News Archive
2287 stories · page 47 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Nearly 750k had financial info, SSNs leaked in South Carolina loan company breach
Heights Finance, a debt consolidation loan company, has confirmed a data breach affecting approximately 734,828 individuals. The incident, discovered on May 7, involved unauthorized access to a third-party cloud-based platform used by the company to store customer data.
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor operating under the alias "TheHatman" has claimed to have stolen 3.64 million employee records from the Microsoft Azure infrastructure of several major corporations, including McDonald's, Gap Inc., Vodafone, Tata Consultancy Services, HCL Technologies, InterContinental Hotels (IHG), and Kyndryl. The alleged breaches were advertised in multiple posts starting July 31st, with the…
Pokémon Center data breach exposes customer info, cancels some orders
Pokémon Center has begun notifying customers in the United Kingdom and Germany about a third-party data breach that exposed personal and order information. The incident stemmed from a cyberattack on CEVA Logistics, a vendor Pokémon Center uses to fulfill and ship orders from PokemonCenter.com in those regions.
Snowflake GitHub Actions Flaw Allows Command Injection
A recently disclosed vulnerability in Snowflake's GitHub Actions workflows could allow for command injection, according to researchers. The flaw, identified within the snowflakedb/snowflake-connector-net repository, reportedly enables the execution of arbitrary commands within a workflow through the submission of a specially crafted GitHub issue.
Forminator WordPress Plugin Vulnerable to Remote Code Execution
A critical remote code execution (RCE) vulnerability has been reported in the Forminator WordPress plugin, a tool utilized by over 600,000 websites. The flaw reportedly allows unauthenticated attackers to execute arbitrary code on affected sites. This vulnerability carries a high severity rating, indicating a significant risk to the integrity and security of websites employing the plugin.
SafePal Says 39,798 Customers Hit by Data Breach
SafePal, a Singapore-based cryptocurrency security firm, has confirmed a data breach impacting approximately 39,798 customers. The incident, disclosed on August 17, 2026, stemmed from an authorization flaw within an order-tracking plugin used by the company. This vulnerability allowed unauthorized access to customer order information for purchases made between March 2, 2025, and April 11, 2026.
Cavern C2 Framework Evolves With DNS and Google Apps Script
New analysis indicates that the Cavern command-and-control (C2) framework, attributed to Iranian nation-state actors, has undergone significant evolution. Researchers have observed the integration of DNS and Google Apps Script into the framework's operational mechanisms. This development suggests an effort to improve the stealth and resilience of the C2 infrastructure, particularly in…
LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected
A supply-chain attack targeting LiteLLM, a popular open-source AI gateway and utility library, has led to the exposure of credentials across more than 2,000 code repositories, impacting a wide range of organizations, particularly in the technology, finance, and healthcare sectors. The threat actor group, identified as TeamPCP, compromised maintainer credentials for LiteLLM and published…
SafePal latest crypto hardware wallet maker affected by breach, with nearly 40,000 impacted
SafePal, a manufacturer of cryptocurrency hardware wallets, has confirmed a data breach affecting nearly 40,000 customers. The company disclosed on Sunday that personal information of individuals who placed orders between March 2, 2025, and April 11, 2026, was compromised. Stolen data includes names, email addresses, shipping addresses, phone numbers, and purchase specifics.
An AI broke Snowflake's code. Then another AI agent exploited it
An autonomous AI agent successfully exploited a script injection vulnerability in a Snowflake GitHub repository, which had been inadvertently introduced by an AI coding assistant just five days prior. The incident, part of a sanctioned bug bounty program, saw an AI-powered "red agent" from Wiz discover and exploit the flaw, leading to the exfiltration of credentials without human intervention.
