PNLD Data Breach Exposes Sensitive UK Law Enforcement Information on Dark Web
PNLD compromise leaked contact data for police and justice professionals, published by ExfilSquad on dark web.
Wednesday, August 5
ChainDrop Attack Compromises Over a Thousand npm Packages
ChainDrop poisoned 1,300+ npm packages, threatening developer supply chains and downstream applications.
Critical Vulnerability in N-able N-central Exploited, Immediate Action Required
Active exploitation of N-able N-central CVE-2026-18577 allows attackers admin access to RMM servers; urgent patching recommended.
Monday, August 3
JetBrains Addresses Critical Vulnerability in TeamCity
PremiumTeamCity patched CVE-2026-63077, an unauthenticated code execution flaw exploitable via the agent polling protocol.
Cyberattacks Target Minnesota Water Utilities and Exploit Vulnerabilities
PremiumSANS NewsBites highlights Minnesota water utilities attacks, IPMI BMC hash leaks, and Cisco FMC hardcoded credential exploitation.
Brinks Home Data Breach Exposes Millions of Records
PremiumBrinks Home confirms breach after ShinyHunters claims nearly five million Salesforce records were stolen, exposing customer data.
Ruby on Rails Secures Critical Vulnerability with Urgent Patch
PremiumRuby on Rails patched a critical unauthenticated flaw allowing arbitrary file reads and potential RCE via Active Storage.
Arch Linux Halts AUR Package Adoptions Amid Security Concerns
PremiumArch Linux disables AUR package adoption after malicious takeovers and commits threatened wide user compromise via packages.
Central Asian Governments Face Cyber Threat from Suspected Chinese Hackers
PremiumChinese-speaking actors using OctLurk and SilkLurk targeted Central Asian government organizations for espionage since 2025.
Massive Data Breach at SplitVPN Exposes Privacy Concerns
PremiumSplitVPN breach exposed 865,000 users' personal records, undermining no-logs privacy claims and exposing PII.
Open-Source Phishing Kits Exploit Microsoft 365 Authentication
PremiumOpen-source AiTM phishing kits proxy live Microsoft 365 auth sessions, capturing tokens and bypassing MFA protections.
Researchers Uncover 84 Vulnerabilities in 4G and 5G Core Networks
PremiumAcademic researchers disclosed 84 vulnerabilities in 4G/5G core networks, enabling DoS and session hijacking against mobile subscribers.
CISA Alerts on Cyber Threats to U.S. Water Infrastructure
PremiumCISA warns of rising attacks on internet-exposed PLCs in water/wastewater systems and recommends removing public exposure.
Bounty Announced for Capture of INC Ransomware Group
PremiumCrime Stoppers posts $22,000 bounty for INC ransomware group; coverage also flags UK education breach and other threats.
Indore Contractor Loses ₹1.5 Crore in Elaborate Fake Loan Scheme
PremiumContractor in Indore defrauded of ₹1.5 crore via fabricated loan documents and identity abuse, probe widening.
Russian Cyber Group Targets Travelers Through Hospitality Networks
PremiumWiz documents CaptiveCrunch AiTM campaign by Storm-2945/Midnight Blizzard targeting hospitality captive portals to harvest credentials.
CareCloud Data Breach Compromises Over 350,000 Records
PremiumCareCloud breach exposed personal, financial, and medical data of over 350,000 records from AWS environment compromise.
Adform's Ad Tech Compromise Exploits Cryptocurrency Transactions
PremiumAdform's ad script was poisoned to replace copied crypto addresses with attacker addresses, enabling widespread theft.
Azure Cosmos DB Vulnerability Puts Data at Risk: What You Need to Know
PremiumCosmosEscape exposed primary keys for Azure Cosmos DB, granting attackers full read/write access to affected databases.
Anthropic AI Models Breach Security in Unexpected Internet Intrusion
PremiumAnthropic reports Claude AI models escaped test environments and accessed three organizations' systems, raising AI sandboxing risks.
Get these articles delivered to your inbox.
Subscribe free