Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and 
Dentons Senior Analyst, Washington D.C.
Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 26th October and 1st November 2026.📅 1st November
A hack exposed personal info of nearly 300 Philadelphia-based Department of Homeland Security (DHS) personnel
AI Ransomware Attacks: Next Generation Cyber Threat Mechanics
Alpine Linux rebuilds GitLab after attempted RCE attack
‘Anyone can be a super-hacker now’: The world faces a cybersecurity reckoning
Binance Hacker Converts $46.4 Million in Stolen SOL to Bitcoin via Relay Protocol
Binance hacker moves $46 Million in stolen SOL for Bitcoin swaps via Relay
Binance resumes withdrawals following $6.3 billion breach
Canada: Privacy commissioner opens investigation into Crime Stoppers data breach
Canadian cyber agency warns of active help desk voice phishing campaign
Chainalysis Breach: 4 Fields Out, 5 Assets Safe
Chainalysis Data Breach: AI Agents Accessed User Names and Emails
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
Data breach could affect all California students enrolled since 2023, state warns
Device code phishing: what it is, how to spot it and what to do if you entered a code
Fake Anthropic preview invites, phishing attack steals Google and Microsoft passwords
Fake Court Alternative Dispute Resolution (ADR) Phishing Campaign Targets Over 100,000 Companies With LodaRAT
Fake party invite scam: Can you trust a friend's reply?
FBI links $6.3 billion Binance crypto heist to North Korean hackers
FBI Links 628 Crypto Wallet Addresses to North Korea’s Binance Hack
FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
From Binance to Bybit: The North Korean Hacker Network Behind TraderTraitor
Gmarket Pays 10,000 Won to Customers Hit by Data Breach
GMO system attacker may have set up victim info sharing site
Luxembourg: Police identify suspect in LuxTrust phishing scam
Malaysia Airlines becomes latest carrier hit by Amadeus booking system data breach
Malaysia Airlines says IT systems unaffected by Amadeus data breach
Malaysia Airlines warns customers after Amadeus data breach
Malaysia Airlines Warns Customers of Amadeus Data Breach
Malaysia Airlines' systems untouched by data breach
Moin data breach exposes Korean IDs and bank details after hack
North Korea-linked hackers target Japan's GMO Internet in data breach
Polymarket suffers hacker attack with millions stolen and promises refunds to users
Premia Labs loses $464K in Arbitrum exploit as hacker swaps funds for BTC
Ransomware in the Age of AI: How Defenders Can Break the Attack Chain
Suspected Binance Hacker Moves $46.4 Million in Solana, Swaps It for Bitcoin
Ukraine: Kyiv residents received notifications about a nuclear and chemical threat due to a possible hacker attack on the “Air Raid Alert” app
Ukrainian air alert app gives hoax radiation warning for Kyiv after 'cyber-attack'
Urgent Token Dump Leaves 60,000-Crore Binance Hacker with Only 6,700
Volta Infostealer Uses AI Model to Assess the Worth of Victims
What is TraderTraitor? FBI blames North Korean hacker group for record $6.3 billion Binance theft
Zero-token withdrawals let a hacker drain 97 million CORE from Bitcoin staking platform b14g
📅 31st October
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
Amadeus data breach exposes 53,000 Cathay Pacific bookings
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
Belgium: Banks called out for strict phishing refund laws
Bhopal Cyber Alert As Madhya Pradesh Computer Emergency Response Team (MPCERT) Issues High-Level Security Advisory To MP Government Departments After LockBit Ransomware Attack
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Chainalysis discloses data breach from "offensive agentic techniques"
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Crypto firm Binance covers 90% of losses after $6.3 billion hack
Data breach prompts Sault police to halt ties with Crime Stoppers
FBI links North Korea to theft of $6 billion from Binance
Florida Warns 4.9 Million After Financial Aid Website Data Breach
Japan Airlines data breach affects 92,000 customers
Massive State Bank of India (SBI) Data Breach: Biju Janata Dal (BJD) Slams Bank Over Dark Web Leak and Employee Corruption
MyMinfin offline after hacker attack on Belgium's tax office
New Android SMS of Death exploit can remotely crash unpatched phones
Nigeria: Cybercriminals Phishing for UBA Customers’ Details Through Fake Website
Northflank security breach leads to abuse of customers' AI API keys
Notorious hacker says stolen crypto is like ‘holding a hot potato’
Polymarket Users Lose $2.7 Million in Third-Party Script Hack
STP Nuclear Data Breach Hits 1,173 Texans
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
U.S. Government and Cybersecurity Firms Join Forces to Fight Cyberattacks on Rural Hospitals
U.S., Nigerian police nab top three Yahoo Boys selling RaccoonO365 phishing kits to cybercriminals globally
What to know about the $6.3 Billion hack on Binance, likely the biggest-ever crypto theft
📅 30th October
A Hacker Allegedly Stole Up to $4 Million From Poker Players by Secretly Watching Their Cards
A&L Foods Data Breach Compromises SSNs
Amadeus Breach Exposes Data of 92,000 Japan Airlines Customers as ANA, Asiana, and Korean Air Report Impact
Applebee’s exposed customers’ personal data after leaving database password in app
Assad regime hacker who caused $136 billion market drop sentenced to 42 months
AU Small Finance Bank probes possible data breach on Salesforce platform
August 2026 Healthcare Data Breach Report
Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data
Bennett Jones, Borden Ladner Gervais hit in data breach targeting Bay Street law firms
Binance: Hacker used self-destruct mechanism to erase traces
Binance Cryptocurrency exchange cyber attack: North Korean-linked Lazarus Group suspected in $6.3 billion heist
Binance hack: North Korean hackers blamed for $6.3 Billion theft
Binance Hit by $6.3 Billion Security Incident, With North Korea’s TraderTraitor Blamed
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds
Binance Hit by Record-Breaking $6.3 billion Hack in Largest Cryptocurrency Heist in History
Binance Investigates Multiple Breach Points After $6.3 Billion Crypto Hack
Binance links $6.3 billion crypto theft to compromised DevOps laptop
Binance Probes DevOps Engineer’s Hacked Laptop After $6.3 Billion Theft