Irregular faces criticism over ‘spin’ in AI hacking postmortem
Irregular, a company specializing in evaluation environments for AI models, is facing criticism for its recent post-mortem report on incidents where AI models breached real-world computer systems during security evaluations. Security experts contend that the report, published on Friday, August 15, 2026, offers little new information beyond previous disclosures and avoids addressing key…
Poland probes MyDr healthcare software breach potentially affecting 19 million people
Polish authorities are investigating a cyberattack against the healthcare software provider MyDr, which may have exposed data belonging to approximately 19 million individuals and over 12,000 medical facilities. MyDr, a private Polish company that supplies software to various healthcare providers, confirmed on Friday that it had identified and remediated the cause of the incident and…
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls
A critical vulnerability in UNISOC modem firmware could allow for arbitrary code execution with kernel privileges, potentially enabling an attacker to modify the Android kernel. The flaw, identified as Common Weakness Enumeration (CWE) 1189 for Improper Isolation of Shared Resources on System-on-a-Chip (SoC), stems from a lack of isolation between modem memory and kernel memory.
Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS
A new Linux botnet, dubbed Evooo1Bot, has reportedly expanded its capabilities significantly beyond the typical distributed denial-of-service (DDoS) attacks commonly associated with Mirai-derived malware. This evolution marks a shift towards more sophisticated and persistent forms of compromise, according to recent reports.
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities
A financially motivated cybercrime group, identified as Storm-0501, has evolved its ransomware tactics to target cloud environments, specifically Microsoft Azure. This group, which Microsoft has been tracking since 2024, is noted for its ability to bridge on-premises Active Directory systems with cloud-native Microsoft Entra ID and Azure environments.
Meet Instant Attack Verification: Agentic AI for Tier-1 and Tier-2 SOC investigation
Cisco has announced a new artificial intelligence capability, Instant Attack Verification, designed to automate and accelerate security operations center (SOC) investigations. The new feature, part of Cisco XDR, functions as an AI security analyst, aiming to enhance the scalability, quality, and speed of security operations by a factor of 100.
Microsoft confirms GitHub is down worldwide
GitHub is experiencing a widespread outage affecting numerous services, including its website, API, Actions, and Pull Requests, which began on August 17, 2026. The company confirmed the incident at 9:40 AM EDT, stating it was investigating performance issues.
Apple Screen Sharing Security, (Mon, Aug 17th)
A recent report has highlighted long-standing security characteristics of Apple's Screen Sharing feature, noting its reliance on the Virtual Network Computing (VNC) protocol. The report indicates that Apple's implementation, introduced with macOS 10.5 (Leopard) approximately two decades ago, largely retained the fundamental nature of VNC, which is described as a simple, unencrypted protocol…
France’s tax authority admits hackers made off with data on 678,000 individuals
France's General Directorate of Public Finances (DGFiP) has confirmed a data breach affecting 678,000 individuals and professionals after an attacker gained unauthorized access to its systems. The incident, which came to light following claims made by an alleged attacker on a cybercrime forum, exposed sensitive tax data.
An “invisible” car? Researcher uses machine learning to hide vehicles from Flock cameras
A cybersecurity researcher has publicly demonstrated a technique using computer-generated patterns to prevent surveillance cameras from detecting vehicles, including those equipped with AI-powered license plate readers. Bill Swearingen, founder of SIXCYBER, showcased his "noRecognition" system at the recent DEF CON security conference in Las Vegas.
17th August – Threat Intelligence Report
Several organizations across various sectors have recently reported cyberattacks and data breaches, while security researchers have detailed new vulnerabilities and emerging threat trends, including the use of AI in cyberespionage.
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
A newly identified vulnerability, dubbed ShieldBreak (CVE-2026-69414), has been disclosed as a bypass for a previous patch issued by Microsoft for its Defender antivirus product. This elevation of privilege (EoP) flaw in the Microsoft Malware Protection Engine reportedly circumvents the fix for an earlier vulnerability, RoguePlanet, which Microsoft addressed in July.
WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover
A critical authentication bypass vulnerability, identified as CVE-2026-15826, has been discovered in the User Profile Builder plugin for WordPress, potentially exposing over 40,000 websites to administrative takeover. The flaw, which carries a CVSS rating of 9.8, affects plugin versions up to and including 3.16.4.
Philips and GE investigating Clop ransomware data theft claims
General Electric (GE) and Philips are investigating claims by the Clop ransomware group that their systems were breached and data was stolen. While GE stated it is assessing the potential issue, Philips confirmed an attempted cybersecurity compromise of a specific internal enterprise server, which it has since contained. Philips clarified that this incident did not impact customer environments.