Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmu1imbqr53rthpu2r4htbnbxA Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign. "Red Heron scanned 1,386 Gitea instances across seven countries and maintained a separate dataset of 477 Taiwan-based systems," Acronis Threat Research Unit (TRU) said in an
Link — click to select, then copy:
https://breachfeed.com/article/cmu1hmb0r52oahpu2c8bw3xrwDario Amodei says it's time to slow the pace of frontier AI improvements so that security and risk prevention efforts can catch up. What does this mean for enterprises?
Link — click to select, then copy:
https://breachfeed.com/article/cmu1g4ald50zlhpu29p4ip5tgA mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu1fq63350m4hpu2ieaadqa4Financial Platform Was Socially Engineered Into Disclosing Sensitive Customer Data Digital financial platform Revolut is notifying customers that it suffered a data breach exposing their personal details after it fell for an official-looking "impersonation scam" involving a request for customer information sent using "a legitimate government agency domain email."
Link — click to select, then copy:
https://breachfeed.com/article/cmu1hc0qe52c2hpu2t9hshq75WordPress has announced it's launching an automated security review for every release of a plugin before it's distributed through the WordPress.org update API so as to analyze it for potential security issues and ensure there are no risks involved. "New plugins are reviewed before they enter the directory, but updates ship continuously after that," David Perez, WordPress Official Plugin
Link — click to select, then copy:
https://breachfeed.com/article/cmu1ed9tx4z1vhpu2988yh4hrAI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination. The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems, weak defaults, and simple paths that should have been harder to abuse. A few of
Link — click to select, then copy:
https://breachfeed.com/article/cmu1cejs74wvhhpu2voyrr0nrChina’s Ministry of Foreign Affairs responded to a question about Amodei’s essay by saying that all parties should work together on AI. The post Beijing Hits Back at Anthropic CEO’s Call to Curb China’s AI Development appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu1bnkds4w4whpu28c5s9afkLink — click to select, then copy:
https://breachfeed.com/article/cmu1bejci4vsbhpu26rkqhbpnPatch automation can help IT teams keep pace with growing update volumes, but deploying faster also means bad updates can spread faster. Action1 explains how update rings, predefined success criteria, and human oversight can make automated patching faster without sacrificing control. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu1a9dyu4uhihpu2ozq269axConcerns over the potential risks of the technology are rising as new AI models become more powerful, heightening both the potential for misuse by people with criminal aims. The post New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69o018mhmu2mhciowjhAmerica's Driver's License Breach Is a National Security Disaster Lawfare
Link — click to select, then copy:
https://breachfeed.com/article/cmu19eix14tk1hpu2mqtan3vzThe company unintentionally disclosed users’ information to a third party impersonating a government agency. The post Personal, Financial Info Exposed in Revolut Data Breach appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu19eix14tk2hpu2yjn7pwejAs researchers warn that misaligned AI could threaten human survival, even beneficial systems may erode the critical thinking that defines our humanity. The post The Race to Control AI and Protect What Makes Us Human appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu17z2u94rzxhpu2s9yw1yzdAttackers can combine social engineering with malicious OAuth applications to gain access to Google Workspace data without relying solely on stolen passwords. This webinar examines two attacks to show how these breaches unfold and which security controls can help stop them. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu7hge4q0008hmu2wec2otz6Reported to the California Attorney General on 09/14/2026. Date of breach: 12/11/2025, 12/12/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmu1o1s8259rdhpu2ggaat1bhCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian…
Link — click to select, then copy:
https://breachfeed.com/article/cmu17q2tj4rp8hpu230e3lma6There's a lot of noise around AI and cybersecurity right now. What’s actually important is far simpler, if often lost in the hubbub. Vulnerability discovery is getting faster and happening at a much greater scale, while defenders still have to work out which findings actually deserve their action. In the first half of 2026, a whopping 35,853 CVEs were published, roughly 49% more than in the
Link — click to select, then copy:
https://breachfeed.com/article/cmu16txk94qpjhpu2hm7pup6aThe Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely. The post Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu13twm24neihpu2vlhd0mqfSecurity leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm. The post CISOs Race to Control AI Agents Without Destroying Their Value appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu12jm624m01hpu2us0fy0gnStolen credentials were used in a multi-month campaign to access subscriber personal data and billing records. The post Telus Warns Customers of Account Breaches appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu12ngu94m65hpu2b7adu5l5Microsoft has confirmed reports that the September 2026 security updates cause Remote Desktop Services (RDS) failures on Windows Server systems. [...]