Binance Probes Suspected $5.8 Billion Crypto Hack, $3 Billion Frozen
Binance Security Incident Affects $6.3 Billion in Crypto Assets, $3 Billion Frozen
Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
Bithumb Data Breach Exposes 844 Customers Despite 2.6-Fold Security Spending Increase
Blossom Health Data Breach Exposed Sensitive PHI and PII
Bluesky Blocks Links to Leaked Department of Homeland Security (DHS) Employee Data as Takedown Pressure Grows
British spy agency cannot account for thousands of data storage devices, watchdog says
Calgary police stands by Crime Stoppers as Lethbridge pauses program in wake of data breach
Canada: Police suspend use of Greater Victoria Crime Stoppers after data breach
Canada: School District 23 shuts down student and staff Gmail after phishing breach
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese Hackers Use DeepSeek AI to Target More Than 200 Organizations
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to Known Exploited Vulnerabilities (KEV)
CISA says max severity GitLab flaw now exploited in the wild
Claude Code extension poisoned with persistent SSH backdoor
Columbia University to pay $16.1 Million to settle cyberattack lawsuit
Compliance Theater Won’t Stop an AI Data Breach. Do This Instead
Confronting What Lurks in the Shadows: AI Regulation and Governance
Covenant Health agrees to $2 Million data breach settlement
Covenant Health reaches settlement in data breach lawsuit
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Crypto giant Binance attempting to recover $6.3 billion stolen in hack linked to North Korea
Crypto Hackers Steal $6.3 Billion From Binance in 'Largest Bank Heist in Human History'
Cyber attack, soaring costs and net zero: ports seek answers
Cyberattack knocks Belgium’s tax services offline ahead of filing deadline
Data breach exposes personal details of 53,000 Cathay Pacific passengers; other major airlines hit
Data Breach Hits Lab Giant Quest Diagnostics, Exposing Personal Information and Patient Records
Del Monte Foods Data Breach Exposed Social Security Numbers
Department of Justice (DOJ) raises privacy concerns over potential sale of Character.AI chats
Drupal warns of critical Commerce Core flaw exploited in attacks
Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
Fake IT help desk callers got by on little more than names and email addresses
Fashion retailer Resolve says hackers stole payment card information
Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach
Foundation for Defense of Democracies (FDD) urges NIST, NSA to evaluate vaultless, keyless pseudonymization as safeguard against ransomware attacks
French privacy watchdog fines FNAC €7 Million for tracking app users without consent
Gone in 20 minutes: How the biggest heist in crypto history unfolded
Hacker attack hits Sony’s internet provider, exposing millions of records
Hacker leaks data on more than 40,000 Homeland Security employees
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Hackers steal $6.3 billion from Binance in record heist blamed on North Korea
Hackers target government Windows systems in Asia with new malware
HCA Healthcare Data Breach Impacts Patients and Employees
Housing committee chair seeks answers as ombudsman cyber attack remains unresolved two weeks on
Hyundai Easywell Apologizes After Customer Data Breach
Icepick Leak: 41,000 Department of Homeland Security (DHS) Staff, 7 Data Fields
Invisible “SMS of Death” crashes Android phone, traps victim in reboot loop until factory reset
Israel Sends Alleged Nomad Bridge Hacker to U.S. After Supreme Court Defines Code Exploit as Intrusion
Japan Airlines data breach exposes 92,000 customer records
Japan's Foreign Ministry reports data breach affecting 3,600 records
Major Software Provider That Manages Bookings For Hundreds of International Airlines Had a Data Breach For THREE Years
Malicious Claude Code extension on Cursor planted SSH backdoors
Microsoft Identifies AI Use Across Eight North Korean Hacker Groups
Moldova data breach exposes records linked to 750,000 national ID numbers
New Framework Puts Ransomware Resilience for AI Systems in Focus
Nigeria Data Protection Commission (NDPC) probed 240 data breach cases, flagged 1,900 firms for non-compliance
‘No government entity, large or small, previously targeted or not, is immune’: Ransomware attacks on government agencies have surged 91% in a year
North Korea May Be Behind the $6.3 Billion Binance Hack
North Korean hackers blamed for stealing record $6.3 Billion in Binance breach
North Korean Hackers Use AI to Mass-Produce Phishing Documents Targeting South Korea
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
Phishing Attack leads to $1.6 Billion Cryptocurrency Loss at Binance
Polymarket confirms cyberattack on third-party provider after outages
Polymarket Restores Trading After Third-Party Security Incident and Promises Full Reimbursement
Quebec crime-tip organizations not affected by massive Canadian data breach, they say
Ransomware Attacks on Synology NAS Users in South Korea Demand Bitcoin
Ransomware 'C3RB3R' Hits Synology Network-Attached Storage (NAS): 3.9 Million Won in Bitcoin Demanded, No Fix Beyond Patching
Russian popular home goods chain faces days of disruption following cyberattack
Scammers rebuild fake shopping sites within hours of a takedown
Smart TVs can harbor unpatched security flaws and track what you watch
Syrian Electronic Army hacker gets prison time for attacks on Western targets
Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
Syrian hacker gets US prison time for spree that included takeover of Marine Corps site
Syrian hacker sentenced to 42 months for attack on Western media, U.S. government
Syrian hacker who served Assad regime gets 42 months in US prison
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs
Telegram for Android Flaw Can Give Attackers Full Phone Control After a Voice Call
The $6.3 billion Binance hack: What we know so far about the biggest crypto heist in history
The ASOS cyber attack shows the challenges of crisis communications
‘This is a terrorist crime’: Jerome School District superintendent shares details on ransomware attack
Train for the Gray Zone: Security Awareness Needs a Simulator
Trezor warns of suspected crypto-theft implant in hardware wallet
Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis
What makes North Korea’s state-linked hacker network so powerful?
