Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Critical Citrix NetScaler Flaw CVE-2026-8451 Actively Exploited
A critical memory overread vulnerability in Citrix NetScaler ADC and Gateway appliances, similar to CitrixBleed, is being actively exploited.
Jul 13, 2026Critical Unauthenticated SQL Injection Vulnerability Found in Jinher OA
Jinher OA version 1.0 contains an unauthenticated SQL injection vulnerability (CVE-2026-15517) allowing remote arbitrary SQL command execution.
Jul 13, 2026Accenture Faces Data Breach: 35GB of Source Code Allegedly Stolen
A threat actor claims to have breached Accenture, exfiltrating over 35GB of source codes.
Jul 13, 2026Eureka Construction INC Hit by Titan Ransomware Group
US-based Eureka Construction INC suffers a ransomware attack by the Titan group, leading to a data breach.
Jul 13, 2026Allied Plumbing & Heating Hit by Qilin Ransomware Group
Allied Plumbing & Heating, a New Hampshire-based organization, has fallen victim to a ransomware attack orchestrated by the Qilin group.
Jul 12, 2026CISA Adds Langflow Authorization Bypass (CVE-2026-55255) to KEV Catalog
CISA has added an actively exploited Langflow Authorization Bypass vulnerability, CVE-2026-55255, to its Known Exploited Vulnerabilities Catalog.
Jul 12, 2026Critical Adobe ColdFusion Vulnerability (CVE-2026-48282) Actively Exploited In The Wild
A critical vulnerability, CVE-2026-48282, in Adobe ColdFusion is being actively exploited in attacks, allowing remote code execution.
Jul 12, 2026JadePuffer Identified as First Agentic Ransomware Driven by Large Language Model
The Sysdig Threat Research Team has uncovered JadePuffer, the first documented instance of agentic ransomware, fully automating attacks using an LLM.
Jul 12, 2026Rockstar Games Suffers Data Breach Affecting Corporate Assets via Third-Party
Rockstar Games confirmed a data breach affecting corporate assets, with ShinyHunters claiming responsibility and seeking a ransom.
Jul 12, 2026DarkSword iOS Spyware Actively Deployed Against Hundreds of Millions of Devices
A sophisticated iOS spyware named DarkSword has been found in active deployment, targeting hundreds of millions of iOS devices globally.
Jul 12, 2026Eleveo Call Recording Software Vulnerabilities Allow Improper Authorization
Multiple improper authorization vulnerabilities (CVE-2026-15474, CVE-2026-15472) in Eleveo Call Recording Software 9.7.0 allow remote attacks.
Jul 12, 2026Zimbra Collaboration Suite Patches Stored XSS Vulnerability
Zimbra has released a patch for its Collaboration Suite (ZCS) 10.1.19 to address a stored cross-site scripting (XSS) vulnerability in the Classic Web Client.
Jul 12, 2026No news matches your search.