Cookeville Regional Medical Center
330K patient records compromised in ransomware
View incident → Indexed 3 weeks, 4 days ago
Healthcare Data Breaches (10669 indexed)
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploi
Unitel, Angola's dominant mobile operator, continues to recover from a cyberattack that
Unitel, Angola's dominant mobile operator, continues to recover from a cyberattack that caused outages the day of the government-owned telco's public offering.
Liechtenstein Government
31K beneficial ownership records exposed
View incident → Indexed 3 weeks, 4 days ago
A self-propagating worm-like attack is hitting the npm registry, having infected 444
A self-propagating worm-like attack is hitting the npm registry, having infected 444 packages from more than a dozen publishers so far. The impact is massive, with the packages affected amounting to more than 2 billion m
Black Hat 2026 is shaping up to be another AI-heavy conference, but this year’s
Black Hat 2026 is shaping up to be another AI-heavy conference, but this year’s announcements suggest the industry is moving beyond simply adding copilots to existing products. Vendors are increasingly packaging AI in
IBM Langflow
IBM Langflow Code Injection Vulnerability — Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.
Apache Tomcat
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability — Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor.
A crafted prompt to a low-privilege Google ADK agent could be used to pass a malicious
A crafted prompt to a low-privilege Google ADK agent could be used to pass a malicious hand-off comment to a privileged agent. The post Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering
Swiss federal IT office
SwissInfo.ch reports: Following a cyberattack on the SharePoint servers operated by the Federal Office of Information Technology, Systems and Telecommunication (FOITT), access via the internet has been blocked for people
Swiss IT agency
The Federal Office for Information Technology and Communications (BIT) said specialists detected anomalies in on-premises Microsoft servers. The Swiss agency could not confirm exactly how the hackers got in.
The top cybersecurity product
Black Hat 2026 is shaping up to be another AI-heavy conference, but this year’s announcements suggest the industry is moving beyond simply adding copilots to existing products. Vendors are increasingly packaging AI in
Reports said intruders appeared to gain access to the Jira environment and other
Reports said intruders appeared to gain access to the Jira environment and other sensitive data of the Żabka retail chain. The company confirmed an intrusion occurred in late July.
The UK’s Police National Legal Database and Ask the Police service have been breached
The UK’s Police National Legal Database and Ask the Police service have been breached
N-able N-central
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability — N-able N-central contains an authentication bypass using an alternate path or channel that allows for authentication bypass.
A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy
A hacker has drained nearly $89m from Coldcard Bitcoin wallets after exploiting a legacy bug
The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the
The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. In a report published over the
An unknown Chinese-speaking threat actor has been observed running a campaign targeting
An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys s
This week kept coming back to permission. A model crossed a boundary. A wallet trusted
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more th
Cyberattack
DPA reports: The tiny principality of Liechtenstein has fallen victim to a major cyberattack in which the data of 31,000 people were stolen, the government said on Sunday. The country, which lies between Switzerland and
The Police National Legal Database (PNLD) has confirmed that police, government and
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web. The data included names, organisations and work email addre
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. [...]
The Herald Business
The Herald Business reports: Seoul Facilities Corp. has drawn criticism over its plan to offer 5,000 won [$3.50 USD] per affected user in response to a personal data breach involving about 4.62 million people, with quest