Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu9wrdj92oihhmu28lwqb5uaHackers Prove Florida DMV Breach by Leaking Jeffrey Epstein's Driver Record Startup Fortune
Link — click to select, then copy:
https://breachfeed.com/article/cmu8x3xyi0jryhmu2cqyg3zwuLTFRB probes data breach as platform goes offline Inquirer.net
Link — click to select, then copy:
https://breachfeed.com/article/cmu9uicx92jtmhmu2azugp3ivRNLI warns supporters their personal information may have been hacked The Guardian
Link — click to select, then copy:
https://breachfeed.com/article/cmu9dai811iqphmu28nxg47r3Minor impact · Investigating — We are investigating increased latency processing Events coming from inbound emails. As a result of this issue, some users may see delays or gaps in the event stream or for event queries on dashboards and for events based workflows such as on-call notifications
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1y7r000mhnu2ucviz57xView CSAF Summary The following versions of Rockwell Automation Logix Platform are affected: ControlLogix 5580 <=V33, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012 (CVE-2026-9637, CVE-2026-9637, CVE-2026-9637, CVE-2026-9637) CompactLogix 5380 <=V33, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012 (CVE-2026-9637, CVE-2026-9637, CVE-2026-9637, CVE-2026-9637) GuardLogix 5580 <=V33, V34.011-V34.014, V35.011-V35.013, V36.011-V36.012 (CVE-2026-9637, CVE-2026-9637, CVE-2026-9637, CVE-2026-9637)…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7002ohku2h9yfbie9Claude sessions get hijacked Anthropic is warning that common infostealer malware is stealing active Claude browser sessions, letting attackers get into accounts and burn through paid usage without needing a password or two-factor code. The company is signing affected users out, removing stored payment methods and refunding unauthorized charges. But revoking the session doesn't remove the malware, so victims still need to clean the device, change credentials and revoke other active sessions.…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00h3hmu2g1ezehyqAnalysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates Categories: Threat Research Tags: ransomware as a service, The Gentlemen, GOLD SHERWOOD, Ransomware
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c7hmu2eqzxg21iA threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to an unknown number of users.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c8hmu21ke933b2The ClickFix-style campaign features a sophisticated, multistage attack chain that includes reverse tunnels into victim organizations' networks.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c9hmu2bgk1q9fqWhile guardrails are critical, as evidenced by recent high-profile incidents, defenders need help staying ahead of attackers who do not play by the rules.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00cahmu2htb98dyhOpenAI's Hugging Face attack postmortem shows agents don't care about rules — they need strong controls.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf60335hmu2mowd0cofReported to the California Attorney General on 08/31/2026. Date of breach: 03/19/2026, 03/22/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf60334hmu24rm30eqnReported to the California Attorney General on 08/31/2026. Date of breach: 02/28/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1y7r000nhnu2rznijirgCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7002phku2dovbjf9eServiceNow warns of three maximum severity security vulnerabilities PaperCut zero-day exploited in attacks Healthcare giant McKesson discloses breach Get the full show notes here: https://cisoseries.com/cybersecurity-news-servicenow-vulnerabilities-warning-papercut-zero-day-mckesson-healthcare-breach/ Huge thanks to our episode sponsor, KnowBe4 Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7002qhku2qcc70zdhRead the full stories at CISOSeries.com. This week's Department of Know is hosted by Rich Stroffolino, with guests Jason Elrod, CISO, MultiCare Health System, and Chris Ray, field CTO, GigaOm. Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com. A huge thanks to our sponsor, ThreatDown Managing an enterprise-sized attack surface without a dedicated SOC? As attackers…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00cbhmu27k37cuppThe Hugging Face incident was bigger and worse than previously thought, with approximately 700 agents collaborating on a sophisticated, multistage attack.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00cchmu2cxg5z4noOmdia's Theresa Lanowitz talks with the Dark Reading News Desk about the potential — and risks — of using agentic AI for penetration testing, red teaming, and other practices.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00cfhmu2m8ucz8k6The frustrating reality after an OT cyberattack: no data, no trail, and no history.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00cghmu2gbj10gudProposed legislation could mandate that companies be able to "throttle, suspend, or shut ... down" AI agents, but how and when to do that remain open questions.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00chhmu2u7a9w1d5The surge in AI-powered vulnerability reports is driving down bug bounty prices, and that could spell trouble for independent researchers.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf60336hmu2h1m1w755Reported to the California Attorney General on 08/28/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e031ahmu2is3mrnofReported to the Washington Attorney General on 08/28/2026. Date of breach: 04/08/2026. 974 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Financial & Banking Information; Full Date of Birth; Unique Private Key (e.g. used to authenticate or sign an electronic record); Student ID Number; Military ID Number; Passport Number; Health Insurance Policy or ID Number; Medical Information; Biometric Data; Username and…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl38q700dphmu2mmeorxroMore than 1,000 organisations, 500,000 stolen credentials, and one self-propagating worm named after a Dune sandworm - two men now face charges over TeamPCP's global hacking spree. Read more in my article on the Hot for Security blog.