Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28buhnu2fiqpu3o5Reported to the California Attorney General on 09/18/2026. Date of breach: 12/28/2025, 01/22/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bthnu28ze7airqReported to the California Attorney General on 09/18/2026. Date of breach: 08/18/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28bshnu29yoyrpqeReported to the California Attorney General on 09/21/2026. Date of breach: 06/07/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmubn0w5a28brhnu2gp3yxhrfReported to the California Attorney General on 09/21/2026. Date of breach: 10/27/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6033ohmu2oenda9k8Reported to the California Attorney General on 08/18/2026. Date of breach: 04/08/2026, 04/09/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031lhmu2uk4tucipReported to the Washington Attorney General on 08/18/2026. Date of breach: 07/02/2026. 3,401 Washington residents affected. Information compromised: Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Passport Number.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031khmu22ki2yyo1Reported to the Washington Attorney General on 08/18/2026. Date of breach: 04/08/2026. 20,653 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70030hku219wwe2kfFederal agency hires North Korean IT worker Millions of Azure records allegedly for sale GitHub outage hits Actions and Copilot Get the show notes here: https://cisoseries.com/cybersecurity-news-north-korean-it-worker-lands-federal-job-azure-records-go-up-for-sale-github-goes-down/ Huge thanks to our sponsor, Vanta Your GRC team is dealing with more and more frameworks, vendors, and risk. The board wants it all in one place, but your compliance data lives all over. Vanta's agentic trust…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00echmu2beb7id31The current ransomware situation is a bit of a kludge (deep breath): a lot of ransomware (which often doesn't even involve "ware", it's just extortion) is carried out by kids who successfully make a truckload of money but can't spend it without
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700dwhmu2z5wmfq94A cybersecurity expert has demonstrated how computer-generated patterns can successfully prevent surveillance cameras from detecting vehicles - such as the controversial AI-powered Flock licence plate readers that are becoming increasingly common on American streets. Read more in my article on the Hot for Security blog.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6033qhmu22zufl53xReported to the California Attorney General on 08/17/2026. Date of breach: 08/11/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70031hku24w0nyodrMax severity SAP Commerce Cloud flaw now targeted in attacks New Mirai variant adds stealth capabilities to botnet code Shell investigates potential incident after Clop data theft claims Get the show notes here: https://cisoseries.com/cybersecurity-news-sap-commerce-flaw-exploited-mirai-boosts-capabilities-shell-investigates-breach/ Huge thanks to our sponsor, Vanta Your GRC team is dealing with more and more frameworks, vendors, and risk. The board wants it all in one place, but your…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00h5hmu2gkkud5og421 CVEs, a relatively small set of Edge patches, and two spicy stragglers Categories: Threat Research Tags: Patch Tuesday, MICROSOFT PATCH TUESDAY
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70032hku2mty08nxkRead the full stories at CISOSeries.com This week's Department of Know is hosted by Sarah Lane, with guests Peter Gregory, author of over 50 books on cybersecurity, and Michael Bickford, former CISO, New York State Gaming Commission, Unisys Security Consulting. Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com. A huge thanks to our sponsor, ThreatLocker…
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031qhmu2njgnmkv4Reported to the Washington Attorney General on 08/14/2026. Date of breach: 11/13/2025. 28,449 Washington residents affected. Information compromised: Name; Social Security Number; Financial & Banking Information; Full Date of Birth; Health Insurance Policy or ID Number.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031phmu2s2ul8ba7Reported to the Washington Attorney General on 08/14/2026. Date of breach: 05/26/2026. 11,417 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Military ID Number; Passport Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031ohmu2e0kse252Reported to the Washington Attorney General on 08/14/2026. Date of breach: 06/11/2026. 27,243 Washington residents affected. Information compromised: Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031nhmu2tmi1q036Reported to the Washington Attorney General on 08/14/2026. Date of breach: 05/26/2026. 5,909 Washington residents affected. Information compromised: Name; Social Security Number; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031mhmu25smdq9p4Reported to the Washington Attorney General on 08/14/2026. Date of breach: 06/05/2026. 9,214 Washington residents affected. Information compromised: Name; Full Date of Birth; Health Insurance Policy or ID Number; Medical Information; Protected Health Information owned or licensed by a HIPAA covered entity.
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq000xhnu2jif4kbhdIt can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of large advertising platforms. Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70033hku2zlww6fg1Akira affiliate's innovative "crash mode" attack almost worked WhatsApp rolls out scam alert feature White House looks to private sector for help against offensive hacking Show notes: https://cisoseries.com/cybersecurity-news-akiras-innovative-attack-whatsapps-scam-alert-white-house-tco-strategy/ Huge thanks to our sponsor, ThreatLocker AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them. Today's tip: an AI policy should be…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70034hku2hlmsv0mhUK eyes AI gene-synthesis guardrails DeadLock puts ransomware on the blockchain An evil twin flies home from DEF CON Episode show notes: https://cisoseries.com/uk-tackles-ai-bioweapon-risk-deadlock-goes-on-chain-evil-twin-flies-home-from-def-con/ Huge thanks to our sponsor, ThreatLocker AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700dxhmu2fxsbxgp0Would you like access to Anthropic's Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called "Poison Claude". Only problem is that it's run by fraudsters... Meanwhile, a phishing-as-a-service platform called "Greatness" has come up with something rather nasty: a phishing attack that doesn't need a fake website, a suspicious URL, or your password. Just a real Microsoft login page and a moment of misplaced trust - and the attackers walk off…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00edhmu2c388yxe6A little wind noise, a little connectivity flakiness, and a little lip-sync issues from YouTube, but look at that view! 🤩 Back to business, it's the Brinks Home FAQ I found most interesting this week. I mean, how do you write your own FAQ then fail to
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70035hku2rdo3o8r4Water systems get a federal cyber lifeline Hackers jump into Polish power plant Cyberattacks knock local governments offline Episode show notes: https://cisoseries.com/water-systems-cyber-lifeline-hackers-polish-power-plant-local-governments-offline/ Huge thanks to our sponsor, ThreatLocker Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted…
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq000yhnu2p8bvz8yjMicrosoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031rhmu2kwkndcguReported to the Washington Attorney General on 08/11/2026. Date of breach: 05/20/2026. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Student ID Number; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Username and Password/Security Question Answers; Email Address and Password/Security Question Answers.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp70036hku211x4a09nOpenAI loosens cyber limits for vetted defenders Sandworm's fake recruiters plant a poisoned VPN Royal Navy drones phone home to China Episode show notes: https://cisoseries.com/openai-loosens-cyber-limits-sandworms-poisoned-vpn-navy-drones-phone-china/ Huge thanks to our sponsor, ThreatLocker An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00h7hmu202muz679Lures on compromised WordPress sites led to installation of Deno and a Python-based infostealer Categories: Threat Research Tags: clickfix, Deno, WordPress