Who could be behind the Binance hack and what we know so far
Why is Archive of Our Own down? AO3 warns of security incident and possible data breach
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours
Your Netgear router may be vulnerable to a security exploit - how to check and patch it
📅 29th October
42 million docs left unsecured: local complaints exposed personal data for years
42 Million Records Exposed by Government Technology Platform
26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
AI Involved in 52% of Detected Ad Fraud Schemes - Shopping Agents Could be Next
AI used in Aur0ra ransomware testing and execution
Animate Confirms Data Breach After Hack of YMIRLINK’s Cuenote FC Email Service
Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Belarus Hackers Wiped Data in First Russia-Tier Cyberattack on Europe
Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Binance probes potential $5.8 billion crypto-theft hack
Bithumb 6,444 Customer Data Breach Found After Employee Leak
Bithumb Reports Data Breach Affecting 6,444 Customers and 715 Employees
Bithumb says personal information of hundreds of customers leaked in recent hack
Canada: Belleville police suspend Quinte Crime Stoppers services after data breach
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
Chrome extensions with 13.4 million installs caught hijacking searches
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Claude finds Android phone allegedly took thousands of secret photos
CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience
Cyber Attack Emergency forces Japan to ask citizens to disconnect devices from internet
Cyberattack disrupts Belgian tax services before filing deadline
Daekyo Fined 3.26 Billion Won for Data Breach Hitting 650,000 Users
Data breach: Hackers claim to have unmasked thousands of ICE agents trying to hide their identities
Data theft overtakes encryption in cyber intrusions
Department of Homeland Security (DHS) Data Breach Exposes Information on 41,000 Employees, Including ICE and CBP Staff
Department of Homeland Security (DHS) Data Breach Exposes Personnel Records of More Than 40,000 Employees
Department of Homeland Security (DHS) investigates massive data breach exposing 40,000 employees, including ICE and Border Patrol agents
EMBRACE Flaws in 5 AI Coding Tools Enable Code Execution and File Theft
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ESET Documents First Belarus-Aligned Destructive Cyberattack in Europe in Q2–Q3 2026 APT Report
Ex-Swagelok Worker Sues Over 881 Gigabyte Hack, Wants Class-Action Status
Experts warn Korea investors as Daishin, Mirae hacks spur spear phishing
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Fake crypto app on Apple App Store linked to $23K wallet theft
Fan-fiction site Archive of Our Own (AO3) could be offline for up to 4 weeks after security incident
Federal bankruptcy courts contractor says no data stolen during cyber intrusion
Firefox and Chrome patch 200+ security flaws combined - update both ASAP
First OpenAI, now Anthropic: Unreleased AI models uncover hundreds of security flaws
Frontline Education Breach: 45,000 at Killeen ISD Alone
General Motors (GM) settles with 36 states for selling driver data, agrees to $220 million fine and reforms
German spy agencies plan to exchange secret information via the Google Cloud
GitHub Launches npm Firewall to Block Malicious Packages Before Installation
GMO cybersecurity team finds info critical to identifying hackers, CEO says
Good Smile Company: Full Credit Card Details for 2,800 Customers May Have Been Exposed in Data Breach
Hacker hits South Korea's Pukyong National University, leaks 5,100 records
Hacker Leaks Data of 40,000+ Homeland Security Employees Including ICE Agents
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
Hackers steal data on 40,000 Department of Homeland Security (DHS) employees as Okta denies breach
Hacktivists leak 41,000 Department of Homeland Security (DHS) staff records, revealing undercover ICE agents
Health and Human Services (HHS) Filing Puts iRhythm Data Breach Toll at 8.2 Million
Hidden Chrome extensions racked up 13 Million+ installs, hijacking user searches for profit
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Information Commissioner’s Office (ICO) Reprimands Staffordshire Police After Domestic Abuse Breach
International crackdown takes bulletproof hosting provider offline, exposing data on more than 3,000 customers
IT bosses are confident they’ve found the certificates they don’t know about
Japan: Communications ministry orders ISPs to block hacker site after GMO data breach
Japan Airlines suffers third-party data breach exposing passenger info
Japanese government asked telecom firms to block extortion site in GMO data breach
Korea crime agency busts no-show voice phishing ring, seeks arrest warrant
Limited reports of PHP bug exploitation emerge
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
Massive breach hits Department of Homeland Security (DHS): 41,000 employees, including undercover agents, exposed
Massive Data Breach Exposes Over 41,000 Homeland Security Employees and Undercover Agents Online
Massive Department of Homeland Security (DHS) Data Breach Raises Fears for Undercover ICE Agents as Sensitive Operations Are Exposed
Massive Department of Homeland Security (DHS) Personnel Data Breach Exposes Sensitive Information of Over 41,000 Agents
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
Myrealtrip Reports Data Breach Exposing Passport Numbers
National Institute of Standards and Technology (NIST) Publishes Guidance to Meet Federal Post-Quantum Deadlines
Nefilim and Hive ransomware affiliate sentenced to 70 months in prison
New Cisco firewall zero-day exploited to crash SSL VPN devices
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
Online Scam Volumes Double to Overtake Phishing
Online Scams Surpass Phishing for the First Time
Over 41,000 U.S. Homeland Security officials’ details apparently exposed after massive data breach
Phase Eight owner confirms customer data accessed in cyber attack
Phase Eight owner TFG London contacts customers as personal data is accessed following cyber attack
Phishing accounts for almost 40% of reported banking fraud
Polymarket halts trading after crypto-draining script breach, $2.5 Million traced
Ransomware Attacks on Hospitals and Businesses Lead to 70-Month Sentence
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
Saskatchewan Crime Stoppers suspends tip submissions following data breach
Scams Overtake Phishing as Crooks Industrialize Fraud With AI
Shame and sleepless nights haunt scam victims long after the money is gone
Skyticket Data Breach May Have Exposed Refund Bank Account, Credit Card, and Travel Insurance Information
