Significant Cyber Incidents
Major breaches, ransomware attacks, and nation-state operations affecting businesses worldwide. Sourced from Cyber Scoop, The Record, SecurityWeek, DataBreaches.net and more.
Cybersecurity incident at BAE Systems disrupts US bankruptcy court system
The outage has stopped official bankruptcy notices nationwide since Oct. 9, with no cause or restoration date announced. The post Cybersecurity incident at BAE Systems disrupts US bankruptcy court system appeared first o…
Proofpoint lines up $6.3 billion deal for Varonis’ data security
Cybersecurity giant Proofpoint says it will acquire Miami-based data visibility and security company Varonis in an all-cash transaction worth $6.3 billion.…
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack. The post In Other News: ICS-Sniper Attack, Hack…
Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia
Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed vast amounts of customer information.…
Baltimore suburb confirms August data breach after ransomware claims
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.…
KR: NHIS Employee Sold Data, Victims Uninformed for Three Months
In today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling personal information of health insurance subscribers to externa…
Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day
An alleged Chinese state-backed group is using a new zero-day affecting BeyondTrust IT support software to conduct espionage attacks.…
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments…
MDR vs EDR vs SOC: What You’re Actually Buying in 2026
MDR vs EDR vs SOC explained for 2026, covering tools, monitoring, incident response, staffing and how each option supports CMMC compliance.…
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. The post BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts app…
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek .…
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks appeared …
China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns
The suspected PRC-aligned group Armory Castle has been observed exploiting the newly disclosed flaw for long-term persistence…
Burger King Japan Data Breach Impacts 11.18 Million App Member Records
The Burger King Japan data breach occurred between October 2 and 7, exposing emails, birth dates and other……
F5, Juniper Networks Patch Critical Vulnerabilities
Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek .…
Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing
Several services of the US Bankruptcy Noticing Center are unavailable due to a cyber incident affecting defense contractor BAE Systems…
Microsoft Patches Two Dozen RCE Flaws in Office
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office. The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek .…
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company. The post Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis appeared first on Securit…
Proofpoint to buy Varonis for $6.3 billion
The deal pairs the email security giant's massive threat intelligence with Varonis' visibility into corporate data, as both companies race to secure the AI agents now roaming enterprise networks. The post Proofpoint to b…
Federal bankruptcy courts dealing with outages after contractor cyberattack
The incident, which involved a government contractor, has halted all production of bankruptcy notices.…
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad……
The next election influence campaign will target your AI chatbot
Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI chatbots to favor candidates across a broad range of issues. The post The next election influence c…
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. The post Context Is King in the Fight Against Modern Cyberattacks appeared first on Security…
Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand
This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies. The post Watch Now: Zero Trust Strategies Summit – All Sessions Availa…
Vibetech Database Exposes 13.7M Records Including Assortment of Old Breaches
Debra Ahmed reports: An unprotected database linked to India-based AI software development and IT services company Vibetech exposed 13.7 million records containing credentials and other sensitive information from previou…
Vibetech Database Exposes 13.7M Records Including AT&T and FBI Data
An misconfigured Vibetech database exposed 13.7 million records from previous breaches, including AT&T, Casio and FBI data, passwords and bank details.…
UK Legal Aid Agency Hack Scope Widens After Forensic Review
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek .…
France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack…
New Aoki Infostealer Targets AI Coding Assistant Credentials
Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini…
Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI……
Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families
Guru Baran reports: Ransomware gangs are moving beyond locked files and stolen data. Criminals now threaten employees, executives, and their families to force companies to pay. According to the Semperis 2026 Ransomware R…
Legal Aid Agency cyberattack: Compromised data goes back to 1978
Tevye Markson has an update on the April 2025 breach of the UK’s Legal Aid Agency, previously reported on this site: A new update on the Legal Aid Agency data breach has revealed that the data which was compromised…
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic…
Microsoft Seizes YAM Store and Phishing Kit Domains Linked to 1B Malicious Messages
Microsoft and Health-ISAC seize domains linked to YAM Store, CoGUI and Iron Man, services that enabled over 1……
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators. The post AdFection: How mercenary spyware invades victims’ devices through targeted advertising appeared first on Cy…
Microsoft Disrupts Global Yam Store Network Behind One Billion Phishing Messages
Microsoft and partners reveal a major Chinese-language phishing network centered around the Yam Store marketplace…
ICO Reprimands Met Over Third-Party Data Leak
The ICO has handed the Metropolitan Police a reprimand and enforcement notice after privacy failings linked to the Auror platform…
Authorities charge alleged OLVX cybercrime marketplace operator in North Macedonia
Officials disrupted the cybercrime marketplace in April and arrested the alleged 20-year-old operator at that time. Illicit sales reportedly exceeded $500,000 since 2023. The post Authorities charge alleged OLVX cybercri…
What Your IP Address Reveals Every Time You Visit a Website
Your IP address can reveal your location, ISP, connection type, and VPN use to websites, ad networks, and trackers before a page even loads.…
Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools
Disclosure: This article was produced in partnership with FastDL. Hackread.com reviewed and edited the content before publication. “SaveVid.Net……
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vulnerabilities affect Windows. The post Microsoft drops an actively exploited zero-day amon…
Senators press Trump admin to rally federal government around AI safety, security
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI. The post Senators press Trump admin to rally federal…
Japan on Cyberattack Alert as Ransomware Wave Hits Major Brands and Exposes Millions of Records
Audrey Liza M. Nolasco reports: Japan is confronting a mounting cybersecurity crisis, with a ransomware attack disrupting hundreds of organisations and a series of separate breaches putting millions of customer records a…
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
In less than 10 months, cybercriminals used the arsenal of customized, targeted phishing kits to send more than 1 billion malicious messages to more than 75,000 organizations globally. The post Microsoft and partners dis…
Shipping firms and ports caught in mass cyber extortion claim
Bojan Lepic reports: A cyber extortion group has threatened to publish data it claims it stole from 38 shipping, port, and logistics companies unless they pay multimillion-dollar ransoms by October 19. Cybersecurity firm…
Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day
The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold for an out-of-band release. The post Ivanti misses oppor…
DOJ charges 14 over a sprawling North Korean remote work scheme
Operation Lonestar Roundup uncovered an operation that used stolen identities to secretly funnel $3 million from 70 U.S. employers back to Pyongyang. The post DOJ charges 14 over a sprawling North Korean remote work sche…
Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach (Disputed)
Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming that more than 80 million patient records have been exfiltrat…
UK: Commercial market research and data-gathering firm in the medical space leaked health data
UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard contacted DataBreaches.net to report …
ShinyHunters: Six Years of Cybercrime — Expert Analysis and Ransomware Group Perspectives
Back in the day, when my co-author and I would conduct training workshops on neurobehavioral disorders in children and teens, we would always introduce our presentation with an overhead that said, “Two Professional…
Australian patient data compromised in Icon Cancer Centre hack
David Hollingsworth reports: The operator of a global suite of cancer care providers has confirmed that patient data has been affected by a data breach involving Australia’s largest cancer care provider, the Icon Cancer …