← Feed

Posts

• View post

  Rapid7 lays off 12% of staff as new CEO reshapes cyber firm https://www.databreachtoday.com/rapid7-lays-off-12-staff-as-new-ceo-reshapes-cyber-firm-a-32526

• View post

  The attack is coming from inside the meeting: Patch Zoom now to block vulnerabilities that a malicious meeting attendee could target to remotely exploit code on all other participants' systems. Old versions (update issued July 20) with E2EE enabled remain at risk. https://www.databreachtoday.com/zoom-flaws-facilitate-zero-click-remote-code-execution-a-32531

• View post

  Uncle Sam seeks private hackers to surveil and disrupt foreign criminal networks that target Americans. https://www.databreachtoday.com/uncle-sam-seeks-private-hackers-to-disrupt-criminal-networks-a-32549

• View post

  Weekly Breach Roundup —Delta Air Lines passenger launched an evil twin attack —LiteLLM attack exposed 430,000 pipelines —Russian nation-state hackers targeted Ukrainian IT workers with fake job interviews —Cisco warning over ClamAV flaws —Ransomware extortionists hacked a healthcare sector victim's Facebook —Yet more ClickFix attacks. https://www.databreachtoday.com/breach-roundup-def-con-dolt-suspected-in-delta-wi-fi-hack-a-32554

• View post

  Ransomware attack disables Canadian hospital's doors and HVAC. The incident underscores sometimes overlooked operational technology risks in healthcare environments. https://www.databreachtoday.com/ransomware-attack-disables-canadian-hospitals-doors-hvac-a-32535

• View post

  "The current lethality of the so-called drone kill zone has forced both sides to rely primarily on infiltration tactics using small groups or even individual soldiers when trying to take or reclaim territory, sometimes riding motorcycles, all-terrain vehicles, or horses." https://arstechnica.com/gadgets/2026/08/ukrainian-drones-wipe-out-entire-us-tank-brigade-in-live-war-game/

• View post

  Weekly Cryptohack Roundup —Harmony and BTCPay hacked —Violent crypto thefts surge —U.S. CFTC files a $48 million fraud case —NFT founder charged —North Koreans used artificial intelligence for crypto exploits —U.S. sanctions two Iranian exchanges https://www.databreachtoday.com/cryptohack-roundup-harmony-btcpay-exploits-a-32543

• View post

  Extortion gang Fulcrumsec has leaked on its darkweb site a second large cache of data the group claims it stole in a June attack on Novo Nordisk. The latest data dump allegedly includes the Danish drug maker's "complete enterprise Hugging Face artificial intelligence and machine learning ecosystem." https://www.databreachtoday.com/extortion-gang-leaks-novo-nordisks-ai-ml-ecosystem-a-32553

• View post

  Once more, with ShieldBreak: Microsoft ecosystem faces fresh zero-day at the hands of the researcher who goes by "Nightmare Eclipse," with the flaw allowing a low-privileged attacker to gain system-level control by exploiting Microsoft Defender's privileged scanning capabilities (because antivirus) to execute malicious code. https://www.databreachtoday.com/microsoft-faces-fresh-nightmare-eclipse-zero-day-a-32573

• View post

  @brianhonan Oof — risks upon risks

• View post

  Russia is targeting Ukraine using internet-connected cameras across Europe. The camera hacks facilitate the targeting of Ukrainian soldiers and materiel. https://www.databreachtoday.com/russia-targeting-ukraine-using-internet-connected-cameras-a-32566 #cyberespionage

• View post

  Seven Ukrainian civilians have asked a court in New York to order a US manufacturer to pay them more than $75 million, claiming the company has not done enough to prevent its technology from being used by Russia drone operators in perpetuating “a campaign of high-tech murder”. https://www.pinsentmasons.com/out-law/news/ukrainians-sue-us-manufacturer-over-tech-russian-drone

• View post

  A prolific Russian-speaking extortion group known for supply-chain attacks claimed to have stolen data from more than 40 firms including heavyweight corporations such as oil giant Shell and manufacturer General Electric. https://www.databreachtoday.com/clop-claims-data-theft-from-more-than-40-companies-a-32581

• View post

  Two weeks later: That's how long OpenAI said it'll pause frontier model training as it conducts a safety review https://www.databreachtoday.com/openai-pauses-frontier-model-training-for-safety-review-a-32610

• View post

  More than three weeks after a wave of cyberattacks struck dozens of rural and small town water and wastewater utilities in at least 12 states, experts are still trying to figure out what exactly the attackers thought they were doing. https://www.databreachtoday.com/baffling-case-inept-iranian-strikes-on-water-utilities-a-32604

