Coverage of the latest data breaches, unauthorized access incidents, and exposure events affecting organizations worldwide — with analysis of what it means for your security posture.
BlueNoroff hid a 66-day fileless implant behind AI Zoom deepfakes. WordPress plugins backdoored for 8 months via blockchain C2. APT28 patch was incomplete — zero-click flaw now actively exploited.
8.3M anonymous crime tips exposed — 38 years of data. Silk Typhoon hacker extradited from Italy. Microsoft patches critical Entra ID takeover flaw. Mustang Panda targets India banks and Korea diplomacy.
ShinyHunters claims 9M Medtronic records. A PyPI package with 1.1M monthly downloads pushes infostealer via CI/CD. North Korea targets macOS. 10,500 Zimbra servers exposed. AI engine exploited in 12 hours.
ShinyHunters breaches ADT via a phone call — 10M records at stake. Germany's Bundestag president's Signal account hijacked. 12-year Linux root bug disclosed. Notion leaks your team's emails.
A $5 tracker compromised a $585M NATO warship. Russia's RAMP ransomware database leaked. 500K UK DNA records sold on Alibaba. Anthropic's restricted AI bypassed on launch day. Blackwater deadline today.
17 agencies warn China's 200K-device botnets now power full kill chains. Apple patches the iOS flaw FBI used to read deleted Signal messages. CISA mandates BlueHammer patch by May 7.
Scattered Spider's Tylerb pleads guilty. US weighs homicide charges for hospital ransomware. Lazarus Group steals $290M from Kelp DAO. Humana hit by second breach in 60 days. AI fake news poisons Google Discover.
ShinyHunters targets Zara, Carnival, and 7-Eleven with 9M records at stake. Microsoft Teams weaponized for helpdesk fraud. Standard Bank leaking 1.2TB daily. Vercel confirms AI supply chain breach.
UK government warns AI is shrinking your defensive advantage, a Tennessee hospital went 25 days undetected, Splunk patches an RCE in your SOC platform, and NIST overhauls the NVD.
Ransomware groups are now disabling your endpoint security before striking. Plus Booking.com data exposed, Anodot breach spreads, and 4 missed stories.