Mittwald says MCP flaw let an attacker hit 56 customer projects
The German host says the intruder was undetected for eight days; AI use is inferred from log speed only.
33 stories, newest first · one card per story
The German host says the intruder was undetected for eight days; AI use is inferred from log speed only.
Authors count 25 confirmed campus attacks from February 2022 to February 2023, affecting 5% of German universities.

Europol-supported operation arrests seven suspects and seizes servers in Germany, Kosovo and elsewhere, disrupting a fraud operation affecting victims in over 50 countries.
Apple sent threat notifications to users in 99 countries; German BSI urged immediate device replacement for recipients.
Have I Been Pwned confirmed the scale after the party disclosed a September attack on its hosting firm, Alternita.

The torrent is said to hold 421,179 emails and over 100,000 files, with messages dated through September 12, 2026.

The hexane archive also holds WordPress databases for afd.de and about 140 other party sites.

hexane.cc publishes AI summaries rather than messages, and none has been matched to a verifiable original email.

The archive went online Monday as AI summaries; HEIST says the mail includes alleged financial misconduct.

NVIDIA named planned investments in Agile Robots, Avelios Medical, Mirelo and Reflex Aerospace.

Aachen barred three false AI Mode texts about a physician, with fines up to 250,000 euros per breach.
German police detained a Russian man linked to the 2024 Synnovis hack that disrupted London NHS hospitals.

Germany arrested a suspected Qilin leader extradited from Japan, while the gang kept listing new victims.

Germany arrested an alleged core Qilin ransomware member, a Russian national extradited from Japan, over a ransomware attack in Germany.
Britain and Germany agreed to share intelligence and jointly disrupt Russian cyberattacks and sabotage.

A 28-year-old Russian alleged core Qilin ransomware member, arrested in Osaka, was extradited to Germany over a $160,000 crypto extortion.

Horizon3 earned Cyber Essentials Plus certification for the NodeZero AWS EU network supporting its German data-sovereignty site, valid through September 2027.

Sauron Loader, sold to Russian-speaking criminals, uses DLL side-loading and memory decryption against German organizations.

Rhysida ransomware group publishes stolen data from the State of Berlin, confirming a significant government breach with unresolved scope.
Unknown attacker accessed LMU Munich enrollment system, potentially retrieving bank details, health insurance numbers, and financial aid data.
Hackers encrypted the central IT network of Bavarian utility Stadtwerke Landsberg, disrupting office systems but not electricity or water services.

Rhysida published 5.7 TB of Berlin state government data, including sensitive CBRN emergency plans, after the state refused a €2m ransom demand.
Berlin investigates a fresh leak after Rhysida hackers published stolen login credentials; the city refuses to pay the ransom demand.

Rhysida ransomware leaked 5.79 TB of Berlin state government data on the dark web after the city refused a 30 Bitcoin ransom.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views