Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmu32rx4o6tv3hpu2jumlw1j8Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. The post “We Think the Security Control Is Working” Is No Longer Good Enough appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu32li0h6to8hpu2lrhqithgThe 'Breaking' News: The OpenAI–Hugging Face Incident - A Technical Reconstruction and Its Implications for AI At this Black Hat USA 2026 talk, OpenAI security engineers and researchers will reconstruct the OpenAI-Hugging Face incident and examine its implications for AI security, cyber resilience, and alignment. Throughout the session, they will share insights that address key topics raised by the Black Hat Review Board, including model safeguards, evaluation and containment practices,…
Link — click to select, then copy:
https://breachfeed.com/article/cmu31t7y76sunhpu21o0m2oobPayments Platform Socially Engineered With Hacked Government Agency Email Account Personally identifiable information for multiple cryptocurrency industry figures was targeted and stolen by the threat actor who hacked payments platform Revolut, prompting warnings for these customers' personal safety, with some receiving direct extortion threats.
Link — click to select, then copy:
https://breachfeed.com/article/cmu31drg36sbhhpu2or33tqh5Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on Google Chrome and
Link — click to select, then copy:
https://breachfeed.com/article/cmu2zvs826qqfhpu23g9q6j3yShrinking Certificates, ACME, mTLS and PQC Redefine Enterprise Security Posture Certificate lifespans are shrinking, making automated life cycle management essential. ACME is replacing manual renewal, mTLS is extending cryptographic identity across internal services, and post-quantum deadlines are approaching. Here's how leaders can build crypto agility now.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2zo1p76qh0hpu26q1ammhiJoint Advisory Details Chosen Brick Spyware Used Against Iran's Critics Abroad Iranian state hackers are steering dissidents, activists and journalists away from corporate devices and onto personal computers to plant spyware that can capture screens, record audio and steal messages, according to a joint advisory from British, U.S. and Dutch intelligence agencies.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2x8lm46nqxhpu2e39q93dzThe full-service malware-as-a-service (MaaS) platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive remote access.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2wlfp86mylhpu2gqpwsviaCenterPoint Energy disclosed a breach compromising some customers' personal information after an attacker leaked data allegedly stolen from the utility company. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu2ylgid6p89hpu2ztp0varcCybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can copy a target's emails and chat messages, take screenshots, and activate the microphone to record
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69p019vhmu2sjmzj1iyLeaks, data breaches, and ransom notes: The worst hacks of 2026 so far techcrunch.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu2v25hn6lbfhpu23p3kqllbAI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage. The post $1 Million Sandbox Challenge Uncovers Linux Kernel Flaws appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2umpng6kuhhpu27wwi5pjfThe cybersecurity startup is building a proprietary foundation model and plans to accelerate global expansion. The post Exein Secures $270M at $1.7B Valuation for Physical AI Security appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2uiuok6krfhpu24nmh1dj6The company confirmed the defect was exploited before it was disclosed and patched, but it did not describe the nature of the attacks or the scope of impact across its customer base. The post Cisco warns customers of actively exploited zero-day in email gateways appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2ub4tq6khfhpu2o49elf98Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South America.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2sb47t6i8bhpu27ebeq4b1Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu2s3ecs6i09hpu2yzpyfmvjAttackers have opened a new front in their war on software developers: Vite servers, which they are probing for sensitive data including cloud credentials, infrastructure configuration and environment files. Vite was created as a build tool for Vue, a JavaScript framework for building user interfaces and web applications, but has now become a widely used development server and build tool across the JavaScript ecosystem. F5 Labs reported that attackers sent more than 32,000 attempts to scan…
Link — click to select, then copy:
https://breachfeed.com/article/cmu2qmo9h6gdnhpu2ytl1c7oqAI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or public exploits. Picus Security explains how exploitability validation, security control testing, and autonomous pentesting can help teams close exposure gaps before attackers arrive. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu2pwyfq6fmfhpu2g46jt1s5The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools. The post Thai Broadband Provider Hacked via Fortinet Vulnerability appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu2op86y6e8uhpu2w71kbmm3Exaforce is offering to help enterprise security teams discover and monitor AI agents using security telemetry they already collect, rather than requiring yet another endpoint sensor. By combining usage data from agentic AI platforms with endpoint, cloud, SaaS and code data, Exaforce AI Security can identify risks, detect suspicious behavior, and respond to threats, the company said. “Exaforce uses data the SOC already collects to inventory every AI app and agent, connect each one to the…
Link — click to select, then copy:
https://breachfeed.com/article/cmu2nzij26dibhpu2oxk9u91sThe incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious activity. The post OpenAI Investigates Report Linking AI Agents to RubyGems Attack appeared first on SecurityWeek.