Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu9wrdj92oihhmu28lwqb5uaHackers Prove Florida DMV Breach by Leaking Jeffrey Epstein's Driver Record Startup Fortune
Link — click to select, then copy:
https://breachfeed.com/article/cmu8x3xyi0jryhmu2cqyg3zwuLTFRB probes data breach as platform goes offline Inquirer.net
Link — click to select, then copy:
https://breachfeed.com/article/cmu9uicx92jtmhmu2azugp3ivRNLI warns supporters their personal information may have been hacked The Guardian
Link — click to select, then copy:
https://breachfeed.com/article/cmu9dai811iqphmu28nxg47r3Minor impact · Investigating — We are investigating increased latency processing Events coming from inbound emails. As a result of this issue, some users may see delays or gaps in the event stream or for event queries on dashboards and for events based workflows such as on-call notifications
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1yjr0033hnu2mp7uj2bjA Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educational institutions, and using them to divert visitors to attacker-controlled pages promoting online gambling and sports betting. Check Point Research said it has tracked the campaign since mid-2025. The modules
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1yjr0034hnu2kwefmfrcVirtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor hypervisors sustained root-level compromise. The incident window ran from approximately August 28 at 20:57
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1yjr0035hnu2laqsbb6sCybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-speaking users through a fake television-streaming campaign on Meta and can give operators near-complete control of infected devices. ThreatFabric said the campaign's advertisement focused on Spain and reached an estimated 570,950 Meta accounts in the European Union
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf60331hmu24sy822h8Reported to the California Attorney General on 09/02/2026. Date of breach: 07/30/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf60330hmu2v4xm4v25Reported to the California Attorney General on 09/02/2026. Date of breach: 07/08/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6032zhmu2lqg9hurbReported to the California Attorney General on 09/02/2026. Date of breach: 06/05/2026, 06/09/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6032yhmu28vocr15uReported to the California Attorney General on 09/02/2026. Date of breach: 03/17/2026, 03/18/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6032xhmu2cz1724paReported to the California Attorney General on 09/02/2026. Date of breach: 05/25/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6032whmu2zb5a2nmwReported to the California Attorney General on 09/02/2026. Date of breach: 04/11/2026, 04/13/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4v8e0319hmu2wvjav76uReported to the Washington Attorney General on 09/02/2026. Date of breach: 04/11/2026. 628 Washington residents affected. Information compromised: Name; Social Security Number; Driver's License or Washington ID Card Number; Full Date of Birth; Passport Number; Medical Information.
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1y7r000ghnu2ush9fpwrCISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548…
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1y7r000fhnu2i781qf79Developed by CISA, the Federal Bureau of Investigation, and international partners, this guidance describes how organizations can plan and execute clear, timely, accurate, and audience-appropriate communications during IT and operational technology (OT) outages. Whether caused by cyber threat actors, human error, equipment failure, or natural hazards, service outages can create disruption and societal panic even without speculation from end users and the public as added factors. Outages at one…
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1yjr0036hnu2su570eiiThe debate about whether AI delivers business value is over. The challenge now is implementing it at scale and securely across every function while meeting board-level pressure to move fast. Organizations must focus on adopting AI at business speed without losing control of cyber risk. Download the full eBook here. The Business Reality In Sygnia’s 2026 CISO Survey Report, which
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp7002nhku2ea7aejzqAnthropic announces safety changes and new models USPS installs "untested" IT systems for mail-in ballots Thousands of Exchange servers vulnerable to hijacks Get the full show notes here: https://cisoseries.com/cybersecurity-news-fable-5-1-released-usps-untested-it-exchange-hijack-vulnerability/ Huge thanks to our episode sponsor, KnowBe4 Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video call…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c1hmu27hrbkbagThreat actors exploited commodity vulnerabilities in ownCloud to gain initial access, resulting in stolen reactor databases, personnel records, and credential stores.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl73sb00h2hmu2rfxv9i0qCategories: Threat Research Tags: advisory, vulnerability, SonicWall
Link — click to select, then copy:
https://breachfeed.com/article/cmttk1ycq000vhnu2hb42geisA new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI)…
Link — click to select, then copy:
https://breachfeed.com/article/cmttl4j1w00e8hmu2t2wbth9uIt does feel like I've bitten off too much and am now chewing like crazy this week. The 3D printing talk with Elle in Oslo, the "normal" NDC infosec talk, the cyber-broken talk with Scott in Copenhagen and then those ratbag hackers keep dumping more
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c2hmu26lt4mp4eCVE-2026-82329 is an authentication bypass flaw in JFrog's repository manager that enables bad actors to gain admin-level access on affected systems.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c3hmu2uappxrofSome security researchers have observed an uptick in insider-assisted ransomware attacks, but malicious insiders pose other threats that cost companies millions.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c4hmu24x9w34a4The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receiving more attention from adversaries this year.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c5hmu29h8gexn1In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.
Link — click to select, then copy:
https://breachfeed.com/article/cmttl1yng00c6hmu2ryj5y8a4The campaign uses EtherHiding to dynamically update its command-and-control server, abusing the blockchain as an attacker-controlled address book.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf60333hmu2mjq4yt7oReported to the California Attorney General on 09/01/2026. Date of breach: 12/18/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf60332hmu2mxij32y5Reported to the California Attorney General on 09/01/2026. Date of breach: 03/27/2026.