Search: “breaches”

15 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Data breach 7641 Ransomware 4914 Vulnerability 2515 Policy & legal 1449 Malware 1318 Exploit / PoC 1079 Threat actor 1067 Phishing & fraud 798 Industry 770 AI safety & security 153 AI tools & infra 101 Research 98 Advisory 90 Tools 36

SeverityAll critical 8731 high 8944 medium 2129 low 1946 info 335

7th September – Threat Intelligence Report

Check Point weekly bulletin: exploited SonicWall SMA 1000 zero-days (CVE-2026-83548/49), JFrog Artifactory auth bypass, and a 2.8M-patient Baylor Genetics breach.

Check Point's weekly bulletin covers breaches including Thomson Reuters' C-Track platform (court records across 11 US states and Canada), Baylor Genetics (2.8M patients and employees, SSNs included), Hit casinos in Slovenia, and Dropbox (~5,000 accounts via abused Lenovo email verification). SonicWall patched two exploited SMA 1000 zero-days, including CVE-2026-83548, a CVSS 10.0 pre-authentication SSRF, while JFrog fixed exploited authentication bypass CVE-2026-82329 (CVSS 9.8). Malware and actor coverage includes Gambling Goblin, JSCeal, Mirage Kitten's NodeRabbit/PollCat campaign, and DPRK Contagious Interview macOS activity, plus a FalconFlank privilege-escalation PoC against CrowdStrike Falcon.

Check Point ResearchSep 7, 14:54 UTC · 9d agoAdvisory in the wildCVE-2026-83548 CVE-2026-83549 CVE-2026-823291

HITRUST and Frist Cressey Ventures form the Venture Capital Advisory Council and Venture Program

Help Net SecurityDec 16, 00:00 UTC · Dec 16, 2019Advisory

Forrester, one of the most influential research and advisory firms was hacked

Security AffairsOct 8, 13:21 UTC · Oct 8, 2017Advisory

CISA Red Team Fully Compromised Two Critical Infrastructure Orgs

CISA red teams achieved full domain and cloud compromise at two critical infrastructure orgs; one SOC never detected the intrusion.

CISA advisory AA26-237A documents two simultaneous red team assessments. Organization A (Government Services sector) missed the intrusion entirely, as default credentials on a web app, ADCS ESC1 abuse, and thousands of false-positive alerts let the red team reach sensitive business systems and read SOC email. Organization B (Water/Wastewater sector) detected, isolated, and reimaged hosts quickly, but both orgs lacked Conditional Access for workload identities, and B still exposed DCSync, Golden Ticket, and OT network attack paths.

Security AffairsAug 26, 23:20 UTC · 21d agoAdvisory1

CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise

The Hacker NewsMar 19, 06:31 UTC · Mar 19, 2025Advisory in the wildCVE-2025-300661

Kaspersky Security Bulletin 2012. The overall statistics for 2012

Kaspersky SecurelistDec 10, 17:45 UTC · Dec 10, 2012Advisory

Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities

Apple released iOS 27 and iPadOS 27 patching roughly 126 vulnerabilities across kernel, WebKit, sandboxing, and authentication components; no active exploitation reported.

Apple released iOS 27 and iPadOS 27 on September 14, 2026, fixing approximately 126 vulnerabilities across more than 90 components, including the kernel, WebKit, AppleKeyStore, Sandbox, and TCC. Flaws include memory corruption, information disclosure, denial-of-service, logic errors, sandbox escapes enabling root privileges, and a Bluetooth issue permitting remote code execution in specific circumstances. Apple also shipped iOS 26.7 and iPadOS 26.7 with over 80 fixes for users delaying the major upgrade, including 75 vulnerabilities shared with iOS 27. No vulnerabilities were reported as actively exploited at release time.

GBHackersSep 16, 05:36 UTC · 1d agoAdvisory

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

Microsoft's September 2026 Patch Tuesday delivers a record patch count, fixing two exploited zero-days and a wormable DNS flaw dubbed a SigRed successor.

Microsoft's September 2026 Patch Tuesday sets another record patch count, fixing two vulnerabilities exploited as zero-days: CVE-2026-81963, a Windows Update Stack low-privilege-to-SYSTEM escalation reported by MSTIC, and CVE-2026-85880, a Windows Advanced Local Procedure Call escalation reported by Proofpoint. Zero Day Initiative's Dustin Childs urges priority on a cluster of 20 potentially wormable bugs including DNS RCE CVE-2026-69730, described as a spiritual successor to SigRed, plus Kerberos authentication bypass CVE-2026-69676 that could give any authenticated domain user RCE on domain controllers, and Exchange RCE CVE-2026-55007 via a malicious Visio attachment. All Windows fixes are bundled in cumulative updates, and experts stress prioritizing exploitable, reachable flaws over raw patch counts.

Help Net SecuritySep 9, 09:04 UTC · 8d agoAdvisory in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-69730+4 CVEs

Search: “breaches”

7th September – Threat Intelligence Report

HITRUST and Frist Cressey Ventures form the Venture Capital Advisory Council and Venture Program

Forrester, one of the most influential research and advisory firms was hacked

CISA Red Team Fully Compromised Two Critical Infrastructure Orgs

CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise

Kaspersky Security Bulletin 2012. The overall statistics for 2012

Apple Releases iOS 27 Security Update to Fix Over 120 Vulnerabilities

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

Threat Advisory: Spring4Shell

Talha Tariq joins Torq CISO Advisory Board

Christopher Krebs joins SentinelOne Advisory Board as inaugural member

Threat Advisory: SolarWinds supply chain attack

$5 Trillion Threat Of Cyber Attacks Spurs Investments In Solutions, Talent And Tech

Kaspersky Security Bulletin 2014. A look into the APT crystal ball

Kaspersky Security Bulletin 2013. Overall Statistics for 2013