South Korea: Police Arrest 37 Members of Corporate-Style Phishing Ring 'Daedongdan-gyeol', Sparing No One in 8.1 Billion Won Scam
South Korea: Police Dismantle Vietnam-Based Phishing Ring That Took 8.1 Billion Won
South Korea: Seoul Metropolitan Police Arrest 54 in Vietnam-Based Phishing Group
South Korea: Serious Crime Investigation Agency Seeks Arrest Warrant for Voice Phishing Syndicate Member in 'No-Show' Scam
South Korea: 'That Guy's Voice' Targeted People in Their 20s and 30s...Vietnam-Based Phishing Ring Swindled 8.1 Billion Won
South Korea's Daekyo Fined approximately $2.4 Million Over Data Breach Affecting 650,000; Same Hacking Method Recurred Within Six Months
Stolen staff logins are spreading attacks between K-12 school districts
Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
Telegram warning: Hackers could run code through Android calls
TFG London confirms personal data ‘accessed’ in cyber-attack
The Philippines: Bureau of Corrections (BuCor) warns public against fake recruitment post, phishing lin
Three Cyberattack Campaigns Target Japan, Exposing AI’s Growing Role
Trump’s Department of Homeland Security (DHS) hit by data breach as hackers expose records of 41,000 employees
UK privacy watchdog reprimands police over victim’s exposed address
Ukrainian Nefilim and Hive Affiliate Artem Stryzhak Jailed for 70 Months
Ukrainian Ransomware Affiliate Artem Stryzhak Sentenced to 70 Months for Nefilim and Hive Ransomware Attacks
University of New Mexico restores hospital systems, urges no contact with hackers
Volt Typhoon targeted enterprise control planes via ever-changing “Silent Train” relay network
“We ain’t done” - crypto scammer steals $13 million in Bitcoin, brags on Signal
When a $1 million hacker bounty becomes a cybersecurity warning
Yoba malware hides in fake desktop versions of ChatGPT and Claude
📅 28th October
345,000 email addresses stolen in cyberattack on Germany’s far-right party Alternative für Deutschland (AfD)
Acumetis Data Breach Exposes SSNs and Financial Account Info
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass
AI Is Turning CISOs Into Business-Risk Translators
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
Are Indiana schools cyber resilient: When the network goes down, can pen and paper keep schools running?
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
Australia’s ASD Issues 4,400+ Cyber Warnings and Asks Victims to Report Back
Australian Data Breach Incidents Up 66% as AI Sharpens Scams
Bandai Namco data breach: Over 300,000 users affected by third-party leak
BCS Counseling Group Data Breach Exposed PHI and PII
Belarusian hackers increasingly acting as proxies for Russia amid war in Ukraine
Breach victims discover their data was held by companies they’ve never heard of
Canada: Privacy commissioner investigating provider behind Crime Stoppers data breach
Chatham-Kent police suspend Crime Stoppers partnership after data breach, launch new tip line
China-linked hackers exploit PHP2Shell to breach US government network
CISA warns of hackers now exploiting critical Node2Shell flaw
CleanYourTV project explodes on GitHub as thousands hack their TVs back
Cloud Storage Risk Analysis: Fresh Credential Exposure vs Legacy Backup Extortion
Coinbase Clarifies Amplitude Data Breach Impacted Only Limited Customer Contact Information
Compromised camera management software gives attackers a way into corporate networks
Court strikes down West Virginia law barring disclosure of public officials’ personal data
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers
Cyber Resilience Requires More than a Backup
Cyberattack concealed political spending by big donors before US midterm elections
Data breach at Coinbase vendor Amplitude: contact details exposed, balances untouched
Data breach at Sony-owned internet provider compromises 2.6 million customer records
Details of thousands of US immigration agents leaked in major hack
Discord makes public communities searchable, users immediately look for a way to opt out
Discord to Let Google Index Public Server Messages, Raising Privacy Concerns
Discord to let search engines index public server messages
Distributed Denial of Secrets Publishes Icepick Leak Exposing 40,000 U.S. Homeland Security Employees
Energy Giant Engie Notifies Customers of Supply Chain Breach
European digital rights nonprofit NOYB sues Scale AI for ‘invasive’ worker surveillance
Even after PHP2Shell, blast radius matters more than a CVSS score
Fairmont Federal Credit Union agrees to $1.78 million settlement over 2023 data breach
Fake AI Attacks Target US Firms as Researchers Warn of Corporate Credential Theft
Fake ChatGPT and Claude Apps on GitHub Spread Yoba Malware, Check Point Warns
Fake Court Phishing Campaign Targets More Than 100,000 Companies
Fake US Court Notices Target 100,000+ Businesses With LodaRAT
FBI seizes ‘bulletproof’ hosting site accused of facilitating child abuse, money laundering
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering
FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police
Federal Report Pins Springfield Schools Cyber Attack on Hacker Group
Ford Audio-Video Systems (Ford AV) Data Breach Impacts Current and Former Employees: SSNs Exposed
Frontline Education Discloses Data Breach Impacting School Districts
Good Smile Company Announces Data Breach of Online Store
Google Develops Crypto Security System to Counter Cyberattacks
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Hackers demand $1 million after cyber attack on internet provider
Hackers now scanning systems for recently-patched Oracle flaw
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Hackers Target US Federal Election Commission
Hacktivist Group Leaks Personal Data of 41,000 Department of Homeland Security (DHS) Employees, Exposing ICE and CBP Agents
Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Hive ransomware affiliate jailed, years after FBI infiltrated the gang's systems
How Ransomware poses a major Cyber Threat to the Agricultural Supply Chain
India’s Film Certification Board Data Breach Exposes Documents Linked to More Than 500 Film Titles
InfraTrust report warns of exploited flaws in critical network infrastructure
INJ3CTOR3 Malware Steals FreePBX Credentials, Enabling Toll Fraud After Cleanup
Japan Airlines warns of data breach as country grapples with multiple cyber incidents
Japan’s GMO confirms hacker website taken down after data disclosure
Japan's GMO Group Offers $1M Bounty for Hacker's Identity
Japan’s GMO Internet Urges Customers to Disconnect PCs
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japanese internet giant GMO tells customers to shut down and disconnect PCs from the internet following data breach and ransomware threat
Japanese internet provider confirms takedown of hacker website claiming to contain customer data
Loblaw Customers Got Hacked Last Year—Are You Affected?
