Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu8dcs0l1hmlhmu2t5cy1yosGoogle Confirms Gemini Hacked 3 Real Companies in May Safety Test BeInCrypto
Link — click to select, then copy:
https://breachfeed.com/article/cmu8clrri1g16hmu29w6he1ghGoogle’s Gemini hacked three real companies during security test Cybernews
Link — click to select, then copy:
https://breachfeed.com/article/cmu8ae1e31b86hmu2j72lvpevGoogle's Gemini AI Broke Its Own Sandbox and Hacked Three Real Companies startupfortune.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu897lnf18nlhmu2bywdhc3aGoogle Gemini Hacked Other Companies in Test by Israeli Cybersecurity Firm Haaretz
Link — click to select, then copy:
https://breachfeed.com/article/cmu4b8zx586zahpu2xmiwan36A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote attacker to execute arbitrary operating system (OS) commands by taking advantage of a hard-coded
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69p019mhmu23qpgrkpd‘Prolonged’ Raleigh power outage causes Leesville Road schools early dismissal: District CBS 17
Link — click to select, then copy:
https://breachfeed.com/article/cmu49xevx85hrhpu2c8nvylm3AI agents’ actions are out of scope for new guidance from US authorities on securing identity and access tokens, but there is still plenty enterprises can do to protect their systems from rogue humans and AI agents alike. “Protecting Tokens and Assertions from Forgery, Theft, and Misuse,” a new report from the National Institute of Standards and Technology (NIST) with help from the Cybersecurity and Infrastructure Security Agency (CISA), offers guidance for operators of systems that use…
Link — click to select, then copy:
https://breachfeed.com/article/cmu4b8zx586zbhpu2d43hwh73Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement.
Link — click to select, then copy:
https://breachfeed.com/article/cmu48w5lw84g3hpu2bj0rok8bLink — click to select, then copy:
https://breachfeed.com/article/cmu47zyxq83crhpu2zdjv7209The agencies issued a joint statement saying the “joint security boardings” came in response to “indications that the networks of both vessels were compromised.” The post Coast Guard, FBI board foreign ships coming to US to probe cyberattacks appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69r01achmu2hnw62qukGoogle says some Pixel phone owners were hacked in zero-day attacks techcrunch.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu4b8zx586zchpu2r1k2w49dSecurity researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. Once the extension was installed, it could access each product's built-in AI with a single click. On Comet, Edge,
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69r01amhmu2chkpoy87Salesforce goes down during the company's Dreamforce event: What we know Mashable
Link — click to select, then copy:
https://breachfeed.com/article/cmu47hz0c82u5hpu2bqlixp7gJoin SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces. The post Virtual Event Today: Attack Surface Management Summit appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu5yss9a06fxhmu215gerq9jsubmitted by /u/One-Emu-1103 [link] [comments]
Link — click to select, then copy:
https://breachfeed.com/article/cmu46uton826jhpu2sdr0i7heUrsula von der Leyen warns that advanced AI could unleash hacking on an unprecedented scale as Europe prepares new protections against social media’s “capture” of children. The post EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu46po7s81xxhpu20tejj640The secretary told House Financial Services Committee lawmakers that the “best way to guarantee safety” is for AI creators to be held “liable for what they build and generate.” The post Treasury’s Scott Bessent says no liability exemptions for AI labs appeared first on CyberScoop.
Link — click to select, then copy:
https://breachfeed.com/article/cmu46hye781q5hpu22x8a8m6nThe ransom itself can be only a fraction of the total cost of a ransomware attack, with downtime, recovery, remediation, and legal obligations adding millions to the bill. Datto explains how a mature BCDR strategy can reduce downtime and provide a faster, more predictable path to recovery. [...]
Link — click to select, then copy:
https://breachfeed.com/article/cmu45ct9a80hfhpu2bjyulapuThe company provides a standard for AI systems, testing them against risks such as jailbreaks, prompt injections, and unauthorized actions. The post AIUC Raises $40 Million to Certify Enterprise AI Agents appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu46bj1s81j2hpu2g4xbdskhMandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the
Link — click to select, then copy:
https://breachfeed.com/article/cmu44ltjm7zp6hpu2qfygfsnjLink — click to select, then copy:
https://breachfeed.com/article/cmu46bj1s81j3hpu2wh6gzk9dParallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install. Yuval Moravchick, who leads
Link — click to select, then copy:
https://breachfeed.com/article/cmu5rh69r01arhmu22oc4kcj9UPDATE: Thousands without power during outage Star Beacon