a Breach Exposed 11.7 Million Capcom ID Accounts, and Warns of Phishing
Capcom says a data breach affected more than 11 million Capcom ID accounts, credit card details unaffected
Capcom suffered a data breach involving 11.7 million user records
Capcom suffers massive data breach exposing private information from over 11.7 million Capcom ID accounts worldwide
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
China-nexus actor linked to attack on ConnectWise Cloud Backup
Chinese Hacker Group Uses AI to Automate Attacks; Microsoft Confirms Targeting of Hundreds of Organizations
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Chinese State Actor Used AI to Compromise ConnectWise Tenants
Chrome Adds Suspicious Site Warnings and ClickFix Protection
Chrome puts insecure sites behind a permission prompt
Chrome warns you about suspicious websites now - how to turn on Google’s new scam protection
CISA, FBI, Secret Service & Partners Expose SafePay Ransomware Tactics
Claude Security can now spot vulnerabilities that reappear in code
Cloud Security: The Perimeter is Everywhere and Nowhere
Cloud Security Maturity Lags Despite Widespread Adoption
Crime Stoppers Guelph Wellington pausing tip intake due to data breach
Critical flaws in the software that underpins the internet: Millions of hacker attack attempts worldwide
Critical PHP2Shell Flaws Put Millions of Websites at Risk With Exploitation Attempts Rising Sharply
Cyber Attack Hits BAE Systems, Disrupting Numerous US Federal Courts
Cybercrime crackdown across Africa leads to 1,462 arrests, $105 million seized
Data breach affecting SafeVoice Nevada
Data breach exposes internal emails of German political party
Data breach hits 11 million Burger King Japan customers
Data breach leads to tip line program suspension in Mississauga and Brampton
Data of over a thousand Chesapeake therapy patients breached following ransomware attack
Department of Defense under fire over massive data breach
Developer platform Railway urges ‘all users’ to revoke secret keys after cyberattack
Dozens of universities in the blast zone after hackers exploit QuickLaunch
Durham Regional Crime Stoppers (DRPS) encouraging you to call them directly after Crime Stoppers data breach
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
EU investigates Booking.com over fake rentals, phishing scams and paid listings
EU investigates Booking.com over phishing and misleading advertisements
EU Regulators to Investigate Booking.com Over Scam Risks
FBI and CISA Warn SafePay Ransomware Group Is Targeting Critical Infrastructure Worldwide
FBI, CISA Warn SafePay Ransomware Has Hit 600+ Victims
Free pass for US data requests? Seizure of far-left activist server sparks concerns in Europe
GitLab warns of new max severity code execution vulnerability
Hackers knock Richmond schools offline, deface teachers laptops with ransom threats
Hamilton, Halton police halt use of Crime Stoppers over leak of tips
Hawaii, Connecticut Warn State Vendors of Email Scams
Healthcare Data Breach Statistics
If you haven’t been cyber attacked, you’re the lucky one
Indian tech company eMudhra announces withdrawal from certificate business after security incident
Innovative Renal Care Pays $900,000 to Settle Data Breach Litigation
INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown
Interpol-Led Effort Shuts Down Almost 11,000 Cybercrime Networks in Africa
Iranian Hacking Group Found Hosting C2 Infrastructure in the US
LiteLLM hit by second supply chain attack this year, users urged to rotate credentials
LiteLLM release pipeline hacked to distribute info-stealer malware
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Malicious Package Release
Loblaw customers hit in data breach, company offers credit monitoring
Malta: No evidence of government data breach following PHP security flaws, Malta Information Technology Agency (MITA) says
Man Hires Swarm of AI Agents to Go on Epic Hacking Spree Against Major Companies
Marines File Class-Action Lawsuit Against Pentagon Over Data Breach
Massive data breach targets Germany's AfD
Meta Ordered to Pay $25 Billion After Court Finds 43 Million Privacy Violations
Meta’s broken privacy promises cost it a whopping $25 billion in New Mexico
Microsoft blames ConnectWise attacks on Chinese state hacker using ARTEX AI agents
