>samit_hota

Security News

Breach & incident coverage

Distinct breaches, incidents, and newly disclosed issues as they're reported — separate from the CVE-anchored advisories, which track confirmed exploited vulnerabilities specifically.

616 stories published

SN-2026-544HighOpen

FBI Arrests Ransomware Negotiator Edward Dubrovsky in ShinyHunters Extortion Probe

Federal agents arrest CyberSteward executive Edward Dubrovsky in Pennsylvania on cyber extortion charges linked to the ShinyHunters hacking group.

Oct 10, 2026
SN-2026-543CriticalMitigated

Citrix Patches Critical NetScaler SAML Vulnerability CVE-2026-107406

Citrix issued a critical patch for NetScaler ADC and Gateway addressing CVE-2026-107406, a 9.5 CVSS memory overflow in SAML configurations.

Oct 9, 2026
SN-2026-542CriticalOpen

IDCF Cloud Ransomware Attack Disables Japanese Infrastructure and Local Governments

A ransomware attack on SoftBank subsidiary IDCF Cloud hit East Japan Region 1, wiping snapshots and locking down 495 enterprise and government clients.

Oct 9, 2026
SN-2026-541MediumOpen

Lawmakers Urge Google and Spirit Airlines to Halt $10M AI Data Deal

Over 100 members of Congress warn that Google's $10 million purchase of Spirit Airlines data for AI training poses severe re-identification risks.

Oct 9, 2026
SN-2026-540HighMitigated

Oracle Health Legacy Cerner Breach Impact Reaches 20 Million Records

Regulatory disclosures reveal a major breach on legacy Cerner servers compromised nearly 20 million patient records across the healthcare sector.

Oct 8, 2026
SN-2026-539HighOpen

FakeGit Campaign Reactivates with 17,600+ Malicious GitHub Repositories

The FakeGit campaign has reactivated on GitHub, using over 17,000 malicious repositories to distribute SmartLoader and steal developer credentials with StealC.

Oct 8, 2026
SN-2026-538CriticalMitigated

Critical Atlassian Data Center Vulnerability CVE-2026-21589 Under Active Attack

Attackers are actively exploiting CVE-2026-21589, a critical Atlassian Data Center arbitrary file read flaw that can lead to total domain takeover.

Oct 8, 2026
SN-2026-537HighMitigated

Denmark CPR System Breach Exposes Personal Records of 8.8 Million People

Attackers exploited compromised third-party credentials to query Denmark's CPR national ID system, harvesting personal data on 8.8 million citizens.

Oct 8, 2026
SN-2026-536CriticalResolved

Google Patches 25 Vulnerabilities in October 2026 Android Security Update

Google’s October 2026 Android update patches 25 vulnerabilities across System and Framework components, including critical zero-click privilege escalation bugs.

Oct 7, 2026
SN-2026-535HighMitigated

Arizona Court System Data Breach Exposes Records of Over 1 Million People

A cyberattack on the Arizona Supreme Court system compromised 1.3 million court records, orders of protection, and foster care reports via phishing.

Oct 7, 2026
SN-2026-534HighOpen

MALFEX NPM Malware Campaign Delivers Overlord RAT via Malicious Packages

Checkmarx discloses MALFEX, a long-running NPM malware campaign deploying Overlord RAT and movinlike infostealers across 40,000 installations.

Oct 7, 2026
SN-2026-533HighOpen

ClickFix Campaign Compromises 100+ Ukrainian Websites to Spread Lunex Malware

A Ukrainian ClickFix campaign tracked as UAC-0277 compromised over 100 websites, deploying Lunex Stealer and persistent browser extensions.

Oct 7, 2026