Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmtwg43by2bhmhmu2so9uwhmbA security vulnerability in Skullcandy Dime 3 wireless earbuds could allow nearby attackers to pair with the device without the owner’s approval, hijack audio playback, and potentially capture live microphone audio. Tracked as Vulnerability Note VU#859658, the issue affects Skullcandy Dime 3 earbuds (model S2DCW) running firmware version 1.0.0.28. The flaw was publicly disclosed on […] The post Skullcandy Dime 3 Bluetooth Flaw Lets Nearby Attackers Hijack Audio and Spy Through Microphone…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwcon8h27myhmu2r1hzmjmsAnthropic’s Threat Intelligence team has disclosed a sweeping new report detailing how state-sponsored espionage groups, financially motivated cybercriminals, and lone hacktivists weaponized its Claude AI models to automate entire cyberattack chains, generate zero-day exploits, and dynamically rewrite malware to slip past security defenses. The findings, covering activity disrupted between December 2025 and August 2026, mark […] The post Hackers Use Claude AI Agents to Automate Cyberattacks,…
Link — click to select, then copy:
https://breachfeed.com/article/cmtw9gwzc23yyhmu2vnl798vfA new exploit kit is revealing the perils of the “patch later” mentality. According to the Proofpoint Threat Research team, espionage-motivated threat actors are using a new malicious toolkit to chain together four separate Chrome browser and Microsoft Windows vulnerabilities to allow them to launch targeted spear phishing campaigns. Proofpoint, which researched the new attack method along with Google’s Threat Intelligence Group, Microsoft’s Threat Intelligence Center, and cybersecurity company…
Link — click to select, then copy:
https://breachfeed.com/article/cmtw996sn23oyhmu25hj6gz5cThe GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx7h6jf09jkhpu25kgrfciqUpgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices Categories: Threat Research Tags: Cyclops Blink, Cisco, Linux
Link — click to select, then copy:
https://breachfeed.com/article/cmtw4jg6b1ydnhmu24achzqmeTRM Platform Uses AI to Marry Blockchain Data With Registries, Threat Intelligence TRM Labs reached a $2 billion valuation as it uses AI to combine blockchain transactions with ownership, corporate and threat intelligence data, giving investigators a broader view of criminal and nation-state networks and potential points for disruption.
Link — click to select, then copy:
https://breachfeed.com/article/cmtw4jg6b1ydlhmu2jt7259qmFrontier Lab Says Capability-Based Oversight Must Keep Pace With More Powerful Models OpenAI called for mandatory, capability-based AI regulation that evolves as the technology does, in the latest case of an AI company saying the technology can be dangerous and needs oversight.
Link — click to select, then copy:
https://breachfeed.com/article/cmtw4jg6b1ydkhmu2cuev6nr1Texas Pilot Will Pave Way for National Expansion, Says Sean Cairncross A White House effort dubbed Project Watershed 250 that's meant to help small or rural water utilities in Texas secure their systems against hackers with free technology donated by cybersecurity vendors will expand nationwide, the country's top cyber official said Thursday.
Link — click to select, then copy:
https://breachfeed.com/article/cmtw4jfqi1yd2hmu2xrj41ou8Centralized Controls Help the Bank Secure Thousands of Daily Software Builds JPMorgan Chase centralized its container pipeline to support thousands of daily builds while detecting vulnerabilities before deployment. As AI agents accelerate coding, standardized scans, security reviews and detailed specifications help keep speed from introducing unacceptable risk.
Link — click to select, then copy:
https://breachfeed.com/article/cmtw2ea7n1vy3hmu2bahcan0cCisco Observed 3 Distinct Intrusion Clusters Exploiting 1 or Both Flaws Cisco says a nation-state actor and a Qilin ransomware operator are actively exploiting two Secure Firewall Management Center flaws to gain root or credential-based access, steal sensitive data, deploy Sandworm-linked malware and prepare networks for encryption.
Link — click to select, then copy:
https://breachfeed.com/article/cmtw22oxt1vhohmu2cv7t0m8mA new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtw095c21thphmu2d28ju259Applied Quantum's Marin Ivezic on Why Forged Signatures Beat Stolen Data as a Risk Data theft dominates quantum risk planning, but a quieter threat could prove even worse. Marin Ivezic, CEO at Applied Quantum, says quantum computers used to forge digital signatures at some point in the future could undermine trust across IT and OT systems alike.
Link — click to select, then copy:
https://breachfeed.com/article/cmtw095c21thohmu2q8xrs7s1Also, N-Able Patches Critical N-Central Zero-Day, Nightmare Eclipse Zero-Day This week: ShinyHunters claims Florida DMV breach, N-able patch, Bimbo Bakeries breach, French police arrest suspected ZeroBytes hackers, Patch Tuesday, a new Nightmare Eclipse zero-day, Grindr agrees to $35 million U.K. privacy settlement, SAP patch.
Link — click to select, then copy:
https://breachfeed.com/article/cmtw0gtwv1towhmu298vzpoe9Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
Link — click to select, then copy:
https://breachfeed.com/article/cmtvzptbq1ssehmu2u3kpteh7Windows admins report that the September 2026 security updates are causing Remote Desktop Services (RDS) failures on Windows Server 2019, 2022, and 2025 servers, preventing users from connecting and, in some cases, requiring a hard reset to restore functionality. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtvzlygo1sn4hmu2q19pe7zbOleksii Lytvynenko joined the notorious group in 2021 and was directly involved in attacks on at least 12 companies. The post Conti ransomware crew member sentenced to four years in prison appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmtvzi3z61smkhmu2rlf55h3pMandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board. The post Mandiant Founder Kevin Mandia Joins Amazon Board appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmtvybopn1ra9hmu264l5hzo9