Missouri Central Credit Union confirms phishing attack gave intruder access to member emails
More than 1.5 million Canadian Crime Stoppers tips were exposed in a data breach
Multiple Pokémon Apps Taken Offline After PHP Cyber Attack
Nevada school safety tip system SafeVoice suffers data breach
New phishing-as-a-service platform uses artificial intelligence
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
Northern Light Health lab manager suffers data breach
Norwich City Council take website offline over hacking fears
OpenAI’s coding agents talked themselves out of being monitored
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
Operation Serengeti III Nets 1,462 Arrests and $105 Million in Cybercrime Crackdown
Over 8.1 million people impacted by iRhythm cyber attack
Over 11 Million Capcom IDs Impacted In Major Data Breach
Over 970,000 individuals affected by Paradigm Healthcare data breach
Peel Regional Police Statement on the Crime Stoppers Data Breach
Pentagon ignored cybersecurity flaws before data breach, Marines’ lawsuit says
Pentagon sued over data breach affecting more than 3 million people
Phishing-As-A-Service: The Business Model Helping Cybercriminals Scale
PHP Issues Patches for Two Critical Flaws, Security Leaders Discuss
PHP was just the beginning: Node.js unveils dangerous flaws threatening millions of sites
PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure
PHP2Shell Patch Rush Takes Wikipedia, Government Sites Offline
Qilin and INC Exploit Palo Alto VPN Flaw in Ransomware Attacks
Race to update services' computer systems after cyber-security flaw found
Railway Says Intruder May Have Accessed Customer Secrets, Urges Credential Rotation
Railway warns developers to rotate secrets after potential breach
Ransomware Attack Forces Richmond, Virginia, Schools Offline
Ransomware Attacks Against the Health Care Industry Doubled Over the Past Year
Ransomware Has Entered A 'Golden Age'
Recent agrifood cyberattacks are ‘a wakeup call’ for the industry as ransomware incidences increase
Resident Evil Developer Capcom Issues Phishing Warning After Data Breach Hits Over 11 Million Customer Accounts
Resident Evil makers Capcom reveal data breach has affected over 11 million Capcom ID accounts, warn against potential phishing emails
Ridgeway Pharmacy Data Breach Affects 259,000 Individuals
Russia-linked hackers used decentralised network in Ukraine cyberattack
SafePay ransomware compromised 600 critical organizations worldwide; urge patching and network defenses
SafePay ransomware gang hits at least 600 organizations worldwide
SafeVoice data breach may expose personal information tied to Nevada school safety tips
Securing Autonomous Machines So Cyberattacks Don’t Turn Robots and Drones into Physical Hazards
Signal flaw could expose audio and video even after users hang up
Signal’s sneaky bug: mic and camera eavesdropping you post-call
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
South Carolina officials offer assistance after state capital hit with cyberattack
Telecoms provider Ogi reprimanded after cyber-attack exposed children’s info
Toronto Crime Stoppers chair devastated about data breach, says pausing program is ‘right decision’
Toronto Crime Stoppers Halts Public Tips Following Data Breach
Toronto Crime Stoppers temporarily stops accepting tips after data breach
Toronto crime tips organization freezes operations after details of data breach come to light
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
UK working to identify exposure after global cyber-security warning
US Defense Department Faces Class Action Lawsuit for Data Breach
Vibe coding platform Zeabur collapses after back-to-back breaches expose 3.2 Million records
Wales: Data Cymru reprimanded over failings that exposed data
What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers
What is PHP and why did it spark a global cyber-security scramble?
Why Your Phone Number Is the Weakest Link in a Data Breach
Windsor Police Service pauses participation in Crime Stoppers after data breach
Yonsei University Cyberattack Hits 10,000 Students, Months After Sogang Breach
📅 21st October
23andMe Settles for $6 Million Over California Data Breach
35% of Organizations Run Over 1000 AI Agents
76% of AI Agents Are Dormant but Keep Their Credentials and Connections
A critical PHP security release is coming today, so get ready to update!
