-
iFood confirms a data breach affecting 1.2 million customers in Brazil, while hackers on BreachForums claim the actual theft is much larger.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A hacker is selling a 340M OnlyFans user database allegedly built by matching old breach data and public profiles to real OnlyFans accounts.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GitHub Breach: TeamPCP stole 3,800 internal repositories through a malicious VS Code extension and is now selling the data online for $95,000.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Verizon DBIR 2026 reveals software vulnerabilities overtook stolen passwords in cyberattacks, with AI helping hackers exploit flaws within hours.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Gentlemen ransomware gang suffered an internal breach in May 2026, exposing victim data, affiliate activity, and backend operations.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Grafana says hackers stole its source code after accessing a GitHub token, but no customer data or systems were affected.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
TeamPