Breaches, vulnerabilities, and the defenses that matter.
+follow topic ← all stories
Security Trellix Discloses Source Code Breach When a major cybersecurity vendor's own source code is compromised, it raises questions about downstream risk for the thousands of customers relying on those tools. 
Security Mandiant Reports Vulnerability Exploits Now Occur Before Patches Exist The average time to exploit vulnerabilities has gone negative, fundamentally breaking the assumption that patching can outrun attackers. 
Security Carnival Confirms Breach Through Social Engineering Attack A single employee account opened a path into IT systems holding personal information for millions, demonstrating how human factors remain the weakest link. 
Security ADT Confirms Breach After ShinyHunters Claims 10 Million Records Stolen A third breach in two years for the security company underscores how identity systems and SaaS environments remain prime targets for extortion groups. 
Security Cybersecurity Firm BePrime Breached After Skipping Multifactor Authentication When a security provider lacks basic protections, clients inherit risk they cannot see or control 
Security Vercel Discloses Breach Stemming from Third-Party AI Tool OAuth Compromise The incident exposes how trusted AI productivity tools with broad OAuth permissions can become lateral movement vectors into enterprise systems. 
Security Rockstar Games Confirms Breach Through Third-Party Vendor The breach shows how attackers bypass hardened targets by compromising vendor integrations rather than direct infrastructure. 
Security France Discloses Breach of National ID Document Agency Personal data of citizens who applied for passports, driver's licenses, and national IDs was exposed through a basic API vulnerability. 
Security FBI Declares Surveillance System Breach a Major Incident Phone numbers of federal surveillance targets were exposed, potentially revealing active FBI investigations to foreign adversaries. 
Security European Commission Confirms Breach After ShinyHunters Claims 350GB Data Theft A major EU institution's cloud infrastructure was compromised, exposing the gap between policy ambition and operational security. 
Security Canadian Telecom Telus Reports Breach by ShinyHunters Group Telecommunications infrastructure remains a high-value target for both criminal and state-linked actors. 
Security Medical Device Maker Stryker Hit by Iran-Linked Cyberattack A large medical technology company saw employee computers remotely wiped in real time, forcing offices to shut down during the incident response. 
Security France Reports Breach of National Bank Account Registry Breaches of national identity and financial registries expose citizens to long-term fraud risk and show the stakes of securing government-managed databases. 
Security Japanese Chip Tester Advantest Hit by Ransomware A major supplier to Intel, Samsung, and TSMC faces a cybersecurity incident that highlights semiconductor supply chain vulnerability. 
Security Washington Hotel Chain in Japan Hit by Ransomware Hospitality chains store guest and payment data on connected systems, making rapid containment and network segmentation critical when ransomware strikes. 
Security Odido Netherlands Breach Exposes 6.2 Million Customers The largest telecom breach in Dutch history shows how social engineering can bypass multi-factor authentication to reach centralized customer databases. 
Security Japan Airlines Reports Data Access Incident on February 9 An apparent external breach turned out to be an internal error, underscoring how misidentified incidents can trigger broader security alerts in critical infrastructure sectors. 
Security Singapore Discloses Year-Long Telecom Breach by China-Linked Group A state-sponsored group breached all four of Singapore's major carriers, showing how advanced attackers can persist undetected in critical infrastructure. 
Security Substack Discovers Breach Exposing 697,000 User Records Publishing platform vulnerabilities affect creators and subscribers who depend on email as their primary distribution channel. 
Security Crunchbase Confirms Breach After ShinyHunters Publishes Stolen Files Voice phishing campaigns targeting single sign-on accounts can bypass typical security controls and expose corporate data. 