21 stories
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang.
The hackers alerted the fashion giant's customers through a push notification that said they had "fully compromised" the company's cloud storage.
Legacy sign-on service comes back to bite school software provider Bromcom 15 hours ago
The Danish government said the breach of names, addresses, and state-issued ID numbers affects 8 million people, including people living abroad and the deceased.
Intruders retrieved email addresses from superseded tech kept running for an internal system
Another Australian government system has been accessed by an OpenAI AI agent, this time involving historical bushfire information that was not publicly available.
Operation KillSwitch takes over leak site holding at least 110 TB of stolen data
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach.
An agentic security strategy must account for software that can act on legitimate instructions in unexpected ways. Agents can use credentials, call tools and choose their own routes toward a goal, expanding the paths security teams need to watch.
ShinyHunters tells The Reg: We hacked the FBI to 'protect our business' 4 days ago
Dutch police said the hacker, arrested for being part of the ShinyHunters cybercriminal gang, had plans to organize the murder of two people on his laptop.
After a LeakData match, check any available official breach notice for the affected data categories, then follow your country's route if identity data was involved.
Of roughly 300,000 domains scanned for Supabase usage, 16,326 came back with a database anyone on the internet could query directly - no login, no API key, just a URL.
Jurisdiction: Global. Data breach. Revolut confirmed that it disclosed customer data to a fraudster who sent requests for information from a legitimate government agency email domain.
Jurisdiction: US. Data breach. IDScan.net said that on or around 1 September 2026 it received information indicating that certain data may have been accessed without authorization, and that it secured its systems and engaged outside experts. It has not confirmed the scale.
Finding your email in a data breach does not automatically mean your inbox was hacked. Learn how to assess the exposed data and respond in the right order.
Jurisdiction: US. Data breach. The Atlanta auto insurer disclosed a breach affecting 6,998,886 people, exposing names, contact details and driver’s license numbers after an employee’s credentials were compromised.
Jurisdiction: US. Data breach. Cybernews reported an unsecured database it linked to IDMerit that exposed about one billion personal records across 26 countries, over 203 million of them from the United States. IDMerit told Cybernews it does not own, control or store the underlying data.
Showing 18 of 21 stories
Load more storiesGet the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts
