Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
U.S. DHS Homeland Security Information Network (HSIN) Compromised
The U.S. Department of Homeland Security's HSIN, a platform for interagency coordination, was compromised by an unidentified threat actor.
Jul 11, 2026Instructure Suffers Data Breach by ShinyHunters, Affecting Millions of Users
Edtech giant Instructure, behind the Canvas LMS, experienced a data breach with ShinyHunters accessing user data and defacing pages.
Jul 11, 2026CISA Adds Actively Exploited iCagenda and Balbooa Forms Vulnerabilities to KEV Catalog
CISA has added two new unrestricted file upload vulnerabilities in iCagenda and Balbooa Forms to its Known Exploited Vulnerabilities Catalog due to active…
Jul 11, 2026SR Bancorp Vendor Mercadien Suffers Data Breach Exposing Somerset Regal Bank Customer Data
SR Bancorp's vendor, Mercadien, P.C. CPAs, experienced a data breach exposing sensitive Somerset Regal Bank customer information including SSNs and account…
Jul 11, 2026Argentine Football Association Suffers Database Breach Triggered by Infostealer Malware
The Argentine Football Association experienced a significant cyberattack leading to database leaks and unauthorized communications, likely due to infostealer…
Jul 11, 2026Frontier Airlines Discloses Data Breach Exposing Customer Social Security Numbers
Frontier Airlines confirmed a data breach on or about July 9, 2026, affecting customers with potentially exposed Social Security numbers.
Jul 11, 2026Progress Software Urges ShareFile Customers to Shut Down Storage Zone Controllers Over…
Progress Software issued an urgent advisory for ShareFile customers to shut down on-premises Storage Zone Controllers due to a credible security threat.
Jul 11, 2026CISA Discloses Internal AWS GovCloud Credential Leak and Lack of Incident Response Plan
CISA revealed a contractor exposed AWS GovCloud credentials on GitHub, highlighting the agency's unpreparedness with its own incident response playbook.
Jul 11, 2026Six U-Boot Signature Verification Flaws Expose Embedded Devices to Stealthy Firmware…
Binarly researchers disclosed six vulnerabilities in the U-Boot bootloader, including arbitrary code execution flaws that could enable stealthy firmware…
Jul 11, 2026Django GeoDjango SQL Injection (CVE-2026-1207) Under Active Exploitation
A high-severity SQL injection vulnerability (CVE-2026-1207) in Django's GeoDjango GIS module is now actively exploited, affecting applications with a PostGIS…
Jul 11, 2026Oracle PeopleSoft Zero-Day (CVE-2026-35273) Actively Exploited, NAIC Affected
A new zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft is under active exploitation, affecting approximately 100 organizations, including NAIC.
Jul 11, 2026Nitrogen Ransomware Group Targets Foxconn North America, Exfiltrates 8TB of Data
The Nitrogen ransomware group claims to have stolen 8 terabytes of sensitive engineering documents and client schematics from Foxconn's North America…
Jul 11, 2026No news matches your search.