🔴BreachesHIGH
Avada Builder WordPress plugin flaws allow site credential theft
Avada Builder plugin flaws expose database credentials and sensitive data on 1M+ WordPress sites, allowing attackers to achieve complete site takeover.
🔴Breaches947 stories · page 23 of 32
Breaches
Latest cybersecurity breaches news, analysis, and intelligence.
🔴BreachesHIGH
Popular node-ipc npm package compromised to steal credentials
**node-ipc npm package (690K weekly downloads) compromised with credential-stealing malware in three versions.** The attack automatically exfiltrates developer credentials via obfuscated DNS TXT queries, with no persistence mechanism—suggesting rapid theft was the sole objective.
🔴BreachesHIGH
In Other News: Big Tech vs Canada Encryption Bill, Ciscos Free AI Security Spec, Audi App Flaws
Nvidia's GeForce NOW breach exposed millions via a regional partner, highlighting supply chain risks. Modern threats exploit interconnected cloud infrastructure faster than defenders can contain them.
🔴BreachesMEDIUM
Inside the REMUS Infostealer: Session Theft, MaaS, and Rapid Evolution
REMUS has transformed into a commercial malware-as-a-service platform offering 24/7 support and ~90% callback rates, representing a shift toward legitimate-seeming cybercrime operations. The infostealer's rapid evolution signals a more resilient threat landscape where barriers to large-scale credent
🔴BreachesMEDIUM
TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates
Two OpenAI devices fell victim to a TanStack supply chain attack, exposing internal source code and credentials but no user data. The company revoked affected signing certificates, requiring macOS users to update ChatGPT Desktop and related apps before the old certificates are blocked on June 12.
🔴BreachesHIGH
TeamPCP hackers advertise Mistral AI code repos for sale
TeamPCP is auctioning 450 stolen Mistral AI code repositories for $25,000, threatening public release if no buyer emerges within a week. The breach highlights vulnerabilities in AI supply chains and the lucrative market for proprietary training data.
🔴BreachesHIGH
OpenAI confirms security breach in TanStack supply chain attack
OpenAI's devices were breached in the TanStack supply chain attack, affecting hundreds of npm and PyPI packages. The company rotated code-signing certificates, illustrating that even major tech firms face supply chain risks.
🔴BreachesHIGH
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
Ghostwriter targets Ukraine's government with geofenced spear-phishing PDFs that only activate for Ukrainian IPs, deploying PicassoLoader for reconnaissance and Cobalt Strike Beacon for exploitation.
🔴BreachesCRITICAL
How AI Hallucinations Are Creating Real Security Risks
AI hallucinations generate confident false intelligence that security teams act on without verification, creating operational threats. A 2025 benchmark found most AI models more likely to be confidently wrong than right—turning trusted AI tools into critical security vulnerabilities.
🔴BreachesHIGH
KongTuke hackers now use Microsoft Teams for corporate breaches
KongTuke impersonates IT on Teams to trick employees into running malicious PowerShell commands in under five minutes. They rotate Microsoft 365 tenants to avoid detection.
🔴BreachesHIGH
Smashing Security podcast #467: How ShinyHunters hacked the worlds biggest universities
ShinyHunters' Canvas LMS breach hit 9,000 institutions and 30 million students during finals season—history's largest educational compromise. Attackers exploited unpatched secondary access despite remediation efforts.
🔴BreachesHIGH
Government to Scrutinize Instructure Over Canvas Disruption, Data Breach
Canvas experienced a service outage and data breach affecting millions of students. The House Committee on Homeland Security is demanding answers, treating educational tech infrastructure as a critical national security concern.
🔴BreachesHIGH
Foxconn Confirms North American Factories Hit by Cyberattack
Nitrogen ransomware stole 8TB of confidential data from Foxconn, compromising Apple, Intel, Google, and other major tech clients. The breach included sensitive product designs and internal communications, posted on the darknet in March 2026.
🔴BreachesHIGH
Iranian hackers targeted major South Korean electronics maker
MuddyWater (Iran-linked APT) compromised 9+ targets including South Korean electronics firms. The sophisticated campaign targeted industrial and government secrets using legitimate tools for intelligence gathering.
🔴BreachesHIGH
West Pharmaceutical says hackers stole data, encrypted systems
West Pharmaceutical Services suffered a cyberattack on May 4, 2026, with data exfiltration and system encryption. Manufacturing remains disrupted with no recovery timeline provided.
