A tampered copy of Anthropic's Claude Code extension sat in Cursor's marketplace for about 11 hours, planting an attacker's SSH key on up to 5,000...
A compromised DebugBear monitoring script hijacked logged-in Polymarket sessions on October 29, draining an estimated $2.7 million before the company halted trading and pledged full...
Alpine Linux rebuilt its GitLab server and reset every password after repeated attempts to exploit CVE-2026-97229, a CVSS 10 Ruby regex flaw CISA now lists...
An unauthorized party used an Amadeus account credential to access airline booking data for more than 3 years, exposing records at JAL, ANA, Cathay Pacific...
Binance confirmed an attacker drained about $6.3 billion from its hot wallets via a compromised engineer laptop, and analysts attribute the theft to North Korea's...
Frontline Education confirmed attackers exploited a third-party flaw in August to access SSNs, government IDs, Medicaid IDs and student IDs tied to K-12 school districts.
Femern Link Contractors, which is building the Fehmarnbelt tunnel, confirmed data theft after an October 11 cyberattack. A group called Barracuda allegedly claims 2.44 TB...
The City of Columbia, South Carolina, confirmed a ransomware attack that took online services offline and involved sensitive data. The Qilin group has allegedly claimed...
The FBI seized the domain of Virtualine, a bulletproof hosting service tied to ransomware and infostealers, as Dutch police took dozens of its servers offline.
A threat actor leaked names, contact details and system access records for more than 41,000 DHS employees and contractors, allegedly taken from an Okta single...
Cisco says attackers are exploiting CVE-2026-76418, an unauthenticated flaw that crashes ASA and FTD firewalls running remote access SSL VPN with secondary authentication.
Attackers pulled data tied to about 750,000 Moldovan ID numbers from government services, forcing dozens offline as officials probe possible foreign state involvement.
Sony Network Communications says an attacker accessed its So-net member database, exposing 2,585,481 customer records plus 54,401 email passwords and 16 bank accounts.
Tools and intelligence from BreachNews.