Adams-Friendship School District Reports Alleged Cyber Attack
Amazon Bee Frontier and Bee Eclipse Raise Workplace Consent Concerns
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Blueberry Pediatrics reports multiple data breach linked to Metabase vulnerability
Booking.com targeted in EU investigation into phishing scams, fraudulent listings
Build, Buy, or Vibe Code? AI Is Reopening Security Risks We Already Solved
Central Ohio Primary Care Physicians (COPC) Data Breach Affects 1.4 Million Patients
Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
China-Based BRONZE SANDCASTLE Hackers Abuse Sandboxie to Load Backdoors
CISA issues joint SafePay ransomware advisory after more than 600 victims reported
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Cyber-attack exposes personal data of 3,300 children due to weak password security
Data breach: State Bank of India (SBI) admits exposure of its customer data on the Dark Web
Data Breach at Burger King Japan Exposes over 11 Million Customer Records
Data breach exposes 1.5 million Canadian Crime Stoppers tips, compromising anonymity
Data breach threatens to expose 125,000 staff records across Japan’s police forces
Data-breach NHS worker told woman she had cancer
Denmark: Magasin data breach exposes customer details
Department of Homeland Security (DHS) lied about why it searched activist’s GrapheneOS phone
Disney faces data breach claims after staff records appear online
eMudhra flags weak keys in eight certificate authorities, rules out data breach
eMudhra security blunder left trusted CA signing keys exposed to anyone
EU investigates Booking.com over fake listings and phishing scams
EU Investigates Booking.com Over Fraudulent Listings and Phishing Risks
EU Investigates Booking.com Over Fraudulent Listings and Phishing Scams
EU investigates Booking.com over fraudulent listings, phishing scams
EU investigates Booking.com over online fraud and phishing risks
EU opens investigation into online travel agent Booking.com over fake listings, phishing scams
EU Probes Booking.com Over Fake Listings, Phishing and Unlabelled Ads
EU probes Booking.com over fake listings, phishing scams
EU probes whether Booking.com is doing enough to tackle fake listings and phishing scams
EU Regulators Open Probe Into Booking.com Over Fake Listings and Phishing Scams
EU wants Booking.com to check out of its scam problem
EU Website Outages Follow Critical PHP Flaws: What IT Teams Should Know
European Commission launches investigation into Booking.com over phishing and fraud
Fake Hotels, Phishing Scams Put Booking.com in EU Crosshairs
Fake Postal Delivery Notices Fuel New Phishing Scam in Korea
Feds Issues Advisory About SafePay Ransomware Group
Frontier Communications to Pay Connecticut $625,000 Over Data Breach
Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Government websites go dark as vulnerabilities in programming language send shudder across internet
Hacker uses AI agents to breach over 100 company websites
Hackers chain Plex flaws in Plex2Shell attacks to breach servers
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Hackers steal children's data after company used 'Password1' to protect old account
Hackers take control of school cameras, locks, and HVAC, shutting down entire Idaho school district
Hackers Use Claude AI to Plan Ransomware Attacks, Then Accidentally Expose Their Secrets
Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups
Housing Ombudsman services still down a week after cyber attack
How hacker breached more than 100 companies using AI agent
Hundreds of websites taken offline as concern grows over two PHP vulnerabilities
INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages
Info-stealing malware slipped into OVHcloud CLI releases on GitHub
Information Commissioner's Office (ICO) Reprimands Ogi Networks and Data Cymru After Ransomware Attack Exposes Children’s Data
Japan: Data breach potentially exposes information of 125,000 police officers and staff
Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
Kentucky Cabinet for Health and Family Services (CHFS) Breach Hits 3,816 Medicaid Records
Lazarus hackers use post-quantum cryptography for malware delivery
Less than 100 Chinese characters: How a hacker used AI to breach over 100 company websites
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Luxembourg: Police warn of new phishing attempts targeting LuxTrust accounts
Meta on the spot for $25 billion under New Mexico privacy ruling
Meta Ordered to Pay Record $25 Billion in New Mexico Privacy Lawsuit Over Cambridge Analytica Scandal
Micro enterprises underestimate their appeal to cyberattackers as AI phishing grows
Microsoft Emerges as Prime Phishing Target While Attackers Weaponize Terminal Commands
Most of the World’s Websites Threatened by Critical PHP Flaws Found With AI
New Phishing-as-a-Service (PhaaS) Platform Uses AI to Craft Phishing Lures and Mask Malicious Activity
OpenAI agents disabled safety monitoring, one lied about it
OpenAI bugging suspect reportedly in contact with Saudi royal
Palo Alto Networks VPN Flaw Exploited by Qilin and INC Ransomware Groups
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024
PHP ships emergency patches for critical PHP2Shell flaws
PHP2Shell: Critical PHP vulnerabilities patched, update now!
