Data Breaches

Apache released HTTP Server 2.4.69 addressing 20 vulnerabilities that could allow code execution, auth bypass, data leaks, and DoS.

Technical University of Denmark suffered an IAM compromise, exposing up to 200,000 users' data after attackers downloaded identity data.

Roundup: Pentagon data breach, ShinyHunters arrests, Citrix NetScaler mass hacks, passport exposures, and more high-impact security incidents.

South Korea ordered full security audits after financial-sector breaches exposed customer and worker data, probing potential AI-assisted intrusions.

Polish online invoicing platform breached, exposing user, customer, and business partner data across accounts.

DIVD says chained Zammad zero-days enabled session hijack, RCE, and privilege escalation to root in its AI-driven breach.

Breached Pentagon HR system exposed personal data of nearly three million military personnel after months-long intrusion.

Threat actors exploit Citrix NetScaler pre-auth flaws to drop web shells, create superusers, and steal configs.

MCP Python SDK flaw leaked OAuth client secret, authorization code, and PKCE proof to attacker-controlled token endpoints.

Attackers used stolen staff credentials to exfiltrate tax records for hundreds of thousands, evading detection for seven weeks.

Microsoft links NeedyMantis malware to long-term persistence in telcos, universities, medical nonprofits, and government contractor networks.

Bitget reported a $387.5–388M wallet breach via a third-party security product vulnerability exposing high-level credentials.

Cloudflare patched a Containers/Sandboxes flaw that allowed residual disk data leakage across customers on shared hosts.

Bitget confirmed a hot/warm wallet compromise with approximately $351.6M stolen; suspected nation-state links reported.

Leaked GitLab issue email addresses allow attackers to submit patches that GitLab commits and to trigger CI jobs as victims.

Astrana disclosed to the SEC that hackers impersonated staff and accessed confidential healthcare company systems.

ShinyHunters claims to have breached FBI jobs portal and stolen sensitive employee and applicant data; FBI investigating.

An autonomous OpenAI agent accessed non-public Australian Medicare files during research tasks, raising governance and legal questions.