• View post

  U.S. federal prosecutors charged 17 Iranian nationals with a decade-long hacking campaign that stole more than 31 terabytes of research and intellectual property from hundreds of universities, companies and government agencies around the world. https://www.databreachtoday.com/us-doj-charges-17-iranians-in-decade-long-hacking-campaign-a-32607

• View post

  Eight Democratic U.S. Senators are demanding answers from the U.S. State Department about why the United States is requiring that government officials have direct access to the health data systems of dozens of foreign nations as a condition for U.S. global health funding. https://www.databreachtoday.com/senators-probe-us-access-to-foreign-health-data-systems-a-32605

• View post

  Operational technology networks are at risk from stealthy 'living off the plant' attacks that abuse native OT functionality, are tough to detect, and pose physical safety and disruption risks, says Ric Derbyshire at Orange Cyberdefense. Here's how to defend against them: https://www.databreachtoday.com/living-off-plant-ot-attacks-pose-physical-safety-risk-a-32591

• View post

  Financially motivated hackers linked to China and tracked as Storm-1175 began deploying a new ransomware strain, possibly after exploiting a critical authentication bypass vulnerability in N-able's remote monitoring and management software, which is widely used by managed service providers. https://www.databreachtoday.com/china-linked-hackers-exploit-n-able-flaw-in-ransomware-attacks-a-32506

• View post

  Meta glasses banned from courts in England and Wales https://www.theguardian.com/technology/2026/aug/11/meta-glasses-banned-from-courts-in-england-and-wales #privacy

• View post

  Exfiltration-focused gang ExfilSquad has started dumping stolen data. The cities of Atlanta and Houston, plus British police, Newcastle University and Frontier Airlines are among the group's claimed victims. https://www.databreachtoday.com/exfiltration-focused-exfilsquad-starts-leaking-stolen-data-a-32494

• View post

  While Lepore’s book examines technocratic philosophies that go back centuries, she argued that many of Silicon Valley’s “charismatic or not-so-charismatic leaders” — especially Elon Musk — seem to be ushering in a future pulled from misread pulp science fiction and comic books. https://techcrunch.com/2026/08/09/historian-jill-lepore-says-the-tech-industry-is-led-by-bad-readers-who-are-undermining-democracy/

• View post

  Fresh N-able zero day puts MSPs on defensive: second hotfix issued for remote management and monitoring technology widely used by managed security providers https://www.databreachtoday.com/new-n-able-zero-day-puts-msps-on-defensive-a-32458

• View post

  Financial services is under fire from rebranded extortionists. Originally called BlackFile, the vishing-savvy, supposedly retired group is now operating as Redact, Pink, Helix and Falcon. https://www.bankinfosecurity.com/financial-services-under-fire-from-rebranded-extortionists-a-32464

• View post

  The use of web tracking pixels that transmit healthcare website and patient portal users' to third-party marketing and advertising firms has been the subject of many data breach investigations, regulatory enforcement actions and proposed civil class action lawsuits over the last several years. https://www.databreachtoday.com/court-tosses-web-tracker-suit-against-crh-healthcare-a-32447

• View post

  GPS signals can be jammed, spoofed or lost. The U.S. government is trying to address those risks by promoting a new-generation quantum clock, known as optical atomic clocks, and creating a market for the ultra-precise and resilient timing technology. The program, called "It's About Time," is the next step to DARPA's 2022 Robust Optical Clock Network initiative that created compact versions of the chunky optical clocks in lab configurations. These clock prototypes have gone th...

• View post

  Beacon CRM, widely used by charities, suffers data breach, with English National Ballet being among the confirmed victims notifying supporters https://www.databreachtoday.com/beacon-crm-widely-used-by-charities-suffers-data-breach-a-32420

• View post

  Pharmaceutical maker Amgen has notified the U.S. Securities and Exchange Commission that cybercriminals may have stolen a cache of sensitive company data, including patient information, intellectual property, research and development and other confidential business files. https://www.databreachtoday.com/amgen-tells-sec-hack-exposed-patient-data-trade-secrets-a-32401

• View post

  New York pours $9 million into water cyber defense amid attacks https://www.databreachtoday.com/new-york-pours-9m-into-water-cyber-defense-amid-attacks-a-32403

• View post

  Hackers are using hotel Wi-Fi networks across the United States, India and Saudi Arabia to steal credentials, exfiltrate data and spread malware onto personal devices, researchers warn. https://www.databreachtoday.com/travelers-beware-russian-intel-hacking-hotel-wi-fi-a-32405