Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
500 stories published
Rockstar Games Suffers Data Breach Affecting Corporate Assets via Third-Party
Rockstar Games confirmed a data breach affecting corporate assets, with ShinyHunters claiming responsibility and seeking a ransom.
Jul 12, 2026DarkSword iOS Spyware Actively Deployed Against Hundreds of Millions of Devices
A sophisticated iOS spyware named DarkSword has been found in active deployment, targeting hundreds of millions of iOS devices globally.
Jul 12, 2026Eleveo Call Recording Software Vulnerabilities Allow Improper Authorization
Multiple improper authorization vulnerabilities (CVE-2026-15474, CVE-2026-15472) in Eleveo Call Recording Software 9.7.0 allow remote attacks.
Jul 12, 2026Zimbra Collaboration Suite Patches Stored XSS Vulnerability
Zimbra has released a patch for its Collaboration Suite (ZCS) 10.1.19 to address a stored cross-site scripting (XSS) vulnerability in the Classic Web Client.
Jul 12, 2026OpenClaw AI Assistant Vulnerabilities Enable Remote Code Execution via WhatsApp
Multiple high-severity flaws in the OpenClaw AI coding assistant allow remote code execution through specially crafted WhatsApp messages.
Jul 12, 2026Conduent Data Breach Exposes Health and Personal Information of Millions
A significant data breach at Conduent has exposed the personal health information of over 25 million individuals in Texas and Oregon.
Jul 12, 2026Dell BIOS Flaw (CVE-2026-40639) Exposes Admin Passwords
A critical vulnerability in Dell BIOS allows attackers to recover administrator and user passwords from SPI flash in milliseconds due to a broken encryption…
Jul 12, 2026Exposed Hacker Server Reveals WP SHELLSTORM Backdooring Thousands of WordPress Sites
An exposed cybercrime server linked to WP SHELLSTORM has revealed the compromise of thousands of WordPress sites through outdated plugins and injected…
Jul 11, 2026Malicious JScrambler npm Package Release Drops Rust Infostealer During Install
Version 8.14.0 of the JScrambler npm package was compromised to silently deploy a native Rust-based infostealer during installation across Windows, macOS, and…
Jul 11, 2026Sophos Flags New Vect-TeamPCP Cybercriminal Alliance for Ransomware Attacks
Sophos X-Ops has uncovered a new alliance between the ransomware group Vect and cybercriminal outfit TeamPCP, combining their expertise for efficient…
Jul 11, 2026Exposed Hacker Server Reveals WP SHELLSTORM Backdooring Thousands of WordPress Sites
An exposed cybercrime server linked to WP SHELLSTORM has revealed the compromise of thousands of WordPress sites through outdated plugins and injected…
Jul 11, 2026WeedHack Malware Offered as Service, Targets Minecraft Users with Info-Stealing…
A new malware-as-a-service, "WeedHack," is being distributed disguised as Minecraft clients or mods to steal system information, passwords, and other…
Jul 11, 2026No news matches your search.