It Was Never One Agent: What the Final Reports Changed About the Hugging Face Breach
Four corroborating post-mortems from OpenAI, Hugging Face, METR/Redwood and JFrog rewrite the July story. Not one rogue agent over a weekend — roughly...
Breach Intelligence & Articles
940 articles on data breaches, ransomware, incident response, and threat intelligence.
Fire Ant Moved Into the Routers: China-Nexus Actor Turns Cisco IOS XR Into a Listening Post
Sygnia says the China-nexus actor Fire Ant has escalated from hypervisors to trusted network infrastructure — compromising Cisco IOS XR routers and TA...
SickKids Breached Again: Careers Portal Flaw Exposes Employee and Applicant Data
Toronto's Hospital for Sick Children disclosed a July 9 intrusion into a third-party application supporting its careers site and HR functions includin...
Berlin Confirms the Theft, Refuses the Bitcoin: Rhysida's Pre-Election Extortion Play
Rhysida claims 5.79 TB and 1.44 million files from Berlin's state administration, including plaintext credentials, 148 IBANs, 3,200 NDAs and critical-...
TITAN's Pitch: An AI That Reads 700GB of Your Data an Hour and Prices the Ransom Itself
TITAN ransomware-as-a-service surfaced in April 2026 and now lists 24 victims across 10 countries. Its differentiator is not the encryptor — it is a c...
8.7 Million Travellers, One API Key in the Page Source: The Manchester Airports Breach
Manchester Airports Group confirmed hackers stole data on around 8.7 million customers across Manchester, Stansted and East Midlands. Extortion group ...
The Shutdown Window: What the Philips X-Ray Trade Secret Case Teaches About Insider Risk
A federal jury in Chicago convicted 71-year-old engineer Chih-Yee Jen of stealing Philips X-ray tube trade secrets for a Chinese competitor. The theft...
Three CVSS 10.0s in One Advisory: ServiceNow's AI Platform Ships Unauthenticated RCE
ServiceNow's August 2026 advisory carries three maximum-severity flaws — CVE-2026-18885, CVE-2026-18886 and CVE-2026-74820 — all exploitable by unauth...
McKesson's 8-K Says "Not Material." ShinyHunters Says $55 Million.
McKesson disclosed a cybersecurity incident three days after discovering it, under Item 7.01 rather than 1.05 or 8.01. ShinyHunters claims 284 million...
PaperCut Patches Its Patch: Two Exploited Zero-Days, Three Bypasses, One Day
PaperCut shipped an emergency fix for CVE-2026-82078 and CVE-2026-81578 on August 28, then shipped a second one hours later after watchTowr broke the ...
ATF Confirms a 'Major Incident' After Qilin Lists It — the Breached System Held Investigation Targets
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed a major incident on August 27 after Qilin added the agency to its leak site. ATF say...
Open the Repo, Say Anything: Amazon Kiro Exfiltrates Your Data Without You Asking It To
Researchers disclosed a prompt injection flaw in Amazon Kiro, AWS's agentic IDE, where crafted workspace content triggers exfiltration of sensitive lo...
Showing 12 of 940 articles
Load More →