Questel: Have I Been Pwned’s Post
public
–
2 min read
Questel Hit by ShinyHunters Extortion Campaign, Exposing 1.2M Records
In a recent cyberattack, intellectual property management firm Questel was…
Kaspersky: Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit
public
–
2 min read
Zero-Day Exploit Targets Kaspersky Endpoint Security in Privilege Escalation Attack
Researcher Nightmare Eclipse (also known as Chaotic Eclipse) has released…
Federal Reserve: FBI Seizes China State-Sponsored Hacker Platforms Used to Target U.S. Critical Infrastructure
public
–
3 min read
U.S. Authorities Disrupt Chinese State-Sponsored Hacking Platforms QScan and QTRouter
The U.S. Justice Department and FBI have seized…
Carhartt: Have I Been Pwned’s Post
public
–
2 min read
Carhartt Hit by ShinyHunters Extortion Campaign, 12.9M Email Addresses Leaked
Earlier this month, workwear retailer Carhartt fell victim to…
SickKids Foundation and Boomerang Pediatric Clinic: SickKids data breach exposes employee and job applicant info
public
–
2 min read
SickKids Hospital Discloses Cybersecurity Breach Affecting Employee and Applicant Data
The Hospital for Sick Children (SickKids) in Toronto has reported…
MiLogin, Michigan Department of Environment, Great Lakes and and Energy: Michigan investigating cyberattack on water infrastructure
public
–
2 min read
Cyberattack Targets Water Systems Across Multiple States, Including Michigan
Michigan officials are investigating a coordinated cyberattack that disrupted over 30…
Fanlore: Have I Been Pwned’s Post
public
–
2 min read
Fanlore Data Breach Exposes 145K Email Addresses and Hashed Passwords
Earlier this month, Fanlore a wiki platform focused on fandom…
Unnamed real-world entity: Irregular Details How a Naming Error Let AI Models Attack a Real Company
public
–
3 min read
AI Safety Firm Irregular Reports Real-World Cyberattacks by Tested AI Models
AI safety testing firm Irregular disclosed an incident in…
McDonald's and Gap: McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen
public
–
3 min read
McDonald’s Employee Data Leak Exposes 1.7M Records in Alleged Azure Breach
A data seller known as TheHatman has…
WordPress: Critical WordPress RCE Vulnerability Allows Authors to Execute Code via Malicious PNG File
public
–
2 min read
WordPress Patches Critical RCE Vulnerability in Imagick Extension
WordPress has released version 7.0.4, a security update addressing a…
Zoom: Turns Out You Don’t Need The Most Powerful AI Models to Cause a Major Cybersecurity Incident
public
–
2 min read
AI-Driven Zero-Click Exploit in Zoom Highlights Growing Cybersecurity Risks
A critical vulnerability in Zoom, discovered by cybersecurity firm A Security,…
OpenAI, Google and Anthropic: OpenAI, Anthropic, and Google LLM APIs vulnerability Exposes Hidden Reasoning Traces
public
–
3 min read
AI Providers’ Encrypted Reasoning Flaws Exposed Sensitive Data in Major LLMs
A critical security vulnerability in how leading AI providers…