Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
ChainDrop npm Worm Weaponizes Dev Tools and Tarballs in Massive Supply Chain Attack
A new Shai-Hulud variant named ChainDrop infected 444 npm packages, exploiting IDE execution hooks and direct tarball modification to evade repository scanning.
Aug 15, 2026Anthropic Outlines Plan for Invisible Claude AI Text Watermarking
Anthropic is rolling out invisible text watermarking across Claude LLM outputs globally to comply with EU AI Act content transparency requirements.
Aug 15, 2026Clop Targets Shell, GE, and Philips in Mass PTC Windchill Exploitation
Clop ransomware exploits CVE-2026-12569 in PTC Windchill and FlexPLM, targeting Shell, GE, and Philips to steal sensitive engineering data via webshells.
Aug 15, 2026ShinyHunters Leaks Personal Data of 1.6 Million RingCentral Accounts
RingCentral suffered a data breach exposing 1.6 million account records after ShinyHunters leaked stolen user details following a failed ransom demand.
Aug 15, 2026Key Takeaways From Black Hat 2026: AI Supply Chains, NatJack, and Telemetry
Black Hat USA 2026 highlighted emerging risks in AI skills marketplaces, the NatJack NAT connection tracking attack, and modern supply chain telemetry.
Aug 14, 2026Weekly Infosec Roundup: New AI Security Gateways and Threat Exposure Tools
Overview of new security tools from A10 Networks, Searchlight Cyber, ScienceLogic, and DataGrout focusing on AI governance and threat exposure.
Aug 14, 2026Trezor Data Breach Exposes Customer Details via ShipMonk Hack
A zero-day SQL injection in Metabase compromised logistics provider ShipMonk, exposing PII for nearly 14,000 Trezor crypto hardware wallet buyers.
Aug 14, 2026Microsoft Patches LegacyHive Windows Zero-Day Vulnerability CVE-2026-62832
Microsoft has patched CVE-2026-62832, a Windows User Profile Service zero-day known as LegacyHive that allowed local privilege escalation.
Aug 14, 2026Disgruntled Researcher Drops 'ShieldBreak' Windows Defender Zero-Day
A new proof-of-concept exploit dubbed ShieldBreak weaponizes Microsoft Defender cloud hydration and WER to grant local attackers SYSTEM privileges.
Aug 13, 2026Belgium eID Browser Extension Vulnerability Exposes Citizen Accounts to RCE
Critical RCE vulnerabilities in Belgium's eID browser extension compromise the national authentication trust framework.
Aug 13, 2026Cisco Fixes Actively Exploited ASA and FTD Firewall DoS Flaw (CVE-2026-20349)
Cisco has issued hotfixes for an actively exploited high-severity DoS vulnerability (CVE-2026-20349) affecting Cisco ASA and FTD SSL VPN services.
Aug 13, 2026Lazarus Exploits Windows AFD.sys Zero-Day CVE-2026-68820 in Defense Cyberattacks
North Korea's Lazarus Group leveraged a Windows zero-day (CVE-2026-68820) and the FudModule rootkit to breach defense and aerospace targets.
Aug 13, 2026No news matches your search.