Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Sentra Raises $150M Series C to Expand Agentic Data Security Capabilities
Sentra secures $150 million in Series C funding led by Capital One Ventures to scale its AI-driven data security and governance platform.
Nov 4, 2026Google Patches Zero-Click RCE Flaw CVE-2026-58868 in Android November Security Update
Google's November security update fixes 23 Critical flaws, including a zero-click RCE in FrameDecoder.cpp (CVE-2026-58868) and an SMS DoS bug.
Nov 4, 2026Attackers Exploit Unauthenticated Node-RED Admin API to Drop Malware
Active exploitation of Node-RED vulnerability CVE-2026-58115 allows attackers to deploy Linux bots and web shells across unauthenticated IT and OT gateways.
Nov 4, 2026Google Warns LLMjacking Attacks Rack Up $1 Million Cloud AI Bills
Threat actors steal API keys and cloud credentials to power illicit LLM mixers and relay services, costing victims up to $1 million in AI charges.
Nov 4, 2026UK Cyber Chief Warns AI Threats to Critical Infrastructure Will Ramp Up by 2028
The UK NCSC warns that state actors and criminals will use AI to scale cyberattacks against critical infrastructure and enterprise supply chains by 2028.
Nov 3, 2026Harvard Data Breach Exposes 851,000 Alumni and Donor Records
ShinyHunters leaks 1.1GB of stolen Harvard University alumni and donor data after the institution refused to pay an extortion demand.
Nov 3, 2026Critical Node-RED Flaw CVE-2026-58115 Exploited to Infect OT Devices
Attackers are actively exploiting a CVSS 10.0 unauthenticated RCE flaw (CVE-2026-58115) in Node-RED OT deployments to drop Linux botnet implants.
Nov 3, 2026BYOD Ransomware Gang Claims 1.3 Million Records Stolen from Michigan State University
Michigan State University forced campus-wide password resets following a credential compromise incident now claimed by the BYOD ransomware group.
Nov 3, 2026Ivanti Connect Secure Zero-Days Chained for Root Access in Active Attacks
Threat actors are actively chaining three Ivanti Connect Secure vulnerabilities, including CVE-2026-111357, to gain root access and steal credentials.
Nov 2, 2026Ivanti Patches Remaining Connect Secure Zero-Days Exploited in Active Attacks
Ivanti released patches for CVE-2026-111357 and CVE-2026-118527 after attackers chained them with an authentication bypass in Connect Secure appliances.
Nov 2, 2026Alpine Linux Rebuilds Infrastructure After Exploitation of GitLab RCE Flaw
Alpine Linux rebuilt its GitLab server and forced password resets following exploitation attempts targeting CVE-2026-97229 in its custom image.
Nov 2, 2026FBI Links $6.3 Billion Binance Crypto Heist to North Korea's TraderTraitor
The FBI confirmed North Korea's TraderTraitor (Lazarus Group) executed the $6.3 billion Binance hack via a compromised DevOps engineer's laptop.
Nov 2, 2026No news matches your search.