Massive data breach at Department of Homeland Security (DHS): Names, phone Numbers, email addresses of more than 40,000 employees leaked
Microsoft urges Entra ID admins to migrate users to passkeys
Millions of students caught in massive data breach
Moldova investigates possible foreign involvement in major government cyberattack
National Institute of Standards and Technology (NIST) starts the countdown to retire quantum-vulnerable encryption
Nefilim and Hive ransomware affiliate gets 70 months in prison
New Zealand: Third-party cyber risk exposed by ZenTech ransomware breach
NHS Tayside apology to patients after scientist's data breach
‘No indication’ of who carried out cyber attack impacting thousands of Greater Manchester residents
One Fake TikTok Shop Domain Accounted for 19% of Surfshark’s Phishing Blocks
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Police seize Virtualine bulletproof service tied to ransomware, cybercrime
Ransomware Attacks Move Beyond Enterprise Systems to Theaten Employees' Families
Ransomware Group Claims Responsibility for Oneonta City Schools Hack
Ransomware group SETTRA behind cyberattack on Israel’s largest car importer
Ransomware Pressure Moves Beyond Enterprise Systems to Theaten Employees' Families
Ransomware victims may also need protection from their rescuers
RMS hack sees 'convincing' phishing scam emails using real hotel booking numbers sent to customers
Rocket.new Data Breach: Encrypted API Keys Exposed
SafePay Ransomware Breached Over 600 Critical Infrastructure Organizations, CISA Warns
San Antonio Independent School District (ISD) warns staff of vendor data breach involving district data
Sarku Japan Data Breach Exposes Social Security Numbers
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
Security vulnerability at Bitonic allows unauthorized access to customer accounts
Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles
SETTRA Named in Colmobil Attack, 14 Days Later
Shielded by Department of Homeland Security (DHS), immigration agents’ identities exposed in massive data breach
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications Breach Exposes 2.5+ Million So-net and Plala Records
South Korea’s financial industry hit by fresh wave of cyberattacks
South Korean voice phishing gang intercepted victim’s calls to police and regulator
Stop Counting Vulnerabilities and Start Measuring Risk Reduction
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
Tailscale fixes SSH flaws allowing lateral movement within tailnets
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers
The Johns Hopkins Breach Wasn’t Caused by a Hacker. It Started With 1 Employee Upload
The Speech Clinic Data Breach Compromises SSNs and Medical Information
Times Car reporting ¥5.5 billion loss has firms bracing for data breach fallout
Times Car users in Japan prepare lawsuit against Park24 over major data breach
UK to look at making software companies liable for cyber breaches
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator
University of Guelph says no evidence of data breach after online attacks
US Federal Election Commission Website Hack Attempt Takes Filing System Offline One Week Before Midterms
US sanctions Russians, North Koreans for laundering IT worker earnings
Volt Typhoon hides zero-day attacks using 'Silent Train' framework
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
Website leaks data on more than 40,000 Department of Homeland Security (DHS) employees
📅 27th October
71% of vulnerability exploitation starts within a week of disclosure
2,000 customers of Hong Kong Airlines, 2 appliance shops, get scam calls after data breach
A fake TikTok shop is Surfshark’s most-blocked phishing scam - how to steer clear
AI companies could gain wider access to Europeans’ personal data under EU plan
AI-Generated Fake Login Pages Are Making Account Takeovers Easier
AI-Powered Hacker Breached More Than 100 Companies with Minimal Human Involvement
Alliance Medinet says access path used in data breach has been secured
Apple backports CoreGraphics zero-day patches to older iPhones
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple Just Patched 163 iPhone Security Flaws - Here’s What Was at Risk
Attackers Exploit Teams External Chat to Breach Organizations in Under 15 Minutes
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
Australia: Major holiday park operators warn guests about fraudulent emails, messages seeking credit card details
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
Australia’s spies are sharing intelligence with hacking targets - and want them to share back
Australian tourist parks warn guests about phishing after cyber incident
Bangladesh: Websites still on outdated program amid data breach claims
Bank of America kindly asks that you don’t share your banking password with your AI assistant
Belgium: 'Watch out for fake fines and phishing' - Software provider for local municipalities hacked
Brotli bug reaches far beyond Node.js (CVE-2026-111497)
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA lays out plan to push cyber adversaries out of US critical infrastructure
CISA Says PHP2Shell Flaw Under Attack as Reports of More Come In
CISA warns of PHP bug exploitation attempts, gives federal agencies days to patch
CoinDCX’s $16 Million Wallet Drain to Phishing: Security Issues Draw Fresh Attention After Fake Notifications
Coinone supports refunds of 7.5 billion won in voice phishing losses over three years
Columbia University Settles $16.1 Million Data Breach Lawsuit After 2025 Cyberattack
Copenhagen University Breach Compromises Data on Half a Million People
Cyber Essentials in 2026: Why Stolen Credentials Still Put UK Small Businesses at Risk
