Tag: breach
-
Hackers stole millions of US military personnel records during months-long data breach
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a months-long breach. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/30/hackers-stole-millions-of-us-military-personnel-records-during-months-long-data-breach/
-
Know Your Enemy: Browser-Based Attack Techniques in 2026
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to exfiltration playing out in the browser.Here are the six most dangerous techniques…
-
Attackers Target Developer Credentials to Expand Supply Chain Intrusions Beyond Source Code
Software supply chain attacks are increasingly evolving into cloud identity breaches, as attackers weaponize trusted packages to steal credentials from developer workstations and CI/CD environments before an application is ever executed. The result is a dangerous pivot: a routine dependency installation can give threat actors access to cloud accounts, source-code repositories, container platforms, secrets-management systems,…
-
Pentagon personnel database breach exposes personal data of millions
A Pentagon personnel database was breached for nine months without anyone noticing. Over three million people are affected. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/pentagon-personnel-database-breach-personal-data-millions
-
Android Malware Turns Gemini AI Into an Assistant for On-Device Attacks
A newly documented Android banking trojan named RATHat is demonstrating how generative AI can be operationalized inside mobile malware. The threat uses Google Gemini models to navigate unfamiliar Android interfaces, while its operator panel applies AI to identify higher-value victims from stolen SMS data. The malware disguises itself as legitimate applications, then relies on social…
-
Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches
Keio, a major Japanese railway operator, was hit by ransomware, disrupting business systems and forcing the company to shut down its network. Keio Corporation, one of Japan’s major private railway operators, was hit by a ransomware attack over the weekend, disrupting some of its business systems. The company detected a system failure early Saturday and…
-
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July.Neither the tax administration nor France’s national cybersecurity agency saw the data leave. The attack was not sophisticated, the agency, ANSSI, says in a report (in French) published on…
-
Dotted Line: How construction is dealing with cybersecurity in the age of AI
Contractors rank cybersecurity low on their priority lists. But lawyers say being prepared is critical when the inevitable breach occurs. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/construction-cybersecurity-AI/831637/
-
Automated AI agent used to breach cybersecurity nonprofit DIVD
The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as “loud and very, very messy.” First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/automated-ai-agent-used-to-breach-cybersecurity-nonprofit-divd/
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
OpenAI apologizes to Australia after its AI agents breached government sites
The company also detailed how some of those breaches had happened, and outlined additional measures it is taking to assess the impact of the events. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/29/openai-apologizes-to-australia-after-its-ai-agents-breached-government-sites/
-
Arizona Supreme Court says hackers stole residents’ personal data
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday. First seen on therecord.media Jump to article: therecord.media/arizona-supreme-court-says-hackers-stole-data
-
Arizona Supreme Court says hackers stole residents’ personal data
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday. First seen on therecord.media Jump to article: therecord.media/arizona-supreme-court-says-hackers-stole-data
-
Hackers exploit SQL injection flaw to steal patient data from Polish medical software provider
Hackers stole patient data from Qbusoft, a Polish medical software maker, weeks after a breach at another provider exposed records of nearly 19 million people in the country. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/29/qbusoft-medyc-data-breach-poland/
-
Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People
The Pentagon has confirmed a major data breach involving the Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information linked to more than three million individuals. The breach affects 2.76 million living people and approximately 294,000 deceased individuals. The scale of this exposure has intensified scrutiny on the DMDC, one of the Department…
-
Exclusive: ShinyHunters Says FBI Data Won’t Be Leaked When Ultimatum Ends
ShinyHunters tells Hackread it never planned to publish or sell stolen FBI data and says its ultimatum was part of a marketing campaign to counter FBI claims. First seen on hackread.com Jump to article: hackread.com/exclusive-shinyhunters-fbi-data-wont-be-leaked/
-
OpenAI Pauses Top Models as Rogue Agents Target Agencies
Outside Researchers Exposed Government and UN Incidents Before OpenAI Disclosures. OpenAI once again paused training and evaluation of its most capable models as news of more AI agents trying to hack into U.S. government agencies and the United Nations continues to surface. The attempted breaches show how much of what’s known about OpenAI’s misbehaving agents…
-
Times Car confirms data breach affecting 6.6 million user accounts
Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/times-car-confirms-data-breach-affecting-66-million-user-accounts/
-
Previously Convicted Dutch Hacker Arrested in ShinyHunters Odido Probe
Dutch police arrested convicted hacker Pepijn van der Stap in the ShinyHunters probe into the Odido breach, which exposed data belonging to millions of customers. First seen on hackread.com Jump to article: hackread.com/convicted-dutch-hacker-arrest-shinyhunters-odido-probe/
-
FBI reportedly declares ‘cyber security incident’ after hackers steal agents’ personal data
The bureau has not yet publicly confirmed a breach, but has told its agents that their personal information and Social Security numbers were exposed. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/28/fbi-reportedly-declares-cyber-security-incident-after-hackers-steal-agents-personal-data/
-
Anthropic Declines Australian AI Hearing as OpenAI Agent Breach Faces Scrutiny
Anthropic declined an Australian Senate AI hearing as officials investigate an OpenAI agent breach and consider mandatory AI incident reporting. The post Anthropic Declines Australian AI Hearing as OpenAI Agent Breach Faces Scrutiny appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-anthropic-australia-ai-hearing-openai-agent-breach-apac/
-
Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach
Tags: breachBitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/
-
Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach
Tags: breachBitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/
-
Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach
Tags: breachBitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bitget-restarts-withdrawals-387-5m/
-
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day
The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/28/fbi-job-portals-offline-shinyhunters-breach/