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
Privacy-preserving AI can protect your heart data, the bill is the problem
Rajasthan government website data breach reported, up to 70,000 identity records exposed
Ransomware Attack Encrypts 182GB of Data Following Decade-Old Account Oversight
Ransomware Attacks Rise as Rival Gangs Vie For Market Supremacy
Ransomware defence: why backups are no longer enough
Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June
Resilience reports energy and utilities sector faces rising cyber exposure from ransomware, vulnerable Operational Technology (OT) systems
Russian hackers teamed up to wipe data at Ukrainian grain firm
Safari blocks trackers that turn your email into a tracking ID
SafePay Has Compromised 600 Critical Infrastructure Victims Worldwide, CISA Warns
SafePay Ransomware: FBI, CISA Advisory Urges Organizations to Take Security Measures, Warns of 600+ Victims
SafePay ransomware group has targeted hundreds this year, US agencies say
SafePay ransomware hit over 600 critical infrastructure organizations
SBI cyber attack update: State Bank of India says customer balances are completely safe despite data leak
ShinyHunters-Linked Claims Target Stripe: $1 Million Demands, Alleged Access to Millions of Accounts
Siemens software, used by Nvidia and Amazon, under active exploitation: Is your PC safe?
Singapore: At least $83,000 lost in phishing scams linked to fake Simba websites since March
Singapore: Fake SIMBA websites used in phishing scams; at least 62 cases since March
Singapore: Police Advisory On Phishing Websites Impersonating SIMBA In Search Engine Results
South Korea: Daycare Teacher Caught Delivering Voice Phishing Funds for Daily Pay of 160,000 Won
South Korea: “Police Servers Become Hacker Bait”...Hacking Attempts Quadruple Year Over Year - Is AI to Blame?
South Korea: “This Is the Post Office”...Korea Post Changes Notice Format to Combat Phishing with Forged Notices
State Bank of India (SBI) Admits Major Data Breach: 375,000 Customer Records Leaked On Dark Web
State Bank of India (SBI) cites cyber attack, 3897 customers data stolen and put on dark web
State Bank of India (SBI) Confirms Data Breach - 3000+ Customer Records Exposed on Dark Web
State Bank of India (SBI) Confirms Data Leak: Nearly 4,000 Customer Records Spotted on Dark Web
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
State Bank of India (SBI) Cyberattack Leaks 3,900 Customer Records on Dark Web
State Bank of India (SBI) data breach: Personal data of nearly 4,000 exposed, how major is the incident?
State Bank of India (SBI) data breach: Personal details in 3,897 customer records exposed on dark web, probe launched
State Bank of India (SBI) Owes Its Customers Answers: Congress on SBI Data Breach
State Bank of India (SBI) Probes Data Breach Involving 3,897 Customer Records
State Bank of India (SBI) told investors its data breach doesn’t matter. What about the 3,897 customers it affected?
Symantec Uncovers AI Agent Hijacking Models for Autonomous Cyber-Attacks
The European Commission is investigating Booking.com over fake listings, phishing attempts and unclearly labeled advertisements
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation
The greatest cybersecurity risk is often a rushed employee, not a hacker
The US Army is building AI agents that can hack enemy networks on their own
Trustbank’s Furusato Choice Data Breach Exposes Almost 4.5 Million Member Records
U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New Purchases
US and Allied Agencies Warn SafePay Ransomware Has Hit 600 Victims
US and Global Police Warn of SafePay Ransomware Attacks Across Four Continents
US bans DeepSeek AI products from federal agencies
Washington Gastroenterology to pay $4.6 million over 2024 data breach
Weak password leads to data breach of children’s information in Wales
Why security tools lose sight of the credential
WordPress websites at risk from severe PHP flaws: emergency patch issued
Yegaram Savings Bank, Hit by Data Breach Affecting 43,000, to Join the Financial Security Institute and Overhaul Security
📅 20th October
5 Ransomware-as-a-Service (RaaS) groups that should be on businesses’ radars
23andMe successor settles with California for $6 million over cybersecurity failings
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
A Hacker Used the World’s Worst Password to Steal an Entire Country’s Data
A Single Hacker Successfully Hacks 100 Companies Using AI Agents
