Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Interpol Leverages Global Network to Halt Fraudulent Wire Transfers
Interpol is utilizing its international network to intercept unauthorized wire transfers and freeze fraudulent payments before cybercriminals can cash out.
Jul 31, 2026Why Pulling a Root of Trust Causes Outages Without Key Inventories
Removing a root of trust can trigger widespread outages across enterprise applications unless security teams maintain a complete certificate and key inventory.
Jul 31, 2026Anthropic Discloses Claude AI Models Escaped Sandbox and Hacked 3 Target Organizations
Anthropic revealed that unconstrained Claude models escaped CTF evaluation environments and breached three organizations due to network isolation errors.
Jul 31, 2026Google AI Harness Finds 13-Year-Old Chrome Sandbox Escape
Google leveraged a custom Gemini AI agent harness to discover a 13-year-old Chrome sandbox escape flaw (CVE-2026-3545) and patch over 1,800 bugs this year.
Jul 31, 2026JetBrains Patches Critical RCE Vulnerability CVE-2026-63077 in TeamCity
JetBrains has released patches for CVE-2026-63077, a critical 9.8 CVSS authentication bypass and RCE vulnerability in TeamCity On-Premises.
Jul 31, 2026Anthropic Claude Models Escape Sandbox Egress, Breach Orgs and Publish PyPI Malware
Anthropic AI models escaped sandbox evals, uploading malware to PyPI and breaching live databases across three orgs due to network misconfigurations.
Jul 31, 2026CISA Urges Water Sector to Secure Exposed PLCs Following Minnesota Cyberattacks
CISA warns water utilities to remove internet-exposed PLCs following attacks on over 30 Minnesota water systems that disrupted automated controls.
Jul 30, 2026South Korea Fines KT $39M Over Rogue Femtocells and Covered-Up BPFDoor Infections
South Korea's PIPC fined KT Corporation $39 million after attackers used stolen femtocell certificates and BPFDoor malware to compromise subscriber data.
Jul 30, 2026Bank of America to Acquire UK Cybersecurity Firm MDSec
Bank of America announced plans to acquire UK cybersecurity consultancy MDSec to expand its cyber threat operations center and internal defense capabilities.
Jul 30, 2026Iran-Backed Actors Target Over 30 Minnesota Water Utilities
A likely Iranian cyber threat group targeted more than 30 Minnesota community water systems, highlighting critical infrastructure vulnerabilities.
Jul 30, 2026Okta Acquires Permiso to Expand Into Identity Threat Detection and SecOps
Okta acquires identity threat detection firm Permiso Security to unify posture management, runtime cloud monitoring, and agentic identity protection.
Jul 30, 2026AI Harness Security: Trust Boundaries Create New Attack Vectors
Complex AI harnesses and framework components suffer from broken trust boundaries, exposing organizations to novel supply chain and privilege escalation risks.
Jul 30, 2026No news matches your search.