Security News
Breach & incident coverage
Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.
616 stories published
CISA Urges Immediate Patching of Ivanti Connect Secure Zero-Day CVE-2026-104935
Threat actors are actively exploiting Ivanti Connect Secure zero-day CVE-2026-104935 to gain root access, harvest LAPS passwords, and steal BitLocker keys.
Oct 15, 2026Cisco Patches Secure Email Gateway Zero-Day CVE-2026-76519 Under Active Attack
Cisco released patches for CVE-2026-76519, an actively exploited relative path traversal zero-day in Cisco Secure Email Gateway granting root execution.
Oct 15, 2026iRhythm Data Breach Exposes Personal and Device Info for 360,000+
Digital healthcare provider iRhythm disclosed a data breach involving third-party cloud applications that exposed patient PII and device data.
Oct 12, 2026Active Exploitation Targets SonicWall SMA1000 Work Place Interface (CVE-2026-102255)
Threat actors are actively exploiting a maximum-severity unauthenticated SSRF vulnerability (CVE-2026-102255) in SonicWall SMA1000 appliances.
Oct 12, 2026Google Study Reveals Hidden Engineering Costs in Open Source Package Maintenance
A Google case study examining open source software updates highlights how local patches, downstream breakage, and dependency depth drive up effort.
Oct 12, 2026AWS Releases Open-Source Strands Box to Contain Autonomous AI Agents
AWS released Strands Box, an open-source sandbox using macOS Seatbelt and Dogwood policy rules to control stateful execution for autonomous AI agents.
Oct 12, 2026Nippon Columbia Malware Infection Exposes 8.7M Daiichi Kosho Records
A malware infection at vendor Nippon Columbia exposed 8.7 million customer and employee records belonging to Japanese karaoke giant Daiichi Kosho.
Oct 11, 2026Autonomous AI Models Successfully Execute Attacks on Industrial OT Systems
Booz Allen testing shows frontier AI models can autonomously breach industrial control systems, hijack SCADA HMIs, and manipulate physical machinery.
Oct 11, 2026P7 DarkSword iOS Exploit Kit Expands Capabilities with Crypto Theft and Remote C2
The P7 DarkSword iOS exploit kit now features local JSON keychain parsing, cryptocurrency wallet theft, and direct two-way command execution capabilities.
Oct 11, 2026Chinese Hacker Uses ARTEX AI and Claude Agents to Breach South Korean Banks
Cyberattacks leveraging the ARTEX AI pentesting suite and Claude agents hit South Korean banks, exposing client data and causing system outages.
Oct 10, 2026Infrastructure Engineer Sentenced to 32 Months for Active Directory Extortion Plot
A former infrastructure engineer received 32 months in prison for deploying domain controller tasks that locked down thousands of servers and workstations.
Oct 10, 2026The Invisible AI Agent Problem: Governing Inherited and Unauthenticated SaaS Runtimes
Over 75% of embedded third-party AI agents operate outside single sign-on, introducing severe transitive non-human identity risks to cloud environments.
Oct 10, 2026No news matches your search.