Latest news
-
Threat Intel via SANS Internet Storm Center
ISC Stormcast For Friday, October 23rd, 2026 https://isc.sans.edu/podcastdetail/10148, (Fri, Oct 23rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
-
Breaches via ransomware.live
🏴☠️ Rhysida has just published a new victim : Line2Line Coatings
Line2Line Coatings 796,433 files - 641.0 GB~20 years of email: 34 mailboxes (PST/OST), 107,279 messages, 13,068 contacts - including the president's own mailbox (4.0…
-
Ransomware via ransomware.live
🏴☠️ Pear has just published a new victim : Fresh Farms
Offers a wide range of top-quality products that meet the needs of customers in the foodservice, retail, and industrial sectors, including export markets
-
AI Security via ransomware.live
🏴☠️ Fulcrumsec has just published a new victim : EMARKETER
[AI generated] EMARKETER is a market research and business intelligence company based in the United States, specializing in digital marketing, media, and commerce data…
-
Ransomware via Europol
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for labour…
-
Breaches via HIPAA Journal
Data Breach at Manhattan Law Firm Involved PHI of 197,000 Individuals
The law firm Tarter Krinsky & Drogin has reported a breach of the protected health information of 196,645 patients of its healthcare clients. Data breaches have also…
-
Breaches via Infosecurity Magazine
Attacks on Tech Firms Behind Most Third-Party Data Breach Victims
Kroll found that 69% of data breach victims in the past year were affected by a third-party breach, with attacks on tech companies the most common cause
-
Vulnerabilities via SecurityWeek
Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months
The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.
- Advertisement
-
Breaches via Malwarebytes Labs
Crime Stoppers chapter freezes tips after breach breaks anonymity promise
A breach exposed personal information in supposedly anonymous crime reports. Now one Crime Stoppers chapter has stopped accepting tips because it cannot guarantee…
-
Vulnerabilities via NCSC-NL
NCSC-2026-0453 [1.00] [M/H] Kwetsbaarheid in Google Brotli-decoder
Google heeft een kwetsbaarheid verholpen in de Brotli-decompressiebibliotheek. Deze bibliotheek wordt onder meer gebruikt in Node.js. Een ongeauthenticeerde…
-
Vulnerabilities via The Hacker News
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Horn of Africa Regional Environment Centre and Network
Environmental NGO · Ethiopia | The complete SAP Business One production database of the organization: 15,275 journal transactions with 89,929 journal lines, 1,007…
-
Breaches via Help Net Security
Capcom data breach exposes 11.7 million account records
Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third…
-
AI Security via The Hacker News
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12…
-
Breaches via SecurityWeek
11 Million Impacted by Capcom Data Breach
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
-
Breaches via SecurityWeek
Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.
-
AI Security via Help Net Security
Hackers hijack exposed AI models to launch cyberattacks at victims’ expense
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the…
-
Vulnerabilities via SOCRadar
CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access
Arista has disclosed CVE-2026-114625, a critical SQL injection vulnerability in on-premises VeloCloud Orchestrator deployments. The flaw is being exploited in the wild…
-
Vulnerabilities via Chrome Releases
Chrome Stable for iOS Update
Hi everyone! We've just released Chrome Stable 156 (156.0.8078.54) for iOS; it'll become available on App Store in the next few hours. This release includes stability…
-
Threat Intel via SecurityWeek
LiteLLM Compromised in Fresh Supply Chain Attack
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.