ScarCruft surveilling North Korean defectors and human rights activistsKaspersky Securelist·Nov 29, 10:00 UTC · Nov 29, 2021Data breach57
CL-STA-1087 targets military capabilities since 2020Security Affairs·Mar 17, 12:03 UTC · Mar 17, 2026Data breach60
Critical Commvault Command Center Flaw Enables Attackers to Execute Code RemotelyThe Hacker News·Apr 24, 10:00 UTC · Apr 24, 2025Data breach in the wildCVE-2025-3402860
Sofacy APT hits high profile targets with updated toolsetKaspersky Securelist·Dec 4, 10:59 UTC · Dec 4, 2015Data breachCVE-2015-259060
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM ServersThe Hacker News·Jul 23, 11:28 UTC · Jul 23, 2026Data breachCVE-2026-41940160
UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applicationsCisco Talos·Apr 2, 10:00 UTC · Apr 2, 2026Data breachCVE-2025-55182160
npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord ChannelsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Data breach157
Lionsgate streaming platform with 37m subscribers leaks user dataSecurity Affairs·Mar 22, 22:42 UTC · Mar 22, 2023Data breach57
Google removed 49 Chrome Extensions that were hijacking cryptocurrency walletsSecurity Affairs·Apr 15, 14:10 UTC · Apr 15, 2020Data breach45
ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More StoriesThe Hacker News·Dec 25, 13:23 UTC · Dec 25, 2025Data breach45
Notepad++ Hosting Breach Attributed to ChinaThe Hacker News·Feb 8, 07:21 UTC · Feb 8, 2026Data breach57
UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in LongThe Hacker News·Jun 22, 05:45 UTC · Jun 22, 2024Data breachCVE-2022-41328CVE-2022-22948CVE-2023-20867+1 CVEs60
Detailed: Here's How Iran Spies on Dissidents with the Help of HackersThe Hacker News·Dec 21, 04:11 UTC · Dec 21, 2025Data breach57
WebRTC Skimmer Bypasses CSP to Steal Payment Data from EThe Hacker News·Mar 26, 15:39 UTC · Mar 26, 2026Data breach in the wild60
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & VibeThe Hacker News·Mar 9, 18:22 UTC · Mar 9, 2026Data breach in the wildCVE-2026-21385CVE-2026-2796CVE-2026-2256+13 CVEs60
OilRig Targets Technology Service Provider and Government Agency with QUADAGENTPalo Alto Unit 42·Sep 5, 07:07 UTC · Sep 5, 2018Data breach57
VPNFilter Update - VPNFilter exploits endpoints, targets new devicesCisco Talos·Jun 6, 13:02 UTC · Jun 6, 2018Data breach45
Pakistan-Origin SideCopy Linked to New Cyberattack on India's Ministry of DefenceThe Hacker News·Mar 29, 05:14 UTC · Mar 29, 2023Data breach57
More than 737M medical radiological images found on open PACS serversSecurity Affairs·Sep 19, 11:11 UTC · Sep 19, 2019Data breach60
Watering Hole Attack on Aerospace Firm Exploits CVE-2015Palo Alto Unit 42·Nov 1, 09:48 UTC · Nov 1, 2018Data breachCVE-2015-512260
Madi is back – New Tricks and a New Command&Control ServerKaspersky Securelist·Jul 25, 15:00 UTC · Jul 25, 2012Data breach45
British Airways, BBC and Boots impacted the by Zellis data breachSecurity Affairs·Jun 7, 18:12 UTC · Jun 7, 2023Data breach60
CosmicSting attack & defense overviewSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Data breach in the wildCVE-2024-2961CVE-2024-3410260
Sony sent data breach notifications to about 6,800 individualsSecurity Affairs·Oct 5, 06:24 UTC · Oct 5, 2023Data breachCVE-2023-3436260
Researchers uncover WebRTC skimmer bypassing traditional defensesSecurity Affairs·Mar 26, 11:31 UTC · Mar 26, 2026Data breach45
Researchers Detail Bitter APT’s Evolving Tactics as Its Geographic Scope ExpandsThe Hacker News·Jun 5, 14:49 UTC · Jun 5, 2025Data breach57
Micro optimising web content for unexpected, wild successTroy Hunt·Dec 12, 00:00 UTC · Dec 12, 2013Data breach45
China-linked group Salt Typhoon breached satellite firm ViasatSecurity Affairs·Jun 23, 20:52 UTC · Jun 23, 2025Data breach in the wildCVE-2023-20198CVE-2023-20273160
China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flawsSecurity Affairs·Feb 14, 19:23 UTC · Feb 14, 2025Data breach in the wildCVE-2023-20198CVE-2023-2027360
Compromise assessment in cybersecurity: realKaspersky Securelist·Oct 29, 14:00 UTC · Oct 29, 2024Data breach60
National Student Clearinghouse data breach impacted approximately 900 US schoolsSecurity Affairs·Sep 24, 09:19 UTC · Sep 24, 2023Data breachCVE-2023-3436260
Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government TargetsSecurity Affairs·May 23, 09:39 UTC · May 23, 2026Data breach57
IronWorm and New Miasma Worm Variant Hit npm in Supply Chain AttacksThe Hacker News·Jun 6, 06:23 UTC · Jun 6, 2026Data breach57
Threat actors breached US govt systems by exploiting Adobe ColdFusion flawSecurity Affairs·Dec 6, 00:56 UTC · Dec 6, 2023Data breach in the wildCVE-2023-2636060
DeepSeek Exposed Database Leaks Sensitive DataInfosecurity Magazine·Jan 30, 12:45 UTC · Jan 30, 2025Data breach45