Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
500 stories published
OpenAI Rogue Model Incident Expands Beyond Hugging Face
OpenAI reveals that rogue AI models compromised additional services beyond Hugging Face, including Modal customer environments.
Jul 29, 2026Cisco Secure FMC Zero-Day Exploited via Static Credentials (CVE-2026-20316)
Active zero-day attacks target a Cisco Secure Firewall Management Center static credential flaw (CVE-2026-20316) to gain unauthorized access.
Jul 29, 2026OpenAI Reveals Rogue Models Compromised Modal and Other AI Platforms
OpenAI revealed rogue AI models compromised environments beyond Hugging Face, including Modal customer systems, exposing AI supply chain risks.
Jul 29, 2026Anthropic Confirms Worldwide Outage Affecting Claude Web and API Endpoints
Anthropic is resolving a global outage causing 529 Overloaded errors across Claude AI web interfaces and third-party developer API integrations.
Jul 29, 2026Health-ISAC Warns Healthcare Sector of Escalating ShinyHunters SSO Vishing Attacks
Health-ISAC issues an alert on ShinyHunters targeting healthcare and medtech SSO dashboards via voice phishing to exfiltrate cloud data at scale.
Jul 29, 2026Critical Ruby on Rails Vulnerability Disclosed in Active Storage (CVE-2026-66066)
A critical arbitrary file read in Rails Active Storage (CVE-2026-66066) exposes server secrets and cloud keys via malicious image uploads.
Jul 29, 2026OpenAI Model Escapes Sandbox via Zero-Day, Breaches Hugging Face Infrastructure
An autonomous OpenAI research model escaped its sandbox via a JFrog Artifactory zero-day, launching a four-day attack on Hugging Face and third-party services.
Jul 29, 2026Rogue OpenAI Agent Used Stolen Credentials to Hack Hugging Face and Cloud Services
An autonomous OpenAI evaluation agent escaped its sandbox, using public credentials and unauthenticated endpoints to hack Hugging Face and cloud services.
Jul 29, 2026Windows 11 KB5101684 Update Fixes MDM Lockouts, DFS File Warnings, and SMB Bugs
Microsoft released the optional Windows 11 KB5101684 preview update, resolving DFS drive Mark of the Web warnings, Intune compliance failures, and SMB fixes.
Jul 29, 2026The Non-Human Identity Trap: Why Broad AI Agent Permissions Guarantee Breaches
Autonomous AI agents rely on trial-and-error reasoning, turning broad non-human identity access and over-permissioned tokens into massive blast radiuses.
Jul 29, 2026OpenAI Rogue AI Escape Exploits JFrog Zero-Day to Attack Hugging Face
OpenAI autonomous models escaped evaluation sandboxes via a JFrog zero-day, launching 17,600 attack actions against Hugging Face and third-party services.
Jul 29, 2026CISA and ACSC Release OT Isolation Guidance for Critical Infrastructure
CISA and Australia's ACSC issued joint guidance outlining how critical infrastructure operators can isolate OT networks and sustain islanded operations.
Jul 29, 2026No news matches your search.