🔴BreachesMEDIUM
Tables Turn on 'The Gentlemen' RaaS Gang With Data Leak
The Gentlemen ransomware gang was breached, exposing 16GB of malware code and communications for $10K. The gang hit 332 organizations in 2026, making them the second-most prolific operation worldwide.
🔴BreachesHIGH
LatAm Vibe Hackers Generate Custom Hacking Tools on the Fly
Two threat groups use AI to automate cyberattacks on Latin American governments and banks. They generate custom hacking tools and social engineering tailored to each target in real-time.
🔴BreachesHIGH
[Webinar] How Modern Attack Paths Cross Code, Pipelines, and Cloud
Attackers are chaining small vulnerabilities across code, pipelines, and cloud infrastructure to bypass security tools. Alert fatigue leaves teams unable to spot these "lethal chains" connecting low-risk issues into critical threats.
🔴BreachesMEDIUM
Webinar tomorrow: Why security alone won't stop modern attacks
Sophisticated cyberattacks now assume they'll breach networks, making prevention alone obsolete. Organizations must adopt integrated cyber resilience—combining defense, detection, backup, and rapid recovery—to survive inevitable breaches.
🔴BreachesHIGH
73 Seconds to Breach, 24 Hours to Patch: The Case for Autonomous Validation
Anthropic's Mythos AI found thousands of exploits in weeks; real-world attacks already compromise thousands of devices in minutes using known bugs. Human patching cannot keep pace.
🔴BreachesHIGH
Most Remediation Programs Never Confirm the Fix Actually Worked
Security teams close remediation tickets without verifying fixes actually work. With exploits now preceding patches, confirming remediation effectiveness—not just deployment speed—is critical.
🔴BreachesHIGH
[Webinar] Why Your AppSec Tools Miss the "Lethal Path" (and How to Fix It)
Alert fatigue blinds teams to real threats. Attackers exploit this by chaining minor vulnerabilities across code and infrastructure into "lethal chains"—attack paths isolated AppSec tools miss.
🔴BreachesMEDIUM
UK fines water supplier $1.3M for exposing data of 664k customers
South Staffordshire Water Plc fined $1.3M for a 20-month data breach exposing 663,887 customers' and employees' data. The attack, linked to Cl0p ransomware, reveals critical infrastructure security gaps.
🔴BreachesHIGH
koda warns of customer data breach after online shop hack
Škoda disclosed a breach exposing customer names, emails, orders, and password hashes via an e-commerce vulnerability. Credit card data stayed safe as third parties handle payments.
🔴BreachesHIGH
Deal Reached With Hackers to Delete Data Stolen From the Canvas Educational Platform
Instructure settled with ransomware group ShinyHunters to delete Canvas data from 9,000 schools and 275 million students, taking the platform offline during exam season. Experts doubt the deletion is verified and warn the deal sets a dangerous precedent for future attacks on critical education infra
🔴BreachesHIGH
BWH Hotels Says Hackers Had Access to Reservation Data for 6 Months
BWH Hotels disclosed a six-month data breach (October 2025–April 2026) exposing guest names, emails, and reservation details across 4,000+ properties. Payment information was not compromised, though the total number of affected customers remains undisclosed.
🔴BreachesHIGH
Why Agentic AI Is Security's Next Blind Spot
Organizations are deploying agentic AI in production without meaningful security oversight. Security professionals lack the technical fluency to defend these systems, risking systematic bypass by engineering teams—repeating the pattern from firewalls and cloud security where deep understanding must
🔴BreachesHIGH
Webinar: What the Riskiest SOC Alerts Go Unanswered - and How Radiant Security Can Help
Despite unprecedented visibility, SOCs systematically fail to investigate critical threats from WAF, DLP, OT, and dark web signals. The root cause is structural—not tool gaps—and affects all delivery models equally.
🔴BreachesMEDIUM
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages
**Shai Hulud compromised 400+ npm/PyPI packages with credential-stealing malware, using valid cryptographic signatures to evade detection.** The attack exposed a critical gap between code verification and actual integrity, targeting GitHub tokens, AWS credentials, Kubernetes, and crypto wallets.
🔴BreachesHIGH
Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak
Canvas LMS breach exposed 275M records from 9,000 schools. Instructure paid ShinyHunters ransom to prevent data publication after attackers exploited a Free-for-Teacher vulnerability.