Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary Grafana Labs has disclosed that its codebase and other internal operational information were stolen after attackers gained unauthorized access to Grafana’s GitHub repositories. The breach was traced back to…
Summary Taiwanese manufacturing giant Foxconn has confirmed a cyberattack impacting several of its North American factories. The Nitrogen ransomware group has claimed responsibility, alleging it exfiltrated 8TB of data comprising…
Summary Google has internally discovered over 200 Chrome vulnerabilities in the past month alone, a dramatic surge that security researchers attribute to the company’s deployment of AI-powered vulnerability discovery tools.…
Summary Drupal has disclosed a highly critical SQL injection vulnerability in its core database abstraction API, tracked as CVE-2026-9082. The flaw specifically affects Drupal sites running on PostgreSQL backends, where…
Summary Microsoft has confirmed that two vulnerabilities in its Defender antivirus software are being actively exploited in the wild. The more severe of the two, CVE-2026-41091 (CVSS 7.8), is a…
Summary A data breach at NYC Health + Hospitals Corporation — the largest public health system in the United States — has compromised personal and protected health information belonging to…
Summary The National Security Agency’s Artificial Intelligence Security Center (AISC) has released a Cybersecurity Information Sheet titled “Model Context Protocol (MCP): Security Design Considerations for AI-Driven Automation.” The guidance addresses…
Summary Opexus, a software services provider that handles sensitive data for nearly every U.S. federal agency, has disclosed a devastating insider attack. Two employees — identified as twin brothers Muneeb…
Summary Microsoft has disclosed details of a large-scale credential theft campaign that targeted more than 35,000 users across 13,000 organizations in 26 countries. The sophisticated phishing operation used code-of-conduct-themed lures…
Summary GitHub has confirmed a significant breach of its internal infrastructure after threat actor group TeamPCP listed approximately 3,800 of the platform’s internal repositories for sale on a cybercrime forum…