Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary Educational publishing giant McGraw Hill has confirmed a data breach affecting 13.5 million user accounts, after the ShinyHunters cybercriminal group leaked over 100GB of stolen data. The breach originated…
Summary OpenAI has announced a major expansion of its Trusted Access for Cyber (TAC) program, alongside the release of GPT-5.4-Cyber — a specialized variant of GPT-5.4 fine-tuned specifically for cybersecurity…
Summary IBM has announced a new suite of cybersecurity measures specifically designed to help enterprises defend against “agentic attacks” — cyberattacks planned and executed by autonomous AI agents rather than…
Summary A critical authentication bypass vulnerability in nginx-ui, a popular open-source web-based management interface for Nginx servers, is under active exploitation. Tracked as CVE-2026-33032 with a CVSS score of 9.8,…
Summary A pro-Iranian threat actor identifying itself as Ababil of Minab has claimed responsibility for a cyberattack against the Los Angeles County Metropolitan Transportation Authority (LACMTA). The group alleges it…
Summary Booking.com has disclosed a data breach in which unauthorized parties accessed customer booking details including names, email addresses, physical addresses, and phone numbers. While the company states that no…
Summary Microsoft’s April 2026 Patch Tuesday is one of the largest on record, addressing a staggering 167 security vulnerabilities across Windows and related software. The most urgent fix targets CVE-2026-32201,…
Summary An analysis published today by the Foundation for Defense of Democracies (FDD) details how an Iranian cyberattack compromised St. Joseph’s County, Indiana through the breach of a fax server.…
Summary Nissan has confirmed that its data was compromised in a cyberattack targeting a third-party vendor, after the Everest ransomware group claimed responsibility for exfiltrating 910GB of data. The stolen…
Summary Cybersecurity researchers at HUMAN’s Satori Threat Intelligence team have uncovered a novel ad fraud scheme dubbed “Pushpaganda” that weaponizes AI-generated content and search engine poisoning to infiltrate Google’s Discover…