Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
500 stories published
New Spirals Ransomware Encrypts Victim Networks in Under 24 Hours
A new ransomware variant, "Spirals," is capable of encrypting victim networks rapidly, often within 24 hours of infiltration.
Jul 16, 2026Microsoft Hyper-V Privilege Escalation Vulnerability (CVE-2026-54129) Disclosed
A local privilege escalation vulnerability (CVE-2026-54129) in Microsoft Hyper-V's netvsc.sys driver allows guest VM compromise.
Jul 16, 2026Critical SAP NetWeaver ABAP Flaw (CVE-2026-44747) Poses High Risk to Enterprises
SAP has patched CVE-2026-44747, a critical 9.9 CVSS vulnerability in NetWeaver ABAP allowing data exposure or modification.
Jul 16, 2026Australian Healthcare Provider Partnered Health Suffers Major Data Breach
Partnered Health, an Australian healthcare provider, experienced a data breach exposing medical records of patients.
Jul 16, 2026Critical Zoom for Windows Vulnerability Allows Unauthenticated Account Takeover
A critical vulnerability in Zoom Workplace for Windows (CVE-2026-53412) enables unauthenticated attackers to hijack accounts.
Jul 16, 2026Critical Authentication Bypass Vulnerability Patched in VMware Avi Load Balancer
A critical authentication bypass vulnerability (CVE-2026-47865) affecting VMware Avi Load Balancer allows unauthenticated network access to the control plane.
Jul 16, 2026Easypak Discloses Data Breach Exposing Social Security Numbers and Medical Records
Packaging manufacturer Easypak confirmed a data breach, with the Akira ransomware group claiming responsibility for stealing 67GB of corporate and personal…
Jul 16, 2026Nightmare Eclipse Drops Unpatched 'LegacyHive' Windows Privilege Escalation Zero-Day
A new Windows zero-day vulnerability, dubbed 'LegacyHive,' has been publicly disclosed, enabling local privilege escalation on patched systems.
Jul 16, 2026CISA Adds Two New Actively Exploited Vulnerabilities to KEV Catalog
CISA has added CVE-2023-4346 affecting KNX Association and CVE-2026-46817 affecting Oracle E-Business Suite to its Known Exploited Vulnerabilities Catalog.
Jul 16, 2026Google Chrome Addresses Multiple Vulnerabilities, Including RCE and DoS
Google has released an urgent update for Chrome, version 150.0.7871.124/.125, patching numerous vulnerabilities including remote code execution and…
Jul 16, 2026Critical Remote Code Execution Vulnerability in ServiceNow AI Platform Patched
A critical remote code execution flaw in the ServiceNow AI platform, CVE-2026-6875, has been patched, allowing unauthenticated attackers to execute arbitrary…
Jul 16, 2026BeyondTrust Patches Two Critical Authentication Bypass Vulnerabilities
BeyondTrust has released patches for two critical authentication bypass vulnerabilities found in its Remote Support and Privileged Remote Access products,…
Jul 15, 2026No news matches your search.