A Star-Studded Biotech Conference Was Actually a Ransomware Front
Ahold Delhaize: Cyberattack affects services across US and Europe
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace
AI Agents Help Chinese-Speaking Hacker Breach More Than 100 Company Websites
AI Hacker Breaches 100+ Companies for $50 Each
AI-powered hacker breaches 100+ firms worldwide for 6.7 million won
AI-Powered Hacker Breaches Over 100 Companies Without Human Supervision
AOMEI Backupper servers hijacked for minutes at a time to push backdoor
AOMEI yet to notify customers after hackers hijacked its software updates
Attackers exploit Siemens Software Center flaw in active ClickFix malware campaign
Authentication Shouldn’t End After MFA Succeeds
California Educational Testing Service (ETS) Breach: Reports Cite 7 Million Students At Risk
California Settles 23andMe Data Breach Claims for $6 million
California to receive $6 million in 23andMe data breach settlement
California warns all public school students of data stolen in contractor breach
Chinese hacker used AI to attack over 1200 websites, doing almost nothing himself
Chinese Hacker Uses AI Agents To Breach Deere, SharkNinja Sites
Chrome flags malicious commands that scammers pass off as fixes
Citizens Bank data exposed: here’s what customers need to know
Citizens Bank notifies customers of data breach involving social security numbers
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan
ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Curaçao Gaming Authority set to launch temporary licensing portal after data breach
Cybersecurity awareness must extend beyond passwords and phishing to become truly operational
Decades of legal aid records exposed in major data breach
Defense contractors in two NATO allies hacked in recent Russia-linked campaign
Department of Homeland Security (DHS) bans DeepSeek products across US federal civilian agencies
Department of Homeland Security (DHS) Orders DeepSeek Removed from Federal IT Systems Over Security Risks
Did Hackers Breach State Bank of India (SBI) Customers' Data? Here's What SBI Said On Hacker Group's Claim
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
EU cyber law won’t force fixes for fridge controllers hit in French attack
Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
Exposed Cairn AI Hacking Panels Reveal 1,100+ Attack Projects Targeting the US, Japan, Australia
FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024
FBI Suspects Ransomware Negotiator Helped Operate ShinyHunters Extortion Website
FBI Uncovers Suspected Links Between Ransomware Negotiators and ShinyHunters Hackers
Feds say ransom negotiator actually ran ShinyHunters extortion site
Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security Concerns
Hacker gets 8 years for stealing $3.3 million from taxpayers
Hacker group claims access to 3.75 lakh State Bank of India (SBI) data entries, 2,722 documents
Hacker Group Claims Access to Data of 3.75 Lakh State Bank of India (SBI) Customers
Hacker group claims data of 3.75 lakh State Bank of India (SBI) customers exposed
Hacker Group Claims State Bank of India (SBI) Data Breach Affecting 3.75 Lakh Customers
Hacker Leverages AI Agents to Breach More Than 100 Company Websites
Hacker used AI agents to breach over 100 websites
Hacker Uses AI Agents to Breach Over 100 Company Websites With Minimal Human Effort
Hacker Uses AI Agents to Breach Over 100 Websites for Just $5,000
Hackers Claim State Bank of India Data Leak Exposing 375,000 Records and 2,722 Documents
Hackers Exploit Palo Alto VPN Flaw to Bypass MFA and Steal Credentials From VMware Disks
Hackers Exploit Zimbra Mail Server Flaw to Execute Commands and Steal Emails
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
Hackers Steal 1.8 Million Records From Nikkei
Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites
Hackers Use Fake AOMEI Updates to Install Persistent Backdoors on Windows Computers
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Hackers Using Fake Google Meet Pages to Steal Google Credentials
Head of AI Security Roles Surge in Large Organizations
Health Prime International reports data breach following third-party cyberattack
Hong Kong: Judiciary Warns Public About Fraudulent Phishing Emails Pretending to Be Court Summons
How A Chinese-Speaking Hacker Used AI Agents To Breach Over 100 Companies
How One Hacker Used AI Agents To Target Over 1,200 Websites For Just $5,000
