Maine has taken its public data breach reporting portal offline after fraudulent breach disclosures were published on the state's website, prompting a review of procedures to prevent abuse in the future.

Danish pharmaceutical giant Novo Nordisk, the world's largest producer of insulin, disclosed a data breach affecting patient information from some clinical trials.

In an unusual misinformation campaign, fraudulent data breach disclosures were submitted to Maine's official breach portal and publicly posted before their legitimacy could be verified, prompting companies to deny the claims.

Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks.

New out of Boston: A suspected Russian hacker who was arrested last year in Thailand at the FBI's behest is now in U.S. custody and has been charged ​with facilitating a campaign of cyberattacks carried out by a Russia-aligned ‌group called Void Blizzard. www.reuters.com/legal/govern...

Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations.

🚨 NEW 🚨 The Justice Department gagged Apple from talking about surveillance on a senior Republican staffer that's been going on for at least the last three years. Apple fought the non-disclosure orders and won. It's now informed the target. www.forbes.com/sites/the-wi...

ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from customer instances.

The United Nations' World Food Programme (WFP), the world's largest humanitarian organization, revealed over the weekend that its self-registration application (SRA) for Palestine was breached.

Microsoft's digital crimes unit said it would pursue security researchers who "irresponsibly" disclose 0day. But it's simple: Redmond can't dictate what researchers do with bugs. If you can't entice hackers to disclose bugs via your preferred channels, that's a you problem! (aka skill issue)

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a link.

Palo Alto Networks is warning that hackers are now exploiting a PAN-OS GlobalProtect authentication bypass flaw, tracked as CVE-2026-0257, in attacks attempting to breach corporate networks.

Are Microsoft arguing that releasing proof of concept is a crime if you don't get their approval first? Because this seems to lump a security researcher not going along with their preferred disclosure process in with "criminal activity".

U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid.

The FBI warned on Tuesday that the Silent Ransom Group (SRG) extortion gang is now targeting U.S.-based law firms in in-person data theft attacks.

Huawei has not explained why no CVE has been issued for the vulnerability that caused Luxembourg’s nationwide telecoms outage. Ten months later, it remains unclear whether the vuln was ever fully patched, how many operators may have been exposed or whether similar systems remain vulnerable today.

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.

OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and PyPI packages, causing the company to rotate code-signing certificates for its applications as a precaution.

Confirmed! Orange Tsai (@orange_8361) of DEVCORE Research Team (@d3vc0r3) chained 4 logic bugs to achieve a sandbox escape on Microsoft Edge, earning $175,000 and 17.5 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

The U.S. House Committee on Homeland Security is calling on Instructure executives to testify about two cyberattacks by the ShinyHunters extortion group that targeted the company's Canvas platform, allowing threat actors to steal student data and disrupt schools during final exams.

The attack on the Trellix source code repository disclosed last week has been claimed by the RansomHouse threat group, which leaked a small set of images as proof of the intrusion. www.bleepingcomputer.com/news/securit...

A new Linux zero-day vulnerability, named Dirty Frag, allows local attackers to gain root privileges on most major Linux distributions with a single command.

Ivanti warned customers today to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) exploited in zero-day attacks.

The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million data records for students and staff from 8,809 colleges, school districts, and online education platforms.

Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository.

A critical cPanel authentication bypass vulnerability (CVE-2026-41940) is being exploited in widespread "Sorry" ransomware attacks days after the release of an emergency update. www.bleepingcomputer.com/news/securit...

Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or elevated administrator permissions.

Microsoft has rolled out a fast-track process to help developers regain access to accounts recently suspended from its Windows Hardware Program, following widespread complaints that they were locked out without warning.

Fancy Bear (APT28) hackers compromised at least 284 inboxes between September 2024 and March 2026. “In Romania, the hackers compromised at least 67 email accounts maintained by the ​Romanian Air Force, including several ⁠belonging to NATO airbases” www.reuters.com/world/russia...

Attackers have been exploiting a zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December.

The European Union's Cybersecurity Service (CERT-EU) has attributed the European Commission cloud hack to the TeamPCP threat group, saying the resulting breach exposed the data of at least 29 other Union entities.

Stryker Corporation, one of the world's leading medical technology companies, says it's fully operational three weeks after many of its systems were wiped out in a cyberattack claimed by the Iranian-linked Handala hacktivist group.

NASA’s mission to orbit the Moon is being interrupted by Outlook (New) and Outlook (classic) both refusing to open 😂

Hackers hijacked the npm account for Axios, a JavaScript HTTP client with 100M+ weekly downloads, and published malicious versions that delivered RAT malware to Linux, Windows, and macOS systems. www.bleepingcomputer.com/news/securit...

The Dutch Ministry of Finance took some of its systems offline, including the digital portal for treasury banking, while investigating a cyberattack detected two weeks ago.

The European Commission is investigating a security breach after a threat actor gained access to its Amazon cloud infrastructure.

Hungarian opposition leader Peter Magyar has accused the ruling government of using the Candiru spyware against his TISZA party x.com/magyarpeterM...

Oracle has released an out-of-band security update to fix a critical unauthenticated remote code execution vulnerability in Identity Manager and Web Services Manager tracked as CVE-2026-21992.

The FBI has issued a public service announcement warning that Russian intelligence-linked threat actors are actively targeting users of encrypted messaging apps such as Signal and WhatsApp in phishing campaigns that have already compromised thousands of accounts.

The FBI has seized two websites used by the Handala hacktivist group after the threat actors conducted a destructive cyberattack on medical technology giant Stryker that wiped approximately 80,000 devices.

The Handala hacktivist group (which claimed the cyberattack on medical technology giant Stryker last week) used the wipe command in Microsoft’s Intune cloud-based endpoint management service to erase data from nearly 80,000 devices. www.bleepingcomputer.com/news/securit...

Starbucks has disclosed a data breach affecting hundreds of employees after threat actors gained access to their Starbucks Partner Central accounts.

Salesforce is warning customers that hackers are targeting websites with misconfigured Experience Cloud platforms that give guest users access to more data than intended. However, the ShinyHunters extortion gang claims to be actively exploiting a new bug to steal data from instances.

Ericsson Inc., the U.S. subsidiary of Swedish networking and telecommunications giant Ericsson, says attackers have stolen data belonging to an undisclosed number of employees and customers after hacking one of its service providers.

We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously. 1/7

The U.S. Federal Bureau of Investigation (FBI) confirmed on Thursday that it's investigating a breach that affected systems used to manage surveillance and wiretap warrants.

The Wikimedia Foundation suffered a security incident today after a self-propagating JavaScript worm began vandalizing pages and modifying user scripts across multiple wikis.

The FBI has seized the LeakBase cybercrime forum, a major online forum used by cybercriminals buy and sell hacking tools and stolen data.

SCOOP: An internal DHS document obtained by 404 Media shows for the first time CBP used location data sourced from the online advertising industry to track phone locations. This surveillance can happen through all sorts of apps, such as video games, news apps, weather trackers, and dating apps.