Have I Been Pwned added about 851,000 email addresses from Harvard's 2025 alumni and donor system breach, which was later tied to ShinyHunters extortion.
The BYOD ransomware gang claims data on more than 1 million Michigan State students. MSU calls it a potential credential compromise with no evidence other...
Google and partners dismantled the XCPE botnet, a backdoor in 1.3 million Android TV boxes that Google says the maker Videostrong built and sold to...
Attackers stole Bitcoin and Litecoin from hot wallets on outdated self-hosted BTCPay Server instances, exploiting an August flaw in a new way. Operators must rebuild.
Hackers remotely tampered with refrigeration controllers at more than 100 supermarkets across Belgium, Sweden, Ireland, the Netherlands, Luxembourg and Estonia, forcing stores to discard food.
Synology confirmed attackers are exploiting a DSM flaw patched in 2024 to encrypt outdated NAS devices and demand ransom. Here is what to update now.
Northflank told customers to assume all environment variables were decrypted, as Wiz links 9 AI developer platform breaches in October to stolen AI API keys.
Japanese tour operator Club Tourism says attackers accessed its servers and may have taken names, addresses, birth dates and emergency contacts tied to 4.32 million...
Online fashion retailer Revolve says an attacker used automated means to steal saved payment card numbers and expiration dates, with state filings listing 1.5 million...
Chainalysis says an attacker using offensive agentic techniques breached its systems and internal tools, accessing customer user IDs, names, emails and role labels.
Florida's Department of Education says criminals breached its student financial aid website, potentially exposing Social Security numbers and other data on 4.9 million people.
A tampered copy of Anthropic's Claude Code extension sat in Cursor's marketplace for about 11 hours, planting an attacker's SSH key on up to 5,000...
A compromised DebugBear monitoring script hijacked logged-in Polymarket sessions on October 29, draining an estimated $2.7 million before the company halted trading and pledged full...
Tools and intelligence from BreachNews.
