Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmtwrsmmr2ovahmu257jws2q5A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors. The post Surfshark Systems Targeted by Hackers appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmtwrsm6a2osihmu2t6gqmq4aMicrosoft has fixed a bug that prevented Teams and Outlook from launching on ARM-based Windows devices after installing updates released since the August 2026 Patch Tuesday. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtwqtwa32npwhmu2rcbvoey0SloppyRAT is a remote access tool that appears designed to help ransomware operators move deeper into compromised networks. The malware arrives through ClickFix, a social-engineering method that tricks people into running commands presented as a routine check. Rather than immediately encrypting files, the attackers establish a foothold, collect system details, and reach other devices, giving […] The post Hackers Deploy New SloppyRAT via ClickFix to Enable Ransomware Lateral Movement appeared…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwpv6lt2mo2hmu23cyo5un8Anthropic reveals how criminal groups are increasingly targeting AI vendors' own infrastructure, including to steal a pre-release Claude model. The post Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmtwpjlij2m7jhmu2hiiefeweGoogle’s Early Access program is meant to give developers a place to release unfinished apps, gather feedback and handle bugs before a full launch. But new research from Bitdefender Labs suggests the feature may also be giving potentially deceptive applications an unusual advantage, as users cannot publicly rate or review an app while it remains in Early Access. An analysis of Google Play applications installed by Bitdefender users identified thousands of Early Access apps that appeared to…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwowg7v2li4hmu2qs7h569aGitLab has released security updates for Community Edition and Enterprise Edition to fix multiple vulnerabilities, including two critical flaws that could enable arbitrary file reads and credential theft. A separate high-severity issue in GitLab Enterprise Edition could allow authenticated attackers to achieve remote code execution by importing a malicious project export. The company released GitLab […] The post GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwoslpr2lgqhmu2bonyw11tA Russian threat actor used AI to build, test, and deploy exploits against hundreds of organizations worldwide. The post PaperCut Flaws Exploited in AI-Powered Attacks appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmtwowg7v2li5hmu2xvvflbfwAn active exploitation of three JFrog Artifactory vulnerabilities that attackers are using to bypass authentication, elevate privileges, and take administrative control of exposed servers. The flaws, tracked as CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329, affect multiple Artifactory release branches and create a serious supply-chain security risk. Attackers have already targeted self-hosted Artifactory deployments, creating persistent administrator accounts, […] The post JFrog…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwooqgh2l8yhmu2f07wz6xqOkta has released security fixes for three vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. The flaws could enable stored cross-site scripting, authorization bypass, and SQL injection in certain configurations. The vulnerabilities were disclosed on September 8, 2026. Organizations using the affected identity and access management components should prioritize upgrades, especially where Access […] The post Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwo5fzy2knkhmu284l69l76Trezor has revealed that phishing attacks against its customers earlier this week targeted 347,000 email addresses and affected 2,500 users who clicked an embedded malicious link. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtwnefxu2jt0hmu2ceaz0untA newly disclosed AI attack technique shows that harmful commands do not need strange symbols, hidden text, or coded strings to evade security checks. Attackers can conceal an instruction inside ordinary English and rely on different AI models to interpret the same text differently. The method, called PuzzleMask, targets applications that put a fast screening […] The post Hackers Can Hide Malicious AI Commands Inside Normal English to Bypass Security Filters appeared first on Cyber Security…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwn6q7v2jkmhmu2qvq09t3eMicrosoft is investigating a Microsoft 365 Copilot disruption in which users may be unable to open the assistant or encounter errors while using it. The company is tracking the event as CP1470554 and pointed administrators to the Service Health Dashboard in the Microsoft 365 admin center. In a status update on X, Microsoft 365 Status […] The post Microsoft Investigating Microsoft 365 Copilot Access Issues Under Incident CP1470554 appeared first on Cyber Security News.
Link — click to select, then copy:
https://breachfeed.com/article/cmtwmz0992jbghmu2a76k81vhThe CL0P ransomware operation has allegedly added iconic motorcycle manufacturer Harley-Davidson to its public leak site, claiming it compromised the company. Harley-Davidson has not confirmed the alleged cyberattack, and the specific scope, timing, and impact of the reported incident remain unknown. The claim was highlighted by threat-monitoring account ransomNews on September 10, 2026. According to […] The post Harley-Davidson Alleged Breach – CL0P Ransomware Adds Motorcycle Maker to the List…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwmrany2j2ahmu2dl67inw7Bottom line up front: CNAPP is the umbrella — it bundles CSPM (posture), CWPP (runtime), CIEM (entitlements), and increasingly DSPM (data) into one platform. Wiz leads on the graph that connects them, Prisma Cloud on module breadth, Defender for Cloud on Azure economics. This guide sizes the decision and names the one market fact — […] The post Top 10 Best CNAPP (Cloud-Native Application Protection) Platforms in 2026 appeared first on Cyber Security News.
Link — click to select, then copy:
https://breachfeed.com/article/cmtwnal2c2jp0hmu2leomyxccA China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims' computers, security company Gen Digital said in research published Thursday. The attack started with a crafted link and ended with the attacker able to do anything the logged-in user could do. Tencent, which owns
Link — click to select, then copy:
https://breachfeed.com/article/cmtwmbvd12immhmu2b7c2wlu3CSPM finds the cloud misconfigurations that cause most cloud breaches public buckets, permissive IAM, exposed databases continuously, across accounts and providers. Wiz still sets the pace on agentless visibility and attack-path context, Microsoft Defender for Cloud wins Azure-centric economics, and the market’s biggest story is corporate: Google’s agreement to acquire Wiz for approximately $32 billion, […] The post Top 10 Best Cloud Security Posture Management (CSPM) Tools in 2026 appeared…
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp5002fhku217ob6tetCritical NetScaler vulnerability exploited in attacks AdaptHealth data breach impacts 4.1 million people MantaxOtax Android malware delivers ransomware and spyware together Get the show notes here: https://cisoseries.com/cybersecurity-news-netscaler-vulnerability-exploited-adapthealth-suffers-breach-new-android-malware/ Huge thanks to our episode sponsor, ThreatLocker AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them.…
Link — click to select, then copy:
https://breachfeed.com/article/cmtwlkunt2hp0hmu2cxpp0ba7A Ukrainian national has been sentenced to four years in prison for his role in Conti ransomware attacks between 2021 and 2022. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtwnal2c2jp1hmu2cw9ylezfPaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation. The software development company said PaperCut NG/MF versions 26.0.5, 25.0.13 and 24.1.10 are now available for customers to download. "These are Regular Maintenance Releases (MR) that
Link — click to select, then copy:
https://breachfeed.com/article/cmtwnal2c2jp2hmu2ghf97g8zCisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities. The attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass
Link — click to select, then copy:
https://breachfeed.com/article/cmtwh6och2cr6hmu2irz7ktmgWindows administrators worldwide are grappling with a disruptive Remote Desktop Services (RDS) bug that surfaced immediately after Microsoft shipped its September 2026 Patch Tuesday cumulative updates. Session hosts running Windows Server 2019, 2022, and 2025 have begun freezing hours after boot, leaving RDP connections stuck at “Connecting…” and preventing logged-in users from disconnecting or logging […] The post Remote Desktop Services Failures on Windows Servers Following September Update…