Connecticut
WSFB reports: State officials say a data breach involving the Connecticut Medicaid program’s provider portal exposed payment and claims information tied to roughly 41,000 HUSKY Health members. The Connecticut Department
Retail & E-Commerce Data Breaches (9674 indexed)
Golf Canada
568,972 records exposed — Dates of birth, Email addresses, Genders, Geographic locations and 2 more
View incident → Indexed 4 days, 6 hours ago
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability — Zimbra
Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability — Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated attacker to send specially crafte
The good news? AI gives cyber defenders some of the best discovery tooling they’ve ever
The good news? AI gives cyber defenders some of the best discovery tooling they’ve ever had. The bad news? It gives attackers the same capability. This duality has left CISOs managing AI on two simultaneous fronts.
In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not
In April, Silent Ransom Group’s (SRG)* leak site listed 38 law firms that had not paid them and whose data was leaked. By June 29, there were 48 law firms. Now there are 64, and, in somewhat surprising claims, SRG
Russian network monitoring firm
The statement came a day after a hacking group calling itself Black Spark claimed it had spent more than a month inside Microolap’s network and gained access to its internal systems, including EtherSensor, the company's
OpenAI is adding a new safety capability that allows enterprises to detect misuse of its
OpenAI is adding a new safety capability that allows enterprises to detect misuse of its AI systems across multiple interactions without retaining prompts or responses, enabling risk monitoring while preserving its Zero
SickKids data breach
Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software. Clinic
Ransomware remains one of the most disruptive cyber threats organizations face.
Ransomware remains one of the most disruptive cyber threats organizations face. Companies have strengthened their cyber defenses over the years, but attackers in 2026 have become faster, more targeted, and increasingly r
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operation, dubbed StopAndProtec
ThreatsDay
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation. [...]
A US government advisory
A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs
Amar Ćemanović reports: Apple American Group LLC, a major Applebee’s franchise operator
Amar Ćemanović reports: Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The event has reportedly exposed sensitive personal information, includi
Support is growing for stricter oversight and increased financial resources for
Support is growing for stricter oversight and increased financial resources for utilities in the wake of a cyberattack spree, suspected to be the work of Iran-linked threat groups.
TrueConf Server
TrueConf Server Code Injection Vulnerability — TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted scr
TrueConf Server
TrueConf Server Missing Authentication for Critical Function Vulnerability — TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with net
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it. The incident began when a Meta employee
MCBS
Medical business management company suffered data breach affecting 1.2 million individuals
MCBS
Medical business management company data breach affecting 1.2 million individuals
Oz Hair and Beauty
1,988,331 records exposed — Email addresses, Geographic locations, Names, Phone numbers and 1 more
View incident → Indexed 1 week ago
Conduent
Healthcare company breach affecting 62.2 million people, third-largest US health hack
U.S. Government
Thousands of civil servants' passwords exposed since early 2024, including White House-linked credentials
EVO Banco
2024 API vulnerability exposed financial and identity data of 1.27 million records. Bankinter fined €240K.