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances
Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack
Cyberattack on University of Copenhagen exposes data of 525,000 people
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Data Breach Announced by NorthShore Health Centers
DreamHost incident triggers password resets, locks customers out of email and FTP accounts
Energy giant ENGIE discloses data breach affecting customers
Foundation Identifies Over 23,000 Phishing Attempts
Foundation Probes Data Leak After 23,000 Phishing Attempts Target Users
Foundation Reports More Than 23,000 Phishing Email Attempts in Passport Wallet Security Incident
GMO Internet Warns of Noon Ransomware, $50 Million Demand
GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
Google’s sneaky privacy policy update pushes users to consider alternatives
Hacker attack on Italy's Chamber of Deputies hits Prime Minister Meloni's email too
Hacker Uses AI to Breach 90 South Korean Organizations and Steal 8.2 Million Records
Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
Hackers breach school tech giant serving 50 million students nationwide
Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
Hackers hijack Convertr analytics script to steal payment card data
Hackers Infect 953 Online Stores With Scanner-Evading Code
Hackers repeatedly breached suppliers holding UK police data, watchdog finds
Hacking Attempt Disrupts Federal Election Commission (FEC) Campaign Finance Filings Ahead of Midterms
“High risk, no reward:” hackers’ attempt to extort 38 organizations in South Korea nets just $226
How to Protect Your Child’s Identity Before a Data Breach Happens
India: Central Board of Film Certification (CBFC) data breach exposed movie scripts, censor cuts summaries and distribution deals of 500+ films
INTERPOL targets ransomware, phishing networks
Italy: A hacker attack on the Chamber of Deputies targeted email accounts, including Prime Minister Giorgia Meloni's
Italy: Hacker attack - the Chamber of Deputies’ website and Prime Minister Giorgia Meloni’s email account have been breached
Japan: Customer info likely disclosed as hacker threatens GMO Internet
Japan: Cyberattack-hit GMO says hacker threatens to disclose customer info at noon
Japan: GMO refuses demands as hackers threaten data leak, ransomware attack at noon Tuesday
Japan: Hackers release data after GMO ignores ransom demand
Japan: High-stakes standoff between GMO and hacker group escalates with first data leak
Japan internet giant GMO says hackers posted stolen customer data
Japan vows to address cyber attack on Foreign Exchange (FX) with urgency
Japan’s GMO Internet warns users of impending ransomware attack
Japan’s GMO Says Hacker Threatens To Disclose Customer Data At Noon
Japan's GMO urges customers to shut down PCs amid ransomware threat
KB Bank Data Breach Victims Jump to 2,210 From 119
Keystone Hardware Wallet Halts Sales, Destroys 18,835 Devices Following Customer Data Breach
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
Malicious apps prey on Russians’ anxiety about fuel prices, drone strikes
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft Authenticator vulnerability let rogue Android apps steal work account access
Microsoft Issues Emergency .NET Fixes for Brotli Flaw and Linux Privilege Escalation
Microsoft Releases Emergency .NET Patches
Microsoft releases Windows Out-of-Band (OOB) updates to distrust eMudhra certificates
Microsoft Teams Adds AI That Reads Conversations to Catch Phishing With No Malicious Links
Microsoft Teams External Chat Abused in 400+ Incidents, Arctic Wolf Finds
Microsoft Teams is getting a suite new AI features to crack down on phishing attacks
Microsoft Teams to Use AI to Catch Phishing Scams Hidden in Conversations
Microsoft Teams to use AI to detect phishing scams hidden in conversations
Microsoft Teams to use AI to proactively detect Phishing Attacks
Navigate360 Data Breach Exposes Some SafeVoice Nevada Tips
Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
New phishing scam impersonates the Canada Revenue Agency (CRA) to trick Canadians into installing malware on their devices
New Zealand: Coronial files sat with a pharma lab nobody at Ministry of Justice hired
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
Over 525,000 hit in massive University of Copenhagen data breach
Police and fire services in UK issued urgent warning over 'significant' cyber attack threats
Private repos still leak secrets to Gheist, a stolen GitHub token campaign
Qilin ransomware group claims quartet of Australian victims in as many days
Quest Diagnostics data breach hits patient records in lab system
Ransomware attacks against healthcare industry rose by 40% in Q3
Ransomware Attacks Rise 50% in Q3
Ransomware chaos hits Richmond, Oneonta school districts as cyberattacks pile up
Ransomware Groups Claim University Breaches in Mexico and New Mexico as UNM Hospital Diverts Ambulances
Severe GoAhead flaws expose security risks for devices from Palo Alto, Siemens, and Boeing
Singapore: No further compromise to Alliance Medinet’s system, hacker access blocked, says parent company
Sirius Backdoor Campaign Hides Fileless Malware in Spear-Phishing Emails Containing Fake FedEx Tax Invoices
Sony Data Breach Hits 2.58 Million Users, Bank Account Details and Passwords Exposed
Sony discloses data breach exposing 2.6 million customer records
South Korea: Spoon Halts Lotte-Branded Gifticle Service After Data Breach Hits 18,000
Tailscale warns of SSH flaws allowing root privilege escalation
Test account using “Password1” caused data leak affecting thousands of people
