Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmu1q89ch5c7phpu2ovd2r8uoLink — click to select, then copy:
https://breachfeed.com/article/cmu1q89ch5c7ihpu2ifpkii38Aleksanteri Tomminpoika Kivimäki Has Eluded Finnish Authorities for Months Finnish authorities issued a European Arrest Warrant for convicted Vastaamo hacker Aleksanteri Kivimäki after he failed to return to prison, widening the search for the man who stole 33,000 psychotherapy records and extorted patients.
Link — click to select, then copy:
https://breachfeed.com/article/cmu1q89ch5c7hhpu2j7zt9eq5An OnDemand Webinar from Elastic
Link — click to select, then copy:
https://breachfeed.com/article/cmu1q5np95c4ihpu2n16k7enyMicrosoft has released emergency out-of-band Windows updates to fix Remote Desktop Services failures caused by this month's security updates, along with Hyper-V and USB audio problems on some Windows versions. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu1piib45beohpu2igqb9z65Japan's Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69r01adhmu28reafcm5Saudi pipeline outage threatens loss of 4% of global oil supply Reuters
Link — click to select, then copy:
https://breachfeed.com/article/cmu1pc2xo5b71hpu2gbe8n1yiCVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.
Link — click to select, then copy:
https://breachfeed.com/article/cmu1oiif15abchpu2pk3y8dfhLink — click to select, then copy:
https://breachfeed.com/article/cmu1oiif15abbhpu2kjdrj0eeLink — click to select, then copy:
https://breachfeed.com/article/cmu1o33ih59uxhpu2y3nfxfqaLink — click to select, then copy:
https://breachfeed.com/article/cmu5rh69r01afhmu2ak9ccfq7Exxon Mobil shuts down Joliet refinery after power outage Reuters
Link — click to select, then copy:
https://breachfeed.com/article/cmu1nss4a59iwhpu22t4arlcyHomebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical interface. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu1mddba57ybhpu2x0o3k838Link — click to select, then copy:
https://breachfeed.com/article/cmu1m321a57mahpu237h2pk1lA browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu1l9h2956nkhpu29osv3tvpOfficials said the five individuals concocted various long-running romance scams to trick U.S.-based victims into sending them money. The post Five alleged leaders of Black Axe’s operations in South Africa extradited to US appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmu1l1r9t56fshpu2kxz9nd48Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu1k0hpd55cihpu2imnlscc8CyberEdBoard Webinar to Explore CMU SEI AI Adoption Maturity Model The CyberEdBoard will host a virtual webinar Sept. 24 to explore a new framework developed by the Carnegie Mellon Software Engineering Institute and Accenture to help organizations assess their AI adoption maturity and build a road map for achieving predictable, repeatable and scalable results.
Link — click to select, then copy:
https://breachfeed.com/article/cmu1k0hpd55chhpu265bxbg7rRecently Patched Flaw Is Being Actively Exploited to Steal Files and Credentials Attackers are actively targeting a recently patched vulnerability in the popular DevSecOps platform GitLab that they can exploit to steal data and credentials from public-facing, self-hosted GitLab servers. The software developer is urging all self-hosted users to update immediately.
Link — click to select, then copy:
https://breachfeed.com/article/cmu1n4cn258pwhpu2yy2u622uAn attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, threat intelligence firm Hunt.io said. The company uncovered the intrusion by examining a server the attacker had left open on the internet, which held the attacker's own tools and a list of
Link — click to select, then copy:
https://breachfeed.com/article/cmu1n4cn258pxhpu2edvdrk1hA flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said in a writeup published on September 12. In Telegram, the message looked ordinary, with a link button, and the script ran only when someone opened the export file in a web browser. It could then copy every message in that file to
Link — click to select, then copy:
https://breachfeed.com/article/cmu1imbqr53rshpu225vqxco7Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who already controls the server's software and can briefly access the machine to insert a small circuit