Everything BreachFeed is tracking across the industry, as it publishes.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6033qhmu22zufl53xReported to the California Attorney General on 08/17/2026. Date of breach: 08/11/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6033phmu2gisa4q3tReported to the California Attorney General on 08/18/2026. Date of breach: 07/02/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6033ohmu2oenda9k8Reported to the California Attorney General on 08/18/2026. Date of breach: 04/08/2026, 04/09/2026.
Link — click to select, then copy:
https://breachfeed.com/article/cmu7q4vf6033nhmu2f25tl7h9Reported to the California Attorney General on 08/19/2026. Date of breach: 11/27/2025.
Link — click to select, then copy:
https://breachfeed.com/article/cmu73ledw023khmu2pbzuhz9t23 Million User Records Compromised in Gyazo Data Breach SecurityWeek
Link — click to select, then copy:
https://breachfeed.com/article/cmu6wdmkn1jobhou212i52qi7U.S. Bound Tankers Hacked, Says USCG Marine News Magazine
Link — click to select, then copy:
https://breachfeed.com/article/cmu6vmme61i04hou21idclze8OpenAI ‘ethically hacked’ with help of Anthropic’s Claude chatbot The Guardian
Link — click to select, then copy:
https://breachfeed.com/article/cmu6uvm8v1gjehou2onr24jx4Hugging Face AI Hack Shows Humans Can Keep the Technology in Check Bloomberg.com
Link — click to select, then copy:
https://breachfeed.com/article/cmu70t32o00vvhnu2uk6lxbfiIn July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been wound down years earlier, and the domain it served assets from was allowed to expire. What it had not lost were its callers. Thousands of websites, code repositories, and documentation pages still carry hard-coded references to hostnames beneath it. The new owner holds
Link — click to select, then copy:
https://breachfeed.com/article/cmu70t32o00vwhnu2wnyls9x9A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one, even when the agent locked that plugin to a specific reviewed version, security firm Air Security said on Thursday. The firm said Anthropic has patched the flaw in Claude Code 2.1.179 and OpenAI in Codex 0.146.0, that GitHub Copilot has no
Link — click to select, then copy:
https://breachfeed.com/article/cmu6uvm8w1gkehou2aib39jo0Settra ransomware group uses MeshAgent RMM in recent attacks SC Media
Link — click to select, then copy:
https://breachfeed.com/article/cmu6uk21u1ftxhou2sr3gg4ehMicrosoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority. The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu6uir3u1fqkhou2xawxchl8U.S. President Trump outsources hack back cyber operations under an implementing framework due by 11 October 2026 Digital Watch Observatory
Link — click to select, then copy:
https://breachfeed.com/article/cmu6ucbp91fajhou2nt3i4nm7Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family, per OpenSourceMalware, exhibits functional overlaps with two malware strains associated with the Democratic People's Republic of Korea's (DPRK) Contagious Interview campaign: BeaverTail and
Link — click to select, then copy:
https://breachfeed.com/article/cmu6trqy61e40hou2086i83hzThey hacked a TikTok user’s camera, with help from free AI The Washington Post
Link — click to select, then copy:
https://breachfeed.com/article/cmu6trqy61e3vhou2gzw533dxA month after historic power outage in Gary, mom of 4 still hopes for relief Chicago Sun-Times
Link — click to select, then copy:
https://breachfeed.com/article/cmu6svme21ca5hou2tg1lhk2fActive since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world. The post NightmareStresser DDoS Service Disrupted in International Operation appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu70vnzq019vhnu2zchpu136This Viral Boxed Cake Hack Has 6 Million Views — Here’s How to Try It Food & Wine
Link — click to select, then copy:
https://breachfeed.com/article/cmu6snvqv1bq3hou22muj7kif‘Foreign actors’ briefly hacked two small Colorado water utilities last month, state says The Denver Post
Link — click to select, then copy:
https://breachfeed.com/article/cmu6s0s1e1ajthou2kdfr3a9aHackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts. The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek.
Link — click to select, then copy:
https://breachfeed.com/article/cmu6rt0sn19yahou2lvhfb4jkLink — click to select, then copy:
https://breachfeed.com/article/cmu6rdluv1953hou2guu5fejpA financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry. "The developer likely wrote the malware using a large language model (LLM), an assessment made with high confidence based on verbose comments, placeholder code, and statistical token-analysis patterns,"