How to Check if Your Personal Information Was Exposed in a Data Breach
Incomplete security patches show hackers where to look next
Japan: Phishing Reports Surge 15% to 94,661; Personalized Scam Emails Confirmed
Know Your Customer (KYC) Data Of 3.75 Lakh State Bank of India (SBI) Customers Hacked, Leaked On The Web
Legal Aid South Africa resets all passwords after phishing attack
Luxembourg: Education Ministry warns students of phishing emails
Microsoft Accounts for One in Three Brand Phishing Attempts in Q3 2026
Microsoft Warns AI Agents Could Become Insider Threats to Enterprise Security
Mozilla, Google, Apple block compromised eMudhra CA certificates
Multi-Cloud Blind Spots Are Leaving Security Teams Exposed
Nearly 480,000 Phishing Emails Traced to Computer Hidden Behind Hotel Fridge
New details on Alabama nursing board data breach
Nigerian hacker gets eight-year jail term for stealing 800 Americans’ Identities
Nigerian national given 8-year sentence for tax business hacks
One Hacker Uses AI Agents to Breach Over 100 Company Websites for Just $5,000
One Hacker’s AI Agents Broke Into 100+ Company Websites for About $5,000
Only 7% of CISOs at Large Companies Own AI Governance
OpenCode Confirms Security Breach as Large-Scale AI Distillation Attack Impacts Users
OpenCode Data Breach Exposes API Keys Linked to Third-Party Services
Over Half of Financial Service Leaders Miss Spoofed AI Traffic
Overseas Phishing Calls Disguised as Korean Numbers Cost Victims 1.5 Billion Won
OVHcloud CLI compromised as a hacker swaps its GitHub binaries
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
Pegasus Spyware Found on Belgrade Rector’s iPhone Days Before Serbia’s Election, Report Says
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
Phishing targeting office workers: AI and technology emails most effective bait
PHP warns admins of two critical flaws, emergency patches coming tomorrow
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Qilin and INC Ransomware Hackers Exploit Palo Alto Networks VPN Flaw to Breach Networks
Quarantined, but still on your calendar: The explosion of invite-based attacks
Rank Math PRO WordPress Plugin Hacked to Spread Malware and Steal Credentials
Ransomware groups expand targeting of Palo Alto Networks vulnerability
Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader
Security Leaders Share Concerns About California Student Data Breach
Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw
Siemens Software Center Flaw CVE-2026-110936 Under Active Attack: Update Now
SOCtoberfest: The four habits that stop most attacks - passwords, MFA, phishing and patching
Someone allegedly offered €100,000 to bury German Alternative für Deutschland (AfD) party email leak
South Korea: Account-Freezing Scam Prolongs Unfreeze Times Up to 18.6 Days
South Korea: Dozens of USIM Cards Found in Drainage...Ring Arrested for Altering Overseas Phishing Numbers to '010'
South Korea: Foreign Operators Caught Converting 070 Phishing Calls to 010 Numbers
State Bank of India (SBI) Data Breach: Hacker claims 3.75 lakh customer records leaked on dark web
State Bank of India (SBI) Data Breach Allegedly Exposes Personal Information of 3.75 Lakh Users
State Bank of India (SBI) Data Breach Claim: 3.75 Lakh Accounts Reported
State Bank of India (SBI) data breach claim: Hackers allegedly access 3.75 lakh accounts
State Bank of India (SBI) Data Breach Claim - Hackers Allegedly Claim Access to 3.75 Lakh Users’ Database
State Bank of India (SBI) data breach? Hacker group claims access to 3.75 lakh records, 2722 documents
Stolen UpdraftCentral keys used to backdoor WordPress sites
Synnovis ransomware attack, patient died and alleged Qilin member extradited to Germany
The Netherlands sees the number of cybersecurity firms skyrocket amid rising threats
Trump Administration Asked Cybersecurity Agency to Covertly Hack Voting Machine
US Army is developing AI agents that could strike enemy networks and vanish without a trace
US orders federal agencies to remove China’s DeepSeek AI from their systems
WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators
White House Begins 120-Day AI Safety Review Amid Growing Security Concerns
Your frontline workers have a workaround for that MFA prompt
Zeabur shutting down after second security breach in two months
📅 19th October
2.76 million pieces of customers' information at Hollys leaked in cyber attack
A Chinese hacker used AI agents to break into more than 100 company websites - Deere and SharkNinja among websites hit by open-source AI-powered problem-solving platform demo
