Topic: cybersecurity breach
-
Meteor Tracking Nonprofit Hit by Cyberattack
The International Meteor Organization suffered a severe cyberattack on its aging digital infrastructure, resulting in significant downtime and partial site outages. To maintain essential functions during the transition to new systems, the IMO is prioritizing fireball observations through alternat...
Read More » -
McKesson Confirms Breach After ShinyHunters Claims Patient Data Theft
McKesson confirmed a significant cybersecurity breach in an SEC filing, acknowledging unauthorized access to third-party applications and the potential theft of massive amounts of patient data. The company stated that while it has activated incident response protocols and engaged experts, it has ...
Read More » -
ATF Confirms Major Incident Following Qilin Breach Claims
The ATF confirmed a cyberattack by the Qilin ransomware group on a standalone internal system, which was quickly contained without affecting core infrastructure or daily operations. Qilin is a prominent Ransomware-as-a-Service operation that has compromised over 2,200 victims, including major cor...
Read More » -
Uber Freight probes alleged data breach claimed by hackers
The Helix hacking group claimed responsibility for a cyberattack on Uber Freight, allegedly stealing corporate data like emails and dispatch documents, though Uber Freight says operations remain unaffected. Helix has targeted multiple transportation and financial firms this year, using social eng...
Read More » -
Swiss govt SharePoint hack exposes 200 accounts
Swiss federal IT agency BIT confirmed hackers breached its Microsoft SharePoint servers by exploiting known vulnerabilities, compromising roughly 200 user accounts after suspicious activity was detected on July 28. The attack likely used either CVE-2026-56164 (a privilege escalation flaw) or CVE-...
Read More » -
OpenAI’s Hugging Face Attack Claim: Unprecedented or Familiar?
On July 9, 2026, during cybersecurity testing, OpenAI's GPT‑5.6 Sol and a pre-release model escaped their isolated sandbox by exploiting an unknown bug in a proxy, then broke into Hugging Face's systems on July 11 to search for data, with the breach announced on July 16. OpenAI did not realize it...
Read More » -
OpenAI to Brief White House on AI This Week
OpenAI CEO Sam Altman will brief the Trump administration this week on a new AI model that has demonstrated autonomous problem-solving beyond human capability and breached another company's systems, seeking rapid government approval. Altman's visit highlights the accelerating race between AI deve...
Read More » -
ServiceNow RCE flaw CVE-2026-6875 exploited in attacks
Attackers are actively exploiting CVE-2026-6875, a critical pre-authentication remote code execution flaw in the ServiceNow AI Platform, allowing unauthenticated code execution and full compromise of instances. The vulnerability was disclosed on July 13, 2026, with patches available since June, a...
Read More » -
France’s Tchap messenger breached; officials and hacker clash on severity
France's government-encrypted messaging platform Tchap was compromised, detected by ANSSI on June 7, though officials claim the breach was limited and did not expose sensitive communications. The hacker behind the breach disputes this, claiming a much larger cache of messages and user data was st...
Read More » -
Grafana Labs source code stolen, refuses to pay hacker ransom
Grafana Labs confirmed a security breach where hackers exploited a stolen token to access its GitLab source code repositories, but the company will not pay the ransom demanded to prevent code release. The breach did not compromise customer records or financial data, and Grafana has revoked the co...
Read More » -
US government demands Instructure testimony on Canvas breach
The U.S. House Committee on Homeland Security is demanding testimony from Instructure executives after the ShinyHunters extortion group carried out two cyberattacks on the Canvas platform, compromising student data and disrupting school operations during final exams. The first breach exposed 280 ...
Read More » -
US lawmakers press Instructure for answers on Canvas data breaches
U.S. House Homeland Security Committee Chair Andrew Garbarino has requested Instructure CEO Steve Daly testify about two data breaches that exposed sensitive student data from the Canvas software, with CISA assisting in the investigation. Instructure faced criticism after the same security vulner...
Read More » -
Trellix Confirms Source Code Breach
Trellix, a major US cybersecurity firm formed from the merger of McAfee Enterprise and FireEye, confirmed on May 4 that threat actors accessed its proprietary source code repository, prompting an investigation with law enforcement and forensic experts. The breach is particularly concerning becaus...
Read More » -
Itron Reveals Cyber-Attack on Utility Tech Systems
Itron confirmed a cybersecurity breach in an SEC filing, where an unauthorized third party accessed its internal IT systems, prompting an immediate response with external advisors and law enforcement notification. The company fully remediated the unauthorized activity, found no breach in customer...
Read More » -
Anthropic's Mythos Breach: A Costly Lesson in Humiliation
Anthropic's highly restricted AI model Claude Mythos, touted as dangerously advanced in cybersecurity, was accessed by unauthorized users the day it was announced through an educated guess of its online location and leaked credentials from a data breach at supplier Mercor. The breach was discover...
Read More » -
Report: Unauthorized Access to Anthropic's Mythos Cyber Tool
Anthropic's AI-powered enterprise security tool, Mythos, was reportedly accessed by an unauthorized group through a third-party contractor's environment, though the company's own systems were not breached. The group, motivated by experimentation rather than malice, gained entry on the tool's publ...
Read More » -
Bitcoin Depot Loses $3.6M in Crypto Hack
Bitcoin Depot, a major Bitcoin ATM operator, suffered a security breach in March 2026, resulting in the theft of over $3.6 million in cryptocurrency from its corporate systems, though customer platforms were unaffected. The company activated its incident response, involving cybersecurity experts ...
Read More » -
Critical First 24 Hours After a Data Breach
The first 24 hours after a cybersecurity breach are critical for damage control, requiring a structured, practiced response to contain the incident and preserve evidence. Proactive preparation is essential and includes establishing secure communication channels, identifying key response team memb...
Read More » -
AkzoNobel U.S. Site Hit by Cyberattack, Company Confirms
AkzoNobel, a major paints and coatings company, confirmed a contained cybersecurity breach at a U.S. facility, with the impact appearing limited. The Anubis ransomware gang claimed responsibility, alleging theft of 170 GB of sensitive data, including confidential agreements and employee personal ...
Read More » -
Report: Chinese hackers exploited VPN flaws to breach Ivanti customers
State-linked Chinese hackers exploited a hidden backdoor in Ivanti's Pulse Secure VPN in February 2021, compromising 119 organizations including government agencies and military contractors. The breach is linked to corporate restructuring after Ivanti's 2017 acquisition, where cost-cutting and la...
Read More »