Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
CISA Adds 7 Exploited Flaws to KEV Catalog as Attackers Target AI Infra
CISA added seven actively exploited vulnerabilities to its KEV catalog, highlighting attacks on SonicWall SMA 1000 appliances and AI infrastructure.
Sep 3, 2026FalconFlank Zero-Day Abuses CrowdStrike Falcon Macro Cleanup for Privilege Escalation
Security researcher Chaotic Eclipse releases FalconFlank, a CrowdStrike Falcon zero-day abusing macro remediation for local privilege escalation.
Sep 3, 2026Aesto Discloses AWS Cloud Breach Exposing 9.5 Million Patient Records
Healthcare data archivist Aesto notified federal regulators that a December AWS infrastructure breach exposed sensitive medical data of 9.5M people.
Sep 3, 2026Russian National Extradited Over TVRAT Malware Campaign Targeting Freelancers
Searzhudin Aktulaev faces 20 years in U.S. federal prison for infecting 80,000 freelancers via malicious Excel attachments and TVRAT malware.
Sep 3, 2026Extradited Russian Hacker Charged Over Mass Excel Macro Campaign
U.S. DOJ charges extradited Russian national Searzhudin Aktulaev for targeting 80,000 freelance platform users with TVRAT and DarkVNC malware.
Sep 2, 2026Philippines Nuclear Agency Breached via Unpatched ownCloud Vulnerabilities
Threat actors exploited unpatched ownCloud flaws to breach the Philippines nuclear agency, stealing reactor databases and credential stores.
Sep 2, 2026Securing Cloud Assets in the Age of AI: Dark Reading Event Overview
Dark Reading announces a virtual event addressing key cloud asset security challenges, shadow AI, and identity risks in enterprise environments.
Sep 2, 2026Aesto Health Data Breach Exposes 9.5 Million Patient Records
Aesto Health disclosed a major AWS cloud breach impacting over 9.5 million patients across 29 healthcare providers.
Sep 2, 2026PaperCut Zero-Days Exploited in Active Data Theft Attacks
Attackers are abusing PaperCut vulnerabilities CVE-2026-81578 and CVE-2026-82078 to bypass authentication and dump embedded databases.
Sep 1, 2026Nutex Health Discloses Sensitive Data Breach Following Ransomware Group Extortion
Healthcare provider Nutex Health has confirmed patient, employee, and financial records were stolen following an attack claimed by The Gentlemen ransomware…
Sep 1, 2026FulcrumSec Extortion Group Claims 86 GB Manchester Airports Group Data Breach
Extortion group FulcrumSec claims theft of 86 GB of customer data from Manchester Airports Group, affecting an estimated 8.7 million passengers.
Sep 1, 2026Berlin City Administration Hit by 5.8 TB Rhysida Ransomware Extortion
Berlin confirms a massive data breach after Rhysida ransomware operators exfiltrated 5.79 TB of sensitive administrative and infrastructure data.
Sep 1, 2026No news matches your search.