The 2026 Mid-Year Breach Review: Six Months That Redefined the Threat Landscape
Half of 2026 is gone, and the scoreboard is grim: Conduent's breach grew to 62.2 million victims, FortiBleed harvested credentials from 430,000 firewa...
Breach Intelligence & Articles
844 articles on data breaches, ransomware, incident response, and threat intelligence.
AssuranceAmerica Breach Exposes 6.99 Million Driver's Licenses — the Largest Spill of American License Data This Year
Notification letters go out today to 6.99 million people whose names, driver's license numbers, and insurance records were stolen from AssuranceAmeric...
GodDamn Ransomware and PoisonX: When the Malicious Kernel Driver Comes Pre-Signed by Microsoft
A ransomware family calling itself GodDamn is hitting U.S. companies with a twist on an old trick. Instead of abusing a legitimate vulnerable driver, ...
Accenture Admits 'Isolated Matter' After Hacker '888' Offers 35 GB of Source Code, Keys, and Azure Tokens for Sale
Threat actor '888' is selling what they claim is 35 GB of Accenture source code — plus RSA keys, SSH keys, and Azure access tokens — on PwnForums, wit...
Ubiquiti Patches Seven Critical UniFi Flaws — Including a Perfect-10 Command Injection in the App That Runs Your Building
Ubiquiti has shipped fixes for seven critical vulnerabilities across UniFi Connect, Talk, Access, Protect, and UniFi OS. The headline flaw, CVE-2026-5...
Two Days to Patch: CISA Orders Fixes for Actively Exploited ColdFusion, Joomla, and Langflow Flaws — Three of Them CVSS 10.0
CISA has added four actively exploited vulnerabilities to the KEV catalog with a July 10 deadline: a CVSS 10.0 Adobe ColdFusion path traversal exploit...
Brussels Moves to Vet Frontier AI Before It Ships: Inside the EU's New Action Plan on Cybersecurity and Artificial Intelligence
The European Commission's Action Plan on Cybersecurity and AI, published July 7, establishes a dedicated EU capacity to evaluate advanced AI models be...
FortiBleed Finally Has Names Attached: Opsec Failure Links the 430,000-Firewall Campaign to INC Ransom and Lynx
An exposed staging server has blown the lid off FortiBleed. SOCRadar found an initial access broker member simultaneously logged into affiliate panels...
JADEPUFFER: Inside the First Ransomware Attack Run End-to-End by an AI Agent
Sysdig has documented what it calls the first agentic ransomware operation — an LLM that broke into a network, harvested credentials, pivoted to a pro...
10.5 Million Became 62.2 Million: Conduent Is Now the Third-Largest Healthcare Data Breach in U.S. History
Conduent's HHS filing confirms 62,224,658 people were affected by its SafePay ransomware breach — roughly one in five Americans, and the third-largest...
SharePoint Is a Ransomware Vector Again: CISA Gives Agencies 3 Days to Patch CVE-2026-45659
CISA added Microsoft SharePoint Server deserialization flaw CVE-2026-45659 to the KEV catalog on July 1 with an emergency three-day deadline after act...
A U.S. Government Entity Paid Kairos $1 Million to Keep Its Files Secret — and the Blockchain Recorded It
A leaked negotiation chat and an on-chain payment trail reveal that a U.S. government entity paid the Kairos extortion group roughly $1 million to pre...
Showing 12 of 844 articles
Load More →