Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Google Discloses Gemini Personal Data Shared with AI Search May Feed Targeted Ads
Google updated its privacy policy to reveal that Gmail, Photos, and Drive data accessed by Gemini or AI Search can be processed for targeted ads.
Oct 24, 2026Brotli Decoder Flaw Enables RCE Across Node.js, Bun, Python, and Envoy
A critical memory corruption flaw in Google's Brotli decoder, CVE-2026-111497, exposes Node.js, Bun, Python environments, and Envoy to execution risks.
Oct 24, 2026Eye Security Disables Abandoned Popcorn Time Updater on 2 Million Machines
Security firm Eye Security hijacked domain infrastructure to push neutralizer updates to millions of vulnerable Popcorn Time installations.
Oct 24, 2026Quest Diagnostics Discloses Data Breach Exposing Quanum LSM Patient Records
Quest Diagnostics has taken its Quanum LSM portal offline after detecting unauthorized access that exposed patient records.
Oct 24, 2026Google Cloud Adds OpenAI Models to Marketplace with Enterprise Privacy Guarantees
Google Cloud launches a private preview hosting OpenAI GPT-6 models, guaranteeing enterprise prompts and outputs will not train underlying foundation models.
Oct 23, 2026State Bank of India Customer PII Leak Exposes Users to Targeted Fraud
A customer PII leak at the State Bank of India highlights growing cyber risks driven by active underground data trading networks.
Oct 23, 2026Arista Patches Actively Exploited VeloCloud Orchestrator Zero-Day (CVE-2026-114625)
Arista Networks has issued security updates for an actively exploited SQL injection zero-day in VeloCloud Orchestrator tracked as CVE-2026-114625.
Oct 23, 2026Capcom Confirms CAPCOM ID Data Breach Exposing 11.7 Million Accounts
Capcom has confirmed a security breach impacting its CAPCOM ID service, exposing email addresses, IP addresses, and login metadata for 11.7 million users.
Oct 23, 2026Storm-0940 Weaponizes ARTEX AI Framework in ConnectWise Cloud Backup Supply Chain Attack
China-linked Storm-0940 abused ConnectWise Cloud Backup app identities and deployed the ARTEX agentic AI framework to breach global cloud environments.
Oct 22, 2026PHP2Shell Flaws Impact Palo Alto PAN-OS as Cisco and Fortinet Assess Exposure
Palo Alto Networks confirms all PAN-OS versions are vulnerable to PHP2Shell, while Cisco and Fortinet audit dozens of enterprise security products.
Oct 22, 2026PHP Patches Critical PHP2Shell Flaws Allowing Unauthenticated RCE
Emergency security updates address two critical PHP2Shell RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) currently targeted in the wild.
Oct 22, 2026Emergency PHP Updates Fix Critical PHP2Shell Flaws Under Active Exploitation
PHP emergency updates address two critical RCE flaws, dubbed PHP2Shell (CVE-2026-109618 and CVE-2026-109619), affecting web servers globally.
Oct 22, 2026No news matches your search.