Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmu3tkfg67ngchpu2t8ungdqrThe security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws. The post Oracle Patches 800+ Vulnerabilities in September 2026 Security Update appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu3ra48j7kxnhpu2lfnvzuh2Google has released the September 2026 security patches to address 110 vulnerabilities affecting its Pixel devices, including one zero-day flaw actively exploited in targeted attacks. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rjzp5002bhku2o55vvzgcCisco zero-day goes straight to root BambooToken branches into Linux CenterPoint breach claim hits 7M+ Get the show notes here: https://cisoseries.com/cybersecurity-news-september-16-2026/ Huge thanks to our episode sponsor, Vanta Risk and regulation are ramping up, and customers expect proof of security just to do business. Vanta's automation brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC…
Link — click to select, then copy:
https://breachfeed.com/article/cmu3q8to97jruhpu2ut9k836oThreat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. "This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remote code execution," Wordfence said. The WordPress security company said it has blocked over
Link — click to select, then copy:
https://breachfeed.com/article/cmu3q8to97jrvhpu2mefyzrm8A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw. "JWT authentication
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69p019ahmu2x851yoczSquirrel causes power outage affecting thousands of customers in Colorado 9News
Link — click to select, then copy:
https://breachfeed.com/article/cmu3epgi1773ghpu2j39h0ywoA swarm of hundreds of OpenAI agents uploaded “malicious packages” to RubyGems and tried to steal API keys, the Ruby community gem hosting service revealed Friday. OpenAI confirmed part of the disclosure, saying, “our agents used the RubyGems platform to access the internet to carry out benign tasks and retrieve public information. We’ll continue to investigate as part of our broader review of agent activity during training and evaluation.” The agents’ goals were unclear, as was whether they…
Link — click to select, then copy:
https://breachfeed.com/article/cmu3edvgh76ovhpu21df9poehA likely North Korean advanced persistent threat (APT) group used a previously undocumented Linux espionage toolkit to compromise load balancers, gain access to communications, and further exploit networks.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rvaz1003qhmu2bhmm4c4rSaudi Pipeline Outage Hits an Oil Market Running Out of Buffers Crude Oil Prices Today | OilPrice.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu4l2nx08htqhpu234nkorlyWindows takes 718 fixes… but what if it was actually a slow month? Categories: Threat Research Tags: Patch Tuesday, x-ops, Threat Research
Link — click to select, then copy:
https://breachfeed.com/article/cmu3adv2272bfhpu2orceafcrHouse Subcommittee Hearing Highlights Threats to Rural Hospitals and Patient Care As U.S. hospitals, clinics and other medical providers continue to face an onslaught of hacking incidents and disruptive cyberattacks this year, the House Energy and Commerce Committee's health subcommittee examined on Tuesday two proposed bills aimed at strengthening health sector cybersecurity.
Link — click to select, then copy:
https://breachfeed.com/article/cmu380zki6zprhpu2q79ozfamExploit Maturity Can Lower Scores Until Attack Evidence or PoCs Emerge CVSS 4.0 lets threat intelligence alter a vulnerability's enriched score without changing its Base severity, prompting experts to warn that vendors and defenders must continuously reassess exploitation, exposure and patch priority.
Link — click to select, then copy:
https://breachfeed.com/article/cmu370y436yk3hpu20cyseqfeAcronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the wild. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu363jle6xl4hpu2tkwjs1jpCIOs Build New Budget Models for Agents, Tokens and Failed Experiments AI spending no longer fits neatly into software or cloud budgets. As model access, agents, data preparation and governance drive costs across the enterprise, CIOs are creating new ways to track experimentation, control consumption and demonstrate long-term business value.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69p018vhmu24mu5upqsSpanish data watchdog publicises first AI agent-linked data breach report Reuters
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69p018qhmu2pv062i2qCenterPoint Energy says customers’ personal info obtained in data breach 14news.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu34vsem6w6thpu2hlleicu8Malicious versions of the Admin Menu Editor Pro plugin for WordPress have been distributed to more than 200 customers after a threat actor compromised the maintainer's website and pushed updates that created a hidden user account. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu34hnb56vrphpu2p2ade5lkMicrosoft agreed to adopt guardrails and privacy standards for its AI in schools, as negotiated with the American Federation of Teachers. The post Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow? appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu34ixtx6vt0hpu2rl6nzq4rYou can't make an omelet without breaking a few eggs, and you can't patch nearly 1,000 CVEs without a few glitches.
Link — click to select, then copy:
https://breachfeed.com/article/cmu33lhpy6urghpu2st0y0cz2Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the device by simply sending malicious crafted emails to users. The flaw was already being exploited in the wild when the fixes were released. Tracked as CVE-2026-76461, the vulnerability is described by Cisco as an SQL injection caused by insufficient validation in the product’s email parsing code. Parsing incoming email messages for threats is this…
Link — click to select, then copy:
https://breachfeed.com/article/cmu338mqn6ucbhpu2rlooamnaThree feds spoke about future plans for the Continuous Diagnostics and Mitigation program, and lessons they’ve learned. The post What’s next for CISA’s CDM program that gives cybersecurity tools to federal agencies appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69p01a8hmu23r6ueh4tDMV breach confirmed as hackers claim 200,000 records stolen Fox News