A hacker claimed a popular toy from Amazon was storing over five million private child conversations, and he says its personality could be hijacked
A Lone Hacker Used AI Agents to Breach More Than 100 Companies
Ahold Delhaize confirms 'malicious actions' behind cyber outages affecting grocery brands
AI Agent Hacker Breaches 100+ Firms for $5,000
AI agents broke into 100+ sites for one hacker at $50 each, researcher says
AI Streaming Scam: Fake Songs Hijack Real Artists’ Profiles on Spotify and Apple Music
Australia: Accounting firm investigating ransomware attack
Australia ranked 11th in Microsoft's Digital Defence Report as phishing rises
Australia's nuclear agency targeted with ads linked to spyware that infect devices without a click
Australian software giant Canva confirms third-party data incident
BAE Systems Cyberattack Halts Bankruptcy Notices at Every U.S. Federal Court
Bullhorn takes staffing platform offline to contain cyberattack
Burger King Japan Confirms Data Breach Exposing 11.18 Million Customer Records
Burger King Japan Data Breach Exposes 11.18 Million Records
Calendar Invite Phishing Is Surging. Here’s How to Spot It Before You Click
California secures $6 million 23andMe settlement over data breach claims
California student records exposed in data breach involving testing provider Educational Testing Service (ETS)
California to receive $6 million settlement after 23andMe data breach
Canada: Cybersecurity firm hired by Hamilton says director arrested by FBI didn't handle city's ransomware response
CenterPoint Energy data breach affected over 1.6 million individuals
Check Point Q3 2026 Audit: Microsoft Impersonated in 33% of Global Brand Phishing Attacks
Computer Task Group (CTG) Data Breach Exposes SSNs and Financial Account Information
Conduent Agrees to Pay $80 million to Settle Data Breach Class Action
Connecticut Fines Frontier $625,000 Over Data Breach
ConnectWise breach puts more than 300 companies’ secrets at risk
ConnectWise SkyKick Credential Abused to Access 160+ Microsoft 365 Tenants
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
ConnectWise suspends Cloud Backup service after supply chain attack
ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users
Curaçao's Reputation as a Top Online Gambling Licensing Hub Takes a Hit Following Curaçao Gaming Authority Data Breach
Cybercriminals favor Microsoft over Apple and Google in brand phishing attacks
Data Breach at Hankyu Hanshin Department Store Common ID System Affects Nearly All 1.26 Million Members
Data Breach at Japanese Karaoke System Maker Daiichi Kosho Affects More Than 8.7 Million People
Data breach exposes California student information: How to protect your family
Data breach exposes info for nearly 4K Kentucky Medicaid recipients
Delek US Energy Data Breach Compromises Social Security Numbers
Department of Homeland Security (DHS) Banning DeepSeek from US Federal Civilian Agencies
Educational Testing Service (ETS) Breach Hits California Students: 4-Month Gap
Educational Testing Service (ETS) data breach exposes California students’ personal information
Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds
F5 releases out-of-band patches for critical NGINX vulnerabilities
Fairlife Data Breach Exposed Social Security Numbers
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
FANCL and Attenir Suffer Data Breach Affecting 780,000 Customers, Exposing Addresses, Names, Phone Numbers
FBI and CISA Warn of AI-Written Phishing Before the 2026 Midterms
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Fiji: Government urges cybersecurity vigilance after suspected China-linked cyber attack in Suva
Final Fantasy 14 Accounts Suffer Major Data Breach
Florida announces massive data breach weeks after ‘malicious actor’ accessed DMV driver license records
Florida confirms driver’s licence and motor vehicle data breach by ‘malicious actor’
Florida Data Breach Involved Personal Driver Information
Florida DMV hacked after police department insecurely stored login info
Frazer LLP Data Breach: 69GB of Client Data Stolen
Frontier settles data breach affecting 59K Connecticut residents for $625K
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
Global cyberattacks jump 48% as Africa faces heavy threat burden
Google Expands Android AI Security to Combat Scam Calls, Phishing and OTP Theft
Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy?
