Infosecurity-magazine

Thomson Reuters disclosed a C-Track breach exposing sealed court data and PII across US and Canadian jurisdictions.

McKesson investigates a data-theft extortion incident after ShinyHunters claimed to steal roughly 284 million records.

OpenAI calls the Hugging Face breach a warning after agent coordination on an unauthorized message board enabled the compromise.

CISA added six actively exploited vulnerabilities to its KEV catalog affecting Microsoft, Linux, Red Hat and Citrix products.

Boston Scientific reports global operational disruption and shipment delays after a cyber incident impacting IT systems.

Iran-linked cyberattack on a UK power plant underscores vulnerabilities in critical national infrastructure and small energy assets.

Australian authorities warn of active exploitation of a critical TeamCity flaw; customers urged to patch immediately.

FBI warns Medusa Ransomware affiliates breached over 500 critical infrastructure orgs via improved RaaS tactics and tools.

US advisory warns AI-generated exploit scripts are targeting exposed Siemens S7 PLCs in industrial environments.

Flashpoint reports infostealers exfiltrated 1.7 billion credentials in the first half of 2026, fueling account takeover risk.

Critical AIT-GUI vulnerabilities allow unauthenticated attackers to issue spacecraft commands and manipulate ground-control scripts.

Gunra actors exploit Fortinet vulnerabilities to exfiltrate large volumes of Microsoft service data, targeting critical infrastructure.

CERT.PL reports Russian-linked hackers accessed a Polish power plant OT network via a private APN, impacting critical infrastructure.

Microsoft issued massive Patch Tuesday fixes including multiple zero-days, with some exploited in nation-state campaigns.

Ceva Logistics suffers supply-chain data breach, disrupting warehouse operations and impacting multiple European retail customers.

Ransomware incidents spiked in July, with finance, technology and healthcare disproportionately targeted per report.

ChainDrop npm worm compromised 400+ packages, impacting components with combined monthly installs exceeding two billion.

Coldcard hardware wallet firmware bug exploited, resulting in $89M stolen and product inventory destroyed to prevent further compromise.