PortSwigger
PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors
Latest Disclosures
Exposed Credential Database
24B stolen credential records publicly exposed
View incident → Indexed 3 weeks, 2 days ago
On March 24, 2026, developers building AI applications with LiteLLM — a Python package
On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP had compromised the P
Conduent Business Solutions
62M records exposed to federal regulators
View incident → Indexed 3 weeks, 2 days ago
Queensland Schools
Major cyber breach affecting tens of thousands of students and teachers via education technology platform
Exact Sciences
10,869,543 records exposed — Dates of birth, Email addresses, Genders, Names and 3 more
FirstClass Travel Agency
Alleged data breach of customer records by threat actor on underground hacking forums
BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking
BlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaigns
Officer PII and justice partner emails exposed
Officer PII and justice partner emails exposed
View incident → Indexed 3 weeks, 2 days ago
TriZetto (Healthcare Tech Provider)
More than 3 million Americans impacted by 2024 breach affecting multiple states
Partnered Health (Australian Clinics)
Cyber-attack exposed medical records including Medicare numbers and pathology results
Progress LoadMaster
Progress LoadMaster Command Injection Vulnerability — Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by e
Loyalist College Canada
INC_RANSOM ransomware attack confirmed
View incident → Indexed 3 weeks, 3 days ago
Klue Supply Chain
200 firms hit via stale credential including LastPass and HackerOne
View incident → Indexed 3 weeks, 3 days ago
Canadian Credit Services Firm
28K records with passport photos and loan documents stolen
View incident → Indexed 3 weeks, 3 days ago
PNLD UK Police
Police and government contact data on dark web
View incident → Indexed 3 weeks, 3 days ago
T-Mobile
Data breach affecting hundreds of thousands of Washington customers, notification law violations
TELUS Digital
Nearly 1 petabyte stolen in extortion attack
View incident → Indexed 3 weeks, 3 days ago
Ernst Young
Client tax documents accessed via third-party platform
View incident → Indexed 3 weeks, 3 days ago
Aura Identity Protection
900K customer PII records stolen via vishing
View incident → Indexed 3 weeks, 3 days ago
Banyumas Regency Government
2M government records leaked
View incident → Indexed 3 weeks, 3 days ago