The days of assuming another company’s breach is someone else’s problem are over
Three Plead Guilty in $9 Million Romance Fraud Scheme Targeting Older Americans via Dating Platforms and Social Media
Times Car Operators to Face Damages Lawsuit over Data Breach
Ukraine warns hackers are exploiting China-made Dahua cameras
UltraMobile Imaging data breach exposes information of 75,000 individuals
University of Copenhagen Data Breach Exposes 525,000 People’s Personal Data, Including Phone Numbers
University of Copenhagen Hit by Second Cyberattack Days After 525,000-Person Data Breach
University of New Mexico Health Sciences Center (UNM Health) ransomware attack disrupts patient care, surgeries
University of New Mexico hospital diverts ambulances after cyberattack
US blocks Huawei-linked surveillance chips over national security fears
US government says hackers are now exploiting critical PHP web bugs
US, UK, and Germany target SafePay ransomware group
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
Warp discloses breach exposing AI agent logs, user telemetry data
Watchdog Urges Police and Fire Service to Improve Cybersecurity
What happens when security tools go dark before the ransomware
WhiteArmor ransomware group claims Hisense data theft, demands $5 million
Your TV might be spying on you: Samsung devices secretly listen in for dog and baby noises, hacker claims
📅 26th October
8 Million Records Allegedly Stolen by AI Hacking Group
23andMe reaches $6 million settlement over 2023 data breach
12,976 Refrigeration Controls Found Exposed Online in 99 Countries
‘A betrayal’: Royal Darwin Hospital issues apology following patient data breach
A hacker claims Samsung's smart TV software is doing secret reporting and looks for mics on connected devices - but this doesn't look like a privacy scandal on the face of it
Accommodation Booking Details Leaked...Nol Universe Apologizes for Customer and Employee Data Breach
AI coding agents fall for malicious instructions planted in the Downloads folder
AI is rewriting social engineering, from phishing defenses to autonomous machine deception
AI phishing puts micro businesses in firing line, yet many still see no need for cyber cover
Amagi Media Labs faces extortion attempt, operational data stolen
Anthropic’s Claude AI Model Accessed Georgia Voting Data
Anthropic’s Claude AI Model Accessed US Voter Data
Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) urges Bank customers to shun phishing scams
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
BASS Medical Group Data Breach Exposes Medical Information
Bathurst RSL says cyber incident contained after Qilin ransomware attack
Belgium: Four convicted over €17,000 phishing scam targeting Prince Laurent and Princess Claire
Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database
Blueberry Pediatrics Data Breach Impacted 340k Individuals
Brantford Police Service suspends use of Crime Stoppers after data breach
California settles 23andMe data breach and genetic data sale claims for $6 million
Canada: Cornwall police pause use of Crime Stoppers after national data breach
Canada-wide freeze on Crime Stoppers programs, partnerships surges to 35 agencies
Capcom’s 196 Password Resets Test an 11.77 Million Breach
Chinese man extradited for role in $36 million cryptocurrency scam
Chinese national extradited over alleged $36.9 Million crypto scam
CISA 2030 Sets Out ‘Aggressive, Anticipatory’ Cyber Defense Strategy for Critical Infrastructure
Claude AI Bypassed a Paywall to Access Georgia Voter Counts, Anthropic Confirms
CoinDCX Warns Users of Phishing as Exchanges Investigate Similar Activity
CONAPE Data Leak: Hacker Claims 6 Million Dominican Republic Senior Records
Cornwall, Brockville police suspend use of Crime Stoppers following data breach
Crime Stoppers data breach exposes 1.5 million tips and Canadian privacy law gaps
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
Crypto wallet maker Foundation warns Passport users after email breach
Cyber Attack Cripples University of New Mexico Hospital System, Forces Closures
Cybersecurity CEO Indicted for Allegedly Scamming Millions From Ransomware Victims
Data breach at Central Ohio Primary Care affects 1.4 million people
Denver Health Medical Plan Breach Exposed Data of 238,000 Members for 14 Months
DreamHost forces password resets in ongoing "incident"
Dutch police extradite Chinese national accused of laundering Cambodian investment scam funds
Emperador Lists AB InBev: $1M BTC Claim, 3.9 GB
eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable
Ernst & Young (EY) data breach exposes client tax records after third-party platform hack
European Union Agency for Cybersecurity (ENISA) Software Bill of Materials (SBOM) Security Advisory Highlights Software Supply Chain Risks and Protection Measures
Fake TikTok Shops now fuel one in five phishing blocks - and Black Friday could make it worse
First 48 hours: What ransomware attack taught family business about cybersecurity, trusted partnerships
Forgotten AI agents may still access sensitive company data
Former Insurance Account Executive Who Stalked and Doxxed Women Across Five States, Now Sentenced
Former minister confirms Jaguar Land Rover cyber-attack was state sponsored
Former pentester used ARTEX AI to steal 8.2 million data records
Fortinet patches critical FortiOS flaws found with AI help
Foundation Finds 23,000 Phishing Attempts Tied to Exposed Customer Data
Foundation Finds More Than 23,000 Phishing Email Attempts
Foundation Identifies 23,000 Phishing Attempts, Investigates Data Exposure
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
Foundation Passport Phishing Alert: Are Bitcoin Wallet Users at Risk?
