Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Balance Theory Secures $19 Million Series A to Rationalize Enterprise Cyber Spending
Balance Theory has raised $19 million in Series A funding led by SYN Ventures to expand its cybersecurity investment management platform.
Aug 1, 2026Ruby on Rails Patches Critical File Read and RCE Flaw in Active Storage
A critical vulnerability (CVE-2026-66066) in Ruby on Rails Active Storage allows unauthenticated arbitrary file reads and RCE. Patch and rotate secrets now.
Aug 1, 2026Adobe Patches Maximum-Severity CVSS 10.0 Zero-Click Flaw in Campaign Classic
Adobe has patched a maximum-severity CVSS 10.0 zero-click code execution vulnerability in Campaign Classic alongside fixes for SQL injection and Adobe Bridge.
Aug 1, 2026Adform Supply-Chain Attack Poisons Script to Swap Crypto Wallet Addresses
Attackers compromised Adform's trackpoint-async.js script, inserting client-side clipper code to rewrite cryptocurrency wallet addresses on visiting browser…
Aug 1, 2026Arch Linux Disables AUR Package Adoption Following Supply-Chain Malware Attacks
Arch Linux has suspended package adoption in the AUR after attackers hijacked unmaintained packages to distribute a Rust-based infostealer and SSH worm.
Jul 31, 2026Amgen Discloses Cloud Data Breach Exposing Patient Health Data
Biotech giant Amgen filed an SEC Form 8-K following a cloud breach that exposed patient protected health information and proprietary data.
Jul 31, 2026OpenAI Cuts GPT-5.6 API Costs and Introduces Sol Fast Mode
OpenAI drops GPT-5.6 Luna and Terra API prices while launching Sol Fast mode, lowering costs for automated code reviews and agentic workflows.
Jul 31, 2026Adform Adtech Script Compromised in Supply-Chain Crypto-Stealing Attack
Adform suffered a supply-chain attack after hackers modified its trackpoint-async.js tracking script to hijack cryptocurrency clipboard data and wallet…
Jul 31, 2026Chinese-Speaking Hackers Target Central Asian Governments with OctLurk and SilkLurk
Kaspersky reports a Chinese-speaking threat actor targeting Central Asian governments with new memory-only backdoors OctLurk, SilkLurk, and LurkProxy.
Jul 31, 2026OpenAI Cuts GPT-5.6 Luna and Terra API Costs, Launches Sol Fast Mode
OpenAI lowers GPT-5.6 Luna and Terra API pricing by up to 80% and introduces GPT-5.6 Sol Fast mode, cutting automated code review and research costs.
Jul 31, 2026Threat Actor Uses DeepSeek AI and Hermes Agent for Autonomous Server Attacks
A China-based attacker utilized DeepSeek AI and Hermes Agent in YOLO mode to autonomously scan, evaluate, and attempt attacks on exposed servers.
Jul 31, 2026CISA Warns of Surge in Water Utility Cyberattacks as Minnesota Incidents Probed
CISA, the FBI, and the EPA warn of a spike in cyberattacks targeting internet-exposed PLCs at water utilities in Minnesota and six other states.
Jul 31, 2026No news matches your search.