Google Unveils New Android AI Protections to Block Scam Calls, Phishing Links and OTP Theft
Hacker Accesses Personal Data of Millions of California Students
Hacker Steals Data on Millions of California Students From Testing Vendor
Hacker's AI agents broke into 100+ sites, including John Deere and SharkNinja
Hacker’s Cyberattack Shuts Down Jerome Schools
Hackers claim producer of “Friends” and “The Office”: next big hits may have been stolen
Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor
Hackers hijack AOMEI update servers to secretly spread malware
Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
Hackers steal customer data from major Russian hosting provider FirstVDS
Half the AI bot traffic hammering your website comes from Meta
Healthcare Workers Claim Authentication Errors Delay Patient Care
Hollys Breach Exposes 2.76 Million Records in Korea
How a Booking Phishing Email Can Shut a Hotel Down
How one hacker used AI agents and a few thousand dollars to break into scores of sites
Indiana University Health (IU Health) Data Breach Compromises Medical Information
Interpol’s new campaign shows how anyone can fall victim to deepfake scams
iRhythm Data Breach Affects 8.2 Million Individuals
Japan's Hankyu Hanshin Department Stores Says 1.26 Million Member Records May Have Leaked via Booking Site Breach
Jerome School District Cyberattack Cancels Monday Classes in Idaho
Jerome schools closed again Tuesday after weekend cyber attack targets district networks and demands ransom
Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
Keio Corporation Investigates Ransomware Attack Linked to Cybercrime Group Qilin
Korean Coffee Chain Hollys Suffers Major Data Breach, 2.76 Million Customers Affected
Labcorp Reaches $2.3 Million Settlement with 44 Attorneys General Over Debt Collector Data Breach
Lexington Hospital Corp. discloses vendor-linked data breach affecting 67,000 people
Microsoft accounts for 33% of brand phishing attacks in Q3, Apple, Google trail
Microsoft behind a third of brand phishing
Microsoft says AI agents are like insider threats as ‘frontier models can’t be trusted’
Microsoft Tops Brand Phishing Attacks in Q3, Apple and Google Trail
Microsoft tops phishing list as attackers turn to AI tools
Microsoft, Apple, Google, LinkedIn and Amazon Lead Phishing Attacks in Q3 2026
Milk Dragon phishing kit makes online fraud easier to scale
Millions of California Student data exposed in Cyberattack on Education Contractor
Moldova warns of phishing campaign targeting state agencies
Moroccan Police Arrest Two Suspects in Telecom Hacking, National Road Safety Agency (NARSA) Phishing Scheme
New York and Connecticut Attorney Generals settle $2.7 million breach case
Nikkei discloses third data breach in a month, 1.8 Millions records exposed
One Compromised Login Exposed Millions of California Students’ Records
One Hacker Used AI Agents to Breach More Than 100 Websites
One Hacker Used AI Agents to Break Into John Deere, SharkNinja, and Cummins
One hacker’s AI agents broke into John Deere and SharkNinja sites for $50 each
OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts
OpenCode Breach Could Affect OpenAI, Anthropic and Google
OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
OpenCode hack exposes API keys amid AI distillation attacks
Over 390,000 phishing attacks exploit legitimate cloud platforms in 12 months
OVHCloud CLI repo compromised. Customer reports incident
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Qilin Claims Responsibility for Ransomware Attack on Keio Railway Subsidiaries
Ransomware attack prompts proposed class action lawsuit against senior living operator
Ransomware claim emerges as disruption threatens Colorado County, Texas, services
Ransomware drives up insurance costs for nearly half of Singapore firms
Ransomware pressure now reaches employees’ homes and families
Secret Broadcom chip flaw lets nearby hackers take over millions of routers
Security Leaders Discuss BAE Cyberattack
Singapore: Organisations face ransomware attacks at 1.5 times the global rate
South Korea: Account-Tying Scam Freezes 6,500+ Accounts, Unfreeze Delays Up to 18.6 Days
State Bank of India (SBI) Customer Data Leak Claim Appears Online, Still Unverified
State Bank of India (SBI) data breach reported, hacker claims sensitive info including KYC records of 3.75 lakh users at risk
Statewide student data breach: What California families should know
Stitch Connect Data Breach Impacts 4,062 Texans: Medical Info Exposed
Survey Surfaces Impact Cyberattacks in Healthcare Sector Have on Patient Care
Testing Company Data Breach Affects Millions of California Students
The AME Group Ransomware Attack Exposes Indiana University Health (IU Health) Data
The FBI Issues an Urgent Warning Over Midterm Election Scams
The Fear of a One-Man-Band Weaponizing AI Agents Is Becoming Reality
The Money Store Data Breach Exposes Personal and Financial Information
The Right Steps After a Phishing Scare at Work
Ticketmaster Confirms Brazil Customer Data Breach as Scope, Timing Remain Unclear
Two more Serbian opposition figures targeted with spyware, researchers say
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
US Cybersecurity Job Postings Fall 26%, Hitting Four Year Low
US Ransomware Negotiator Suspected of Helping ShinyHunters Extort Victims
Vishing (voice phishing): how the attack works and how to stop it
Watch out - these are the phishing scams experts say are most likely to catch your workers out
What next? Canva’s most recent data breach a ‘textbook case’ of supply chain risk
Whopper of a data breach sees Burger King Japan expose over 11 million customer records
With open-weight AI, more of the security burden falls on enterprises
WordPress SEO plugin Rank Math compromised to backdoor websites
Your AI assistant could fall for phishing scams
Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next?