Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
Flaw in npm Trusted Publishing Exposed Over 1,500 Packages to Supply Chain Hijacking
A flaw in npm Trusted Publishing allowed attackers to hijack over 1,500 npm packages by re-registering abandoned GitHub repository names.
Oct 18, 2026US Cyber Job Openings Drop 26% as Demand for AI Security Engineers Surges
CyberSN report reveals a 26% drop in overall US cybersecurity job listings, alongside triple-digit growth in AI security and data science roles.
Oct 18, 2026Cybercriminals Target Physical Building Systems to Force Ransom Payments
Ransomware operators are attacking building automation systems, manipulating physical controls and lockouts to force ransom payments.
Oct 18, 2026ConnectWise Cloud Backup Breach Compromises M365 Tenants
ConnectWise shut down Cloud Backup access after attackers compromised application secrets to breach M365 tenants and escalate privileges.
Oct 18, 2026Cybercriminals Target Building Automation Systems to Drive Physical Extortion
Threat actors increasingly hijack physical building automation systems, HVAC, and OT environments to force extortion payments from corporate targets.
Oct 17, 2026ConnectWise Cloud Backup Credential Leak Exposes 173 Microsoft 365 Tenants
Threat actors used a compromised ConnectWise Cloud Backup secret to access 173 Microsoft 365 tenants and manipulate Entra ID applications.
Oct 17, 2026BeyondTrust Remote Support Zero-Day CVE-2026-102764 Exploited by Armory Castle
Armory Castle exploited a critical BeyondTrust Remote Support zero-day (CVE-2026-102764) for root access, secret harvesting, and network pivoting.
Oct 17, 2026Burger King Japan Data Breach Exposes 11 Million Customer Records
Burger King Japan disclosed a data breach affecting 11.18 million mobile app users, exposing PII and order history following unauthorized server access.
Oct 17, 2026TypeSafe's Jev Model Vulnerable to Prompt Injection and TokenBreak Attacks
HiddenLayer research reveals TypeSafe's Jev model lacks security guardrails, exposing machine-to-machine AI agents to indirect prompt injection.
Oct 16, 2026BeyondTrust Patches Zero-Day Vulnerability Exploited by Armory Castle
BeyondTrust has patched a critical authentication bypass zero-day (CVE-2026-102764) in Remote Support exploited in attacks by Chinese hackers since August.
Oct 16, 2026CISA Flags Exploited Palo Alto, Cisco, and Ahsay Flaws in KEV Catalog
CISA orders emergency patching for actively exploited flaws in Palo Alto PAN-OS, Cisco Secure Email Gateway, and AhsayCBS management servers.
Oct 16, 2026Cisco Fixes Actively Exploited Root RCE Flaw in Secure Email Gateway
Cisco warns attackers are actively exploiting CVE-2026-76519, a root command execution vulnerability in Cisco Secure Email Gateway appliances.
Oct 16, 2026No news matches your search.