Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
ShinyHunters, one of the most prolific data extortion groups operating today, has published 45 gigabytes of stolen data from Madison Square Garden Entertainment Corp. (MSG Entertainment) after the company refused…
Summary The FortiBleed credential-harvesting campaign, which compromised over 430,000 Fortinet firewall devices, has been directly linked to the INC Ransom and Lynx ransomware groups. Researchers identified an initial access broker…
Summary Japanese telecommunications giant KDDI, the country’s second-largest mobile carrier with $32.4 billion in annual revenue, has confirmed that a breach of an email platform used by five internet service…
Summary Global consulting and IT services giant Accenture has confirmed a security breach after a threat actor known as “888” claimed to have stolen 35 GB of data from the…
Summary A maximum-severity remote code execution vulnerability in Adobe ColdFusion, tracked as CVE-2026-48282, is now being actively exploited in the wild — and attackers moved fast. Within just two hours…
Summary The FBI, in partnership with Google’s Threat Intelligence Group and other industry partners, has successfully disrupted NetNut, one of the world’s largest commercial residential proxy networks. Also tracked as…
Summary Apple has released out-of-band security updates for iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2, patching nearly 30 vulnerabilities — including four WebKit flaws that were discovered…
Summary Google has released Chrome 151 with fixes for 382 security vulnerabilities across the browser’s core engine, graphics stack, extensions framework, and cross-platform components. Among the patched flaws, 15 are…
Summary CISA has added a high-severity Microsoft SharePoint Server vulnerability (CVE-2026-45659) to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The deserialization-of-untrusted-data flaw carries a CVSS…
Summary A critical pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster appliances (CVE-2026-8037, CVSS 9.8) is being actively exploited following the public release of proof-of-concept exploit code. The flaw…