A coordinated cyberattack
A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response. Braham, Plymouth, South St. Paul and Maple Pl
2026 Data Breaches Year-to-Date (3087 indexed)
CISA’s new Binding Operational Directive (BOD) 26-04 marks one of the most important
CISA’s new Binding Operational Directive (BOD) 26-04 marks one of the most important changes to federal vulnerability management in years. Rather than requiring agencies to patch every critical vulnerability on the same
The autonomous AI agent that escaped during OpenAI testing exploited weaknesses across a
The autonomous AI agent that escaped during OpenAI testing exploited weaknesses across a customer workload, a third-party cloud platform, and Hugging Face’s production environment before being contained, according to new
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response
The Minnesota IT Services (MNIT) agency activated its cybersecurity incident response capabilities across the entire state after hackers targeted more than 30 community water systems in "a coordinated cyberattack." [...]
Cyberattack
Angola’s largest telecommunications operator, Unitel, was hit by a cyberattack that has left millions of people nationwide without voice services, mobile data, and internet access.
OpenAI agent used
In a new update, OpenAI says its AI models also used publicly exposed credentials to compromise accounts on four third-party services during the recent attack on Hugging Face, expanding the scope of the four-day security
OpenAI on Tuesday
OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face's production environment, and also hacked multiple third-party accounts a
Arista has patched a VeloCloud Orchestrator (VCO) security hole that has been actively
Arista has patched a VeloCloud Orchestrator (VCO) security hole that has been actively leveraged in the wild, one that the vendor says “may allow a remote attacker to access privileged internal functionality and impact t
Ruflo fixed a CVSS 10.0 flaw that
Ruflo fixed a CVSS 10.0 flaw that exposed its MCP bridge without any authentication, putting AI provider keys, stored chats and persistent agent memory at risk.
IBM Cost of a Data Breach Report warns that the global average cost of a data breach has
IBM Cost of a Data Breach Report warns that the global average cost of a data breach has reached a record high of $4.99m – and AI-backed attacks have played a role
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability — Cisco
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability — Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of hard-coded password vulnera
ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak
EY confirmed the theft of client tax documents from its third-party support platform. ShinyHunters claims responsibility and is threatening to publish the data.
Houston City College
831,642 records exposed — Academic records, Citizenship statuses, Dates of birth, Email addresses and 4 more
View incident → Indexed 1 month ago
Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the
Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the cyber incident in which a rogue AI system hacked into another AI company on its own. The post For Some, So-Called ‘Skynet Day’ Came
Traveling enterprise employees beware: Think twice before you log onto that
Traveling enterprise employees beware: Think twice before you log onto that oh-so-convenient public Wi-Fi. Since at least June, threat actors have been compromising “captive” Wi-Fi gateways and other portal appliances
The hacker claimed to have stolen the information of 2 million Origin Energy customers
The hacker claimed to have stolen the information of 2 million Origin Energy customers after breaching its systems. The post Origin Energy Data Breach Affects 900,000 Australians appeared first on SecurityWeek.
Coca Cola claims data was stolen from its Fairlife business after a recent ransomware
Coca Cola claims data was stolen from its Fairlife business after a recent ransomware attack
On June 16, media reported that Iran-linked Handala had attacked Cal Water. There was no
On June 16, media reported that Iran-linked Handala had attacked Cal Water. There was no evidence that they tampered with the water supply, but the group warned it would be increasing attacks on U.S. critical infrastruct
With AI compressing reconnaissance and exploit development from weeks to hours, security
With AI compressing reconnaissance and exploit development from weeks to hours, security vendors are racing to help enterprises identify exposures long before an incident happens. Infoblox is the latest to make that m
The U.S. and Australian governments have released new guidance urging critical
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disrupti
Lots of Internet-exposed server management controllers are subject to offline
Lots of Internet-exposed server management controllers are subject to offline password-cracking attacks — and adversaries have taken note.
More than 24,000 internet-exposed servers are leaking authentication password hashes due
More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. [...]
Monday starts with the usual promise that everything is under control. Then the logs
Monday starts with the usual promise that everything is under control. Then the logs wake up. This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding i
A vulnerability in Microsoft’s Active Directory Certificate Services (AD CS) could allow
A vulnerability in Microsoft’s Active Directory Certificate Services (AD CS) could allow a low-privilege domain user to impersonate a Domain Controller, security researchers have warned. Dubbed Certighost, the flaw st