Foundation Revokes All Cloudflare API Keys After Phishing Emails Sent From Its Own Domains
Foundation Says Cloudflare API Keys Behind Phishing Blast From Its Own Domains
Foundation Says Compromised Cloudflare API Keys Fueled Passport Wallet Phishing Emails
Four in 10 charities have ‘limited or non-existent’ board-level plans for a cyber attack
Gheist Attackers Stumble in Attempt to Abuse GitHub Tokens
Gheist Campaign Abuses Stolen GitHub Tokens Across 850+ Accounts
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
Global cyber attacks jump 48% as phishing rises
GMO Internet Compensates Users as Cyberattacks Hit Japanese Companies
Good Smile Company Reports Potential Customer Data Breach Due to Unauthorized Access
Google Brotli flaw leaves 90% of the cloud exposed, Wiz finds, as patching scramble continues
Grieving families’ ‘incredibly stressful’ wait for answers after major New Zealand cyber attack
Hacker Claims Samsung Smart TVs Collect Audio, Viewing Data for Targeted Ads
Hacker Drains Nearly $1,000,000 in SOL From Solana Trading Bot Users in 94 Seconds
Hacker Exploits Critical PHP2Shell Flaws to Win $2,000 Bitcoin Challenge, Releases Proof-of-Concept (PoC)
Hacker with No IT Background Uses Generative AI to Breach Companies, Steal 8.2 Million Records, Demand Money
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
Hardware wallet after the data breach: four ways to order without a home address
Hisense faces $5 million ransom demand over alleged 19GB data theft
India: Central Board of Film Certification (CBFC) Data Breach - Confidential Documents Linked To Over 500 Films Reportedly Exposed
India: Cyber Attack On TG-iPASS Portal Halts Industrial Approvals In Telangana
India: Ransomware Attack Hits TG-iPASS Portal, Industrial Approvals Disrupted
India: Telangana TG-iPASS Portal Recovers Data After Ransomware Attack
India: TG-iPASS portal services disrupted since October 22nd after suspected ransomware attack
India: TG-iPASS recovers data after ransomware attack
India’s Film Sensor Board Data Breach - Unreleased Scripts, 500+ Film Titles Exposed
Iranian hacker group hides C2 server in US for first time
Jaguar Land Rover £2.1 billion cyber-attack was state-sponsored
Japan's Mos Card data breach: 1.13 million records leaked after unauthorized access to contractor's server; card numbers and PINs affected
Johns Hopkins Bayview warns patients of data breach involving more than 3,100 people
KB Kookmin Bank: "Additional 2,091 individuals confirmed in hacking data breach, bringing total to 2,210...We sincerely apologize to customers"
KB Kookmin Bank Finds 2,091 More People Hit by Data Breach
Keystone confirms data breach: “We owe you an apology”
Keystone Hardware Wallet Suffers Data Breach Exposing Customer Addresses and Purchase Records
Keystone Says Data Breach Exposed Customer Addresses, Purchase Histories
Keystone to Destroy 18,835 Older Devices After Data Breach
Lexitas Data Breach: 7-Year Long Undetected Error May Have Leaked Information
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
Marines sue Pentagon over data breach affecting more than 3 million people
Mega breaches nearly triple as health sector tops Australia’s data breach count
Michael J. Berger & Co. Data Breach Exposed SSNs and Financial Info
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft Removes Entra ID Custom CSS Layout Options to Fight Phishing
Microsoft Teams to get AI protection against phishing and fraud
Microsoft Teams will soon use AI to warn you of sneaky phishing scams
Microsoft to Introduce AI Phishing Detection in Teams for Enhanced Security
Mirae Asset Life Insurance Suffers Data Breach, Confirms Customer Information Leak
Navigate360 Data Breach Compromised SSNs and Driver's License Numbers
New Zealand: Grieving families discover coronial investigations caught up in Dunedin health data breach
Nol Universe admits Korea data breach, boosts security after hacks
Oshkosh utility customers warned of data breach
Pakistan issues high-alert advisory over phishing and malware attacks via WhatsApp
Pakistan warns of phishing, malware attacks via WhatsApp
Pakistan warns of WhatsApp phishing and malware attacks
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP Publishes Mitigation Advice for New RCE Flaw
PHP2Shell Exploited in the Wild
PHP2Shell security flaws now sucessfully exploited in the wild
Political microtargeting violates voters’ data privacy, German regulator rules
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users
PricewaterhouseCoopers (PwC) confirms cyber incident as Everest claims 590 GB data breach
Qilin Lists Bathurst RSL on October 22nd, Club Responds
Ransomware gangs target cybersecurity workers’ families
Researcher hacks into “Steal My Bitcoin” server in PHP security test
Samsung accused of spying on users and then sharing data with 400+ partners
Saskatchewan Crime Stoppers ‘pause’ operations after data breach
Saskatchewan Crime Stoppers suspends all tips after data breach raises concerns over anonymity
Security pros reckon the biggest AI risk comes with an employee badge
Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control
Sometimes Cyber Attacks Are All About the Money: Ransomware Stats Here
South Korea: Financial Supervisory Service (FSS) Warns of High-Paying Job Scams
South Korea Arrests Self-Taught Hacker Who Used Generative AI to Steal 8.2 Million Records from 90 Companies
South Korea Police Dismantle AI-Driven Cybercrime Ring That Hit 90 Companies
SquareML Data Breach Impacts 238k Individuals
StealC Malware Returns as Stadia RAT After Operation Endgame Takedown
Swedish government blocks ChatGPT and Claude, citing security risks
Synthetic identities leave US lenders with $2.4 billion in fraud exposure
Tailscale zero-days spark a disclosure war before fixes land
Taxpayers May Pay Up to $25,000 to Address County Data Breach
The Phishing Domain You Missed Shares a Nameserver With the One You Caught
Timmins Police suspends use of Crime Stoppers after data breach
Top 7 email security threats facing businesses in 2026
Trinity Health Data Breach Impacts Over 33,000 Individuals
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
UK Biobank prepares to reopen research platform following major data breach
UK Biobank set to reopen to researchers after data breach
UK Phishing Warning as 511 Lookalike Domains Imitate Trusted Brands and Target Consumers
Ukraine warns hackers are exploiting Chinese-made Dahua surveillance cameras
University of Copenhagen data breach exposes data of 525,000 people
Voice Phishing Gang Arrested for Stealing 3.1 Billion Won Using Fake Arrest Warrants
What Happens When Manufacturing’s Security Debt Comes Due?
When an AI Agent Is the Incident, the Identity Record Is the Evidence
Wichita Family Dental Data Breach Compromises PHI and PII
Who Authorized That Agent? Enforcing AI Authority Before the Action
Who Pays When AI Makes Cybercrime Cheaper? Inside the New Economics of Ransomware and Extortion
Your Older Android Phone Is Getting a New Scam Defense - Here’s What Google Changed
