Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28buhnu2fiqpu3o5Reported to the California Attorney General on 09/18/2026. Date of breach: 12/28/2025, 01/22/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bthnu28ze7airqReported to the California Attorney General on 09/18/2026. Date of breach: 08/18/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bshnu29yoyrpqeReported to the California Attorney General on 09/21/2026. Date of breach: 06/07/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28brhnu2gp3yxhrfReported to the California Attorney General on 09/21/2026. Date of breach: 10/27/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00h6hmu29cxty0faAttack TTPs combine fileless execution, wide LOLBin use Categories: Threat Research
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700dyhmu29hdfu1ibA growing number of UK venues have decided to act against privacy-busting smart glasses. Read more in my article on the Hot for Security blog.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031shmu22dej31a0Reported to the Washington Attorney General on 08/10/2026. Date of breach: 08/08/2025. 657 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Passport Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70037hku2acnz2qccOpenAI slows release of Astra model citing cyber capabilities Irregular won't say if there were more rogue incidents U.S. cyber ambassador nominee Cassady confirmed in Senate Episode shownotes: https://cisoseries.com/cybersecurity-news-openai-slows-astra-irregular-wont-talk-senate-confirms-cassady/ Huge thanks to our sponsor, ThreatLocker AI is helping attackers research targets, create malicious code, and adapt faster. But the fundamentals have not changed. Code still needs to execute,…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700dzhmu2aemxho3yf someone offered you 90% off the official price to access Claude, the powerful AI model from Anthropic, would you be tempted? It turns out that around 900 people were, and they may be regretting their decision. Read more in my article on the Fortra blog.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031uhmu26qi20ondReported to the Washington Attorney General on 08/07/2026. Information compromised: Name; Full Date of Birth; Other; Protected Health Information owned or licensed by a HIPAA covered entity.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031thmu2lxgq5tjgReported to the Washington Attorney General on 08/07/2026. Date of breach: 05/12/2026. 1,155 Washington residents affected. Information compromised: Name; Social Security Number; Health Insurance Policy or ID Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70038hku2lzsjv4wdApple's bug bounty program overwhelmed by fake AI generated reports China launches cybersecurity review into Palo Alto Networks products Meta AI hacks external systems during cybersecurity testing Get the show notes here: https://cisoseries.com/cybersecurity-news-faked-bug-reports-metas-rogue-ai-china-investigates-palo-alto/ Huge thanks to our episode sponsor, ThreatLocker AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate…
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq000zhnu2j9huqhhvA 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700e0hmu2ptse12xnApple has imposed strict new submission limits on its bug bounty portal after finding itself overwhelmed by low-quality, AI generated vulnerability reports - many of which were found to be describing security flaws that simply didn't exist. Read more in my article on the Hot for Security blog.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70039hku2x4ia36oeAI safety tests spill onto the real internet Private Relay flaw unmasks IP addresses Weak telcos left door open for Salt Typhoon Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-safety-tests-reach-the-internet-private-relay-flaw-unmasks-ips-weak-telcos-invite-salt-typhoon/ Huge thanks to our episode sponsor, ThreatLocker AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700e1hmu22satr1pgGraham gets a phone call from the police. Well, someone who sounds convincingly like the police. There's just one small problem: what they really want is the 24-word seed key to Graham's cryptocurrency wallet. Meanwhile, if you've stayed in a hotel recently, the free Wi-Fi you connected to might have come with an unexpected extra: an all-you-can-eat buffet of "Captive Crunch" for a Russian intelligence-linked hacking group. And a group calling itself the "ExFilSquad" has walked off with 600,000…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003ahku2ll41o4voChainDrop attack hits npm Pass-ta-key attacks target passkeys AI accounts for most cybercrime in Africa Get the show notes here: https://cisoseries.com/cybersecurity-news-chaindrop-hits-npm-pass-ta-key-targets-passkeys-ai-runs-amok-in-africa/ Huge thanks to our episode sponsor, ThreatLocker Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031vhmu225x37z44Reported to the Washington Attorney General on 08/04/2026. Date of breach: 12/02/2025. 37,253 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700e2hmu223t32x1aDo you hold cryptocurrency? Have you received a letter telling you that you must register with a so-called "Digital Asset Compliance Portal"? If so, it's time to hit the brakes, because it sounds like someone is trying to scam you. Read more in my article on the Hot for Security blog.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003bhku2z1svr41xWhen license plate readers become stalking tools ExfilSquad dumps UK police contact data China-linked hackers shrink the patch window Get the show notes here: https://cisoseries.com/cybersecurity-news-license-plate-readers-as-stalking-tools-exfilsquad-dumps-uk-police-data-the-ever-shrinking-patch-window/ Huge thanks to our episode sponsor, ThreatLocker An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act.…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00h9hmu22avl8jxsAfter compromising systems via CVE-2026-18577, threat actors use the additional RMM tools and network tunnels to establish persistent remote access Categories: Threat Research Tags: RMM, N-able, vulnerability
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00h8hmu2l2fq46c7Multiple legitimate DFIR tools abused by GOLD EMBRACE double-extortion specialists Categories: Threat Research
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031whmu25bg4vghcReported to the Washington Attorney General on 08/03/2026. Date of breach: 12/03/2025. 2,226 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Passport Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003chku2bwh5zs0oUK's state investments agency suffers data breach CISA tells utilities to remove internet-exposed PLCs following Minnesota attacks Anthropic says its AI hacked real-world companies in three incidents Get the show notes here: https://cisoseries.com/cybersecurity-news-cybersecurity-news-uk-investments-agency-breach-cisa-water-warning-anthropic-threesome/ Huge thanks to our episode sponsor, ThreatLocker AI is helping attackers research targets, create malicious code, and adapt faster. But the…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00eehmu2g0bp6qkmToday, we welcome the 47th government onboarded to Have I Been Pwned’s free gov service: Nepal. Their National Cyber Security Centre now has access to monitor Nepalese government domains against the data in HIBP. This gives the NCSC the ability to identify exposure across government email addresses and
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00efhmu2s0wpqxfxApparently, Aussies are so obsessed with coffee that it's referred to as the coffee capital of the world down here (some bits, at least). "But what about Italy?" people ask. Having spent a lot of time in a lot of Italy, no, it's just
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7003dhku2fi6qhl1bThis week's Department of Know is hosted by Rich Stroffolino, with guests Janet Heins, CISO, ChenMed, and Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University. Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com. Huge thanks to our sponsor, Pindrop A finance worker joined a video call with their CFO and wired $25 million…
Link — click to select, then copy:
https://breachfeed.com/article/cmttm0odu018khmu2dpvjqioiBlack Hat USA 2026 arrives at a point when security leaders are being asked to move faster in two directions at once. They have to respond to attacks that are increasingly automated, identity-driven, and difficult to contain, while also deciding how much autonomy they are prepared to introduce into their own security operations. The show floor will be filled with AI SOC, Agentic SOC, autonomous defense, machine-speed response, and AI-native platform claims. The more useful question is what…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031xhmu2pdi0pkiuReported to the Washington Attorney General on 07/31/2026. Date of breach: 12/02/2025. 21,308 Washington residents affected. Information compromised: Name; Social Security Number; Full Date of Birth; Medical Information.