Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28buhnu2fiqpu3o5Reported to the California Attorney General on 09/18/2026. Date of breach: 12/28/2025, 01/22/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bthnu28ze7airqReported to the California Attorney General on 09/18/2026. Date of breach: 08/18/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bshnu29yoyrpqeReported to the California Attorney General on 09/21/2026. Date of breach: 06/07/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28brhnu2gp3yxhrfReported to the California Attorney General on 09/21/2026. Date of breach: 10/27/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq0011hnu2ag8h901hThe home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG's webOS store allow unknown third-parties to route their Internet traffic through a user's TV.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0328hmu2spuiotn2Reported to the Washington Attorney General on 07/21/2026. Date of breach: 10/05/2025. 724 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Other; Protected Health Information owned or licensed by a HIPAA covered entity.
Link — click to select, then copy:
https://breachfeed.com/article/cmttm0odu018lhmu2glim66d6Choosing an AI-managed SOC partner is not just a question of who has the strongest AI story. It is a question of who can operationalize AI in a way that is visible, controlled, and accountable once the service is live. In this blog, we look at what security leaders should actually evaluate when comparing AI-managed SOC partners, and why trust in the model depends more on workflow design than on claims of autonomy.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00ehhmu2s8p4bz25I reckon this week's video on how Claude is tying together info from UniFi, Home Assistant and the Pi-Hole is an absolute ripper. Or at least the concept is - if ever there was an actual value proposition for AI it's taking lots of noise and
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003nhku2jdwfs8tfHugging Face fights AI hacks with AI World Cup streamers get a red card WordPress enters a patching race Get the show notes here: Huge thanks to our sponsor, QuilrAI AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision Engine evaluates the content, context, and intent of every action - before it completes. Alerts tell you later. QuilrAI decides now. Visit quilr.ai.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00hchmu27qwb8qq6AI deluge brings 575 CVEs, 479 advisories, reset to blog-post format Categories: Threat Research Tags: x-ops, Patch Tuesday, MICROSOFT PATCH TUESDAY
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003ohku2u62tpatdDairy company Fairlife suffers cyberattack Microsoft warns of surge in ACR Stealer attacks on customers Abbott Labs investigates two cyber incidents amid extortion claims Get the show notes here: https://cisoseries.com/cybersecurity-news-fairlife-dairy-cyberattack-acr-stealer-surge-abbott-labs-incidents/ Huge thanks to our sponsor, QuilrAI AI agents don't ask permission. They act -- moving data, triggering workflows, changing systems. QuilrAI is the permission layer they never had. Its Decision…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003phku2a4rxeobi"Context Bombing" flips the script on prompt injections Pentagon suspends CMMC Phase II requirements Old tech, new problems Get the show notes here: https://cisoseries.com/the-department-of-know-cmmc-suspended-sharefile-shutdown-context-bombing-strikes-back/ This week's Department of Know is hosted by Rich Stroffolino, with guests Tom Hollingsworth, networking technology advisor, Futurum Group, and Mark Eggleston, former CISO, CSC. Missed the live show? Check it out on YouTube. The Department…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e032ahmu2h4p955f8Reported to the Washington Attorney General on 07/17/2026. Date of breach: 12/05/2025. 651 Washington residents affected. Information compromised: Name; Full Date of Birth; Passport Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0329hmu2kuy7942tReported to the Washington Attorney General on 07/17/2026. Date of breach: 08/09/2025. 2,110 Washington residents affected. Information compromised: Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Passport Number; Medical Information; Other.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003qhku2wcj1lga5ClickLock stealer uses kill loops to force password entry TELEPUZ malware uses ClickFix to steal data and run commands 1Password's new Agentic Mode lets Claude log into accounts Notes: https://cisoseries.com/cybersecurity-news-clicklocks-kill-loops-telepuz-clickfix-tricks-1passwords-agentic-login/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e032chmu2s1neq8txReported to the Washington Attorney General on 07/16/2026. Date of breach: 05/17/2026. 148,300 Washington residents affected. Information compromised: Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e032bhmu2ogfiw4sqReported to the Washington Attorney General on 07/16/2026. Date of breach: 05/21/2026. 1,891 Washington residents affected. Information compromised: Name; Social Security Number; Full Date of Birth.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003rhku20mk2qvqoZoom's account takeover wake-up call Two zero-days, one urgent SonicWall patch 23andMe's breach bill keeps growing Show Notes: https://cisoseries.com/cybersecurity-news-zooms-wake-up-call-zero-day-sonicwall-patch-23andmes-growing-breach-bill/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00eihmu2btagyeyw"Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloody good at 23:00 the other night after travelling 33 hours from Paris only to find the IoT doorlock batteries dead and the
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00hdhmu2sj4dy6d8Categories: Threat Research Tags: advisory, Vulnerabilities, SonicWall
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq0012hnu2fel0146rMicrosoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003thku2voh7gf1yRussia's router access routes MemGhost haunts AI memory DHS alert got waved off… twice Get the show notes here: https://cisoseries.com/cybersecurity-news-russias-router-access-routes-memghost-haunts-ai-memory-dhs-alert-got-waved-off-twice/↗ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind…
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq0013hnu25m8aud90The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys -- in a public GitHub repository for almost six months before being notified by KrebsOnSecurity. Experts say the gaps identified in the agency's initial response provide important lessons that all security teams should absorb.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp9003uhku22ojbxumcWindows backdoor stuffs multiple wipers and ransomware code into a single package NSA brings back Tailored Access Operations name for elite hacking unit Progress urges ShareFile customers to shut down storage zone controllers Show notes: https://cisoseries.com/cybersecurity-news-multifunction-windows-backdoor-nsa-revives-tao-urgent-sharefile-warning/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzpa003vhku2l3ltv4jrLink to the episode This week's Department of Know is hosted by Rich Stroffolino, with guests Davi Ottenheimer, principal, Flying Penguin, and Chris Ray, field CTO, GigaOm. Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com. Huge thanks to our sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news:…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzpa003whku2psnwsf3nInterpol's fraud sweep goes global China flags Claude Code Old GitHub accounts, new tricks Get the show notes here: https://cisoseries.com/cybersecurity-news-interpols-global-fraud-sweep-chinas-claude-code-flag-old-github-account-tricks/ Thanks to our episode sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team uses, scoring the risk,…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzpa003xhku2b8hdb6fcMexico's first cyber test gets tested Snoops break into Roundcube mailservers Cash App owner pays up over lax security Get the show notes here: https://cisoseries.com/cybersecurity-news-mexicos-big-cyber-test-roundcube-mailserver-snooped-on-cash-app-found-lax/ Thanks to our episode sponsor, Vanta Your team just added its 67th AI tool. And unfortunately, also your 67th security blind spot. The good news: The Vanta Agent works like a GRC engineer in the background, finding every app your team…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00ejhmu2s3yn57csHow's this for a location?! I mean, last week was nice with Scott in Mallorca, but Marrakech is, well, wow 😮 Anyway, about those data breaches... This week I'm talking about the futility of attempting to remove piss from a pool, yet here we are, with