Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Over 20,000 Instagram accounts have been hijacked due to a vulnerability in Meta’s AI-assisted account recovery support tool, known as High Touch Support (HTS). The flaw allowed attackers to obtain…
The ShinyHunters cybercrime group has leaked stolen data from Charter Communications (Spectrum) after the company refused to negotiate following a ransom deadline that expired on May 27, 2026. While ShinyHunters…
Check Point has disclosed a critical authentication bypass zero-day (CVE-2026-50751, CVSS 9.3) in its Remote Access VPN, Mobile Access, and Spark Firewall products that has been actively exploited since at…
A self-replicating supply chain attack known as the “Miasma worm” has compromised 73 Microsoft GitHub repositories across four organizations — Azure, Azure-Samples, Microsoft, and MicrosoftDocs — prompting GitHub to disable…
Google has released emergency updates for Chrome 149 to patch CVE-2026-11645, a high-severity zero-day vulnerability in the V8 JavaScript engine that is being actively exploited in the wild. This marks…
Summary Lithuania’s Centre of Registers — the country’s primary authority for property, legal entity, and personal data registration — suffered a major cyberattack resulting in the theft of over 600,000…
Summary Palo Alto Networks has upgraded the severity of CVE-2026-0257 from medium to high (CVSS 7.8) after widespread exploitation of the authentication bypass vulnerability in PAN-OS GlobalProtect was confirmed across…
Summary Dental benefits administrator DentaQuest has confirmed a data breach that exposed the sensitive information of 2.6 million accounts after the ShinyHunters extortion group publicly leaked 234GB of stolen data.…
Summary Cisco has disclosed a critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager (formerly vManage) that is being actively exploited by attackers. Tracked as CVE-2026-20245, the flaw allows authenticated attackers…
Summary Password manager Dashlane disclosed on June 5, 2026, that attackers successfully downloaded encrypted vaults from a small number of user accounts following a brute-force attack that began on May…