-
Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Times Mobility says a data breach exposed data linked to 6.6 million accounts, including 1.6 million identity records with driver’s license images and documents too.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters tells Hackread it never planned to publish or sell stolen FBI data and says its ultimatum was part of a marketing campaign to counter FBI claims.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Dutch police arrested convicted hacker Pepijn van der Stap in the ShinyHunters probe into the Odido breach, which exposed data belonging to millions of customers.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Gambit Security found AI agents breached 27 companies, stole 600,000 credit card records and installed payment skimmers across compromised retail sites.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters hacks the FBI Jobs portal and claims sensitive data on nearly all FBI agents and job applicants before the site is taken offline for security work.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
