Data Breaches

Cyberattack on major Japanese telco exposed 12 million customer emails from ISP-managed systems and webmail stores.

Major medical device maker notifies nearly 4 million people after breach exposing SSNs and health-related data.

Major healthcare data breach exposed millions of patients’ personal and medical information, raising regulatory and patient-care risks.

OAuth token theft in Klue supply chain enables access to Salesforce data; investigation ongoing.

Fortinet credential theft campaign impacts half of internet-facing Firewalls and VPNs; urgency to rotate creds and patch exposed devices.

Attackers could trigger dangerous actions on Google Gemini by poisoned notifications, enabling control over smart devices and calls.

Google Android patches address a exploited zero-day plus 123 other flaws; prioritize devices exposed to internet or corporate networks.

Extortion group data leak; breach shows attacker access lasting months. Review data exposure and customer notification readiness.

Major retail breach affecting millions; highlights risk from third-party access and credential abuse. Prepare containment and notification playbooks.

Retail data breach affecting 185,000 individuals; exposed PII including emails and DOB. Immediate containment and notification required.

High-severity vulnerability in NGINX-related stack exposed services to DoS; ensure patches are applied and traffic is filtered from untrusted sources.

A critical unpatched vulnerability in ChromaDB allows unauthenticated attackers to execute code and take control exposed servers. Patch and rotate credentials immediately.

Instructure reached an extortion settlement to prevent data leaks from Canvas, affecting thousands of schools. Monitor for affected organizations and assess risk exposure.

Two OpenAI employee devices were compromised; credential material stolen from code repositories. No user data or production systems affected.

Initial access via social engineering on Teams; rapid persistence emphasis for defenders to harden collaboration tools and training.

New Mirai-derived botnet targets exposed ADB on IoT devices for large-scale DDoS; isolate exposed endpoints and rotate credentials.

Exim fixes address memory corruption, crash and data leakage risks across widely used mail servers.