Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Leaked DarkSword Exploit Kit Used by Chinese Group to Deploy GHOSTBLADE Spyware
Threat actors are leveraging the leaked DarkSword exploit kit to target iOS 18.4 through 18.7 devices with GHOSTBLADE spyware via credential phishing decoys.
Aug 3, 2026Brinks Home Data Breach: ShinyHunters Leaks 4.9M Salesforce Records
ShinyHunters has leaked 41GB of data stolen from Brinks Home's Salesforce instance after the physical security provider declined to pay a ransom.
Aug 3, 2026Hugging Face Diffusers Flaws Bypass Remote Code Safeguards
Three high-severity vulnerabilities in Hugging Face Diffusers allow malicious model repositories to execute arbitrary code despite safety checks.
Aug 3, 2026N-able N-central Auth Bypass Exploited in Wild After Incomplete Patch
Attackers are exploiting CVE-2026-18577 in N-able N-central servers to hijack managed endpoints and install persistent Cloudflare tunnels.
Aug 3, 2026OpenAI Teases Astra AI Model Built for Complex Workloads and Cryptography
OpenAI revealed Astra, a new AI model designed for long-running agentic tasks that solved 10 long-standing math and cryptographic challenges.
Aug 3, 2026COLDCARD Hardware Wallet RNG Flaw Exploited to Steal $88 Million in Bitcoin
A firmware integration error in COLDCARD wallets caused fallback to a weak RNG, allowing attackers to precompute keys and drain $88.6 million in Bitcoin.
Aug 2, 2026OpenAI Previews Astra AI Model After Breakthroughs in Math and Lattice Cryptography
OpenAI has teased Astra, a multi-agent AI model family built for long-running reasoning, demonstrating major advances in math and lattice cryptography.
Aug 2, 2026Google Chrome Moving to Block Local Policy Extension Hijackers
Google is testing a Chrome update that blocks local policy force-installs from hijacking default search engines and new tab pages on unmanaged devices.
Aug 2, 2026Google Chrome Moving to Block Policy-Installed Extension Hijackers
Google is enabling a feature in Chrome to block forced policy extension installs that hijack search engines and New Tab pages on unmanaged devices.
Aug 2, 2026Coldcard Hardware Wallet Seed Flaw Exploited in $70M Bitcoin Theft
A firmware integration error in Coinkite Coldcard hardware wallets allowed attackers to brute-force weak seeds and drain $70.2 million in Bitcoin.
Aug 1, 2026Critical Rails Active Storage Vulnerability CVE-2026-66066 Allows Server RCE
A critical Rails Active Storage vulnerability (CVE-2026-66066) allows remote file reads and code execution. Patches and workarounds are now available.
Aug 1, 2026Ruby on Rails Patches Critical RCE Flaw CVE-2026-66066 in Active Storage
Ruby on Rails patched a critical 9.5 CVSS flaw in Active Storage (CVE-2026-66066) that allows file reads and unauthenticated remote code execution.
Aug 1, 2026No news matches your search.