Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmtxbq7jt0ebfhpu2kpx0u2pnThe Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database suffered a data breach, saying the attackers gained access using credentials belonging to a police department employee. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtxb6yb50dryhpu2a5yatorvA new joint government advisory signals a regulatory shift, pressing organizations to adopt more transparent breach notification and incident response protocols.
Link — click to select, then copy:
https://breachfeed.com/article/cmtxb32c10dkvhpu2xh1htqanOne flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to upgrade immediately. The post GitLab’s critical flaw is already drawing internet-wide probes appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmu19h3mn4to4hpu2n4s2dkylThe Dubai-based threat detection startup uses artificial intelligence tools to scan billions of IP addresses to find exposed assets, leaked data, and zero-day vulnerabilities.
Link — click to select, then copy:
https://breachfeed.com/article/cmtxac29q0cr0hpu2j332pbj1Fred Heiding of Menlo Park Intelligence talks with the Dark Reading News Desk about his research on frontier models, and their ability to influence human behavior and create emotional dependency.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx9h7gp0bslhpu2mqougp5oGreyNoise Says Attacker Used Hundreds of Agents in 48-Country Campaign A likely Russian-speaking attacker used hundreds of AI agents to exploit PaperCut systems, compromising at least 440 systems at 395 organizations in 48 countries. GreyNoise said the attacker used the agents to develop exploits, find targets and attack systems in parallel.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx9h7gp0bskhpu2ekdcyhu9Cyber Extortion Group Continues to Target Exposed Cloud-Based Data Over Endpoints Cyber extortion group FulcrumSec continues to find hardcoded credentials in public-facing IT infrastructure and exploit them as part of what it's dubbed a "Hardcoded Horrorshow" that counts Ozempic maker Novo Nordisk among its victims. Here are defenses organizations need to put in place now.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx8ar790ae8hpu2985dazjkMicrosoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtx8arkf0aglhpu2qcs7nbiiAnalysis of 2.47 million simulated attacks shows why organizations should measure credential leaks and reporting, not just clicks. The post Phishing Research Challenges Conventional Security Awareness Testing appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx91rr30bbmhpu2fky3krxsAdversaries can manipulate AI defensive reasoning to silently compromise target networks.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx7h6ck09i6hpu2xzhtzql9Microsoft is changing the destination address of two of its most popular services: starting this month, it will redirect M365 and Teams web users to copilot.cloud.microsoft and teams.cloud.microsoft, respectively. The Teams move is already under way, and Microsoft has now added M365 to the mix. The company announced the changes in two MessageCenter posts: MC1465764 (mirror) and MC1462915 (mirror). Organizations using these products are advised to update their systems and documentation to ensure…
Link — click to select, then copy:
https://breachfeed.com/article/cmtx6db45086xhpu2aejcdsccThreat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted servers. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmtx5z5um07shhpu25185stqtConnectWise has issued a security update for ScreenConnect, five days after warning customers the product could allow files to be transferred and executed through active remote sessions without authorization or confirmation. The company warned customers on Sept. 3 of the problem with support and access sessions in ConnectWise Remote Access, advising admins to log in and remove the “TransferFiles” permission from any users with an open session. The vulnerability, tracked as CVE-2026-84869, has…
Link — click to select, then copy:
https://breachfeed.com/article/cmtx831fz0a6ahpu27psnx4ntAnthropic on Thursday said it identified and disrupted industrial-scale illicit distillation attacks against Claude from seven labs based in China, including Alibaba, Moonshot, DeepSeek, Z.ai (aka Zhipu), and MiniMax. Knowledge distillation by itself is a legitimate training method. It refers to a machine learning technique where a large, powerful AI model assumes the role of a "teacher" to
Link — click to select, then copy:
https://breachfeed.com/article/cmtx5eldi0755hpu2qcfwnrw8From creating lab environments for staging and testing agentic attacks to reconnaissance to lateral movement and exfiltration, the most innovative attackers are widely incorporating AI.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx41ptl05lbhpu2i7nxxf5jA website linked to India’s Software Technology Parks of India (STPI) is serving a spoofed Cloudflare verification page that silently copies a malicious string to visitors’ clipboards and prompts them to execute it via Windows Terminal, in a technique consistent with emerging TerminalFix-style attacks. STPI, a Government of India organization that supports the country’s IT services and startup ecosystem, operates platforms used by technology firms, developers, and public-sector stakeholders.…
Link — click to select, then copy:
https://breachfeed.com/article/cmtx26uhg03h1hpu2gk6e65nrRussia-aligned operators are testing a new way to make artificial intelligence overlook malicious code. The technique, called GuardBreaker, hides a safety-sensitive request inside an otherwise ordinary script comment, hoping that an AI code scanner refuses to continue its work. The activity was observed during an early-stage intrusion against a target in Ukraine. The VBScript was […] The post Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis appeared first…
Link — click to select, then copy:
https://breachfeed.com/article/cmtx1nkru02w7hpu23diaijamNoteworthy stories that might have slipped under the radar: Invisible Unicode slips past phishing filters, US puts $10 million bounty on Iranian cyber official, military ties of Chinese hacking group QTFY. The post In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx1rf3f02zjhpu28klyvznaKATARU is a newly observed IoT malware strain that can turn poorly secured devices into DDoS attack nodes. The sample was captured after an attacker used repeated Telnet password guesses against a honeypot, then downloaded an ARM payload. It shows how old entry points still give attackers a foothold. The malware resembles the Mirai botnet […] The post New KATARU IoT Malware Packs Linux Privilege Escalation Exploits and Mirai-Style DDoS Attacks appeared first on Cyber Security News.
Link — click to select, then copy:
https://breachfeed.com/article/cmtx1ietr02pchpu2j2h1qu70Anthropic has owned up to a fourth security incident involving its AI model, Claude, escaping onto the open internet and attacking other organizations during a test of cybersecurity abilities on what was believed to be a closed system. The company revealed three such incidents in July after a preliminary investigation. However, on reexamining the 141,000 chat transcripts it believed could have been at risk, Anthropic discovered a fourth incident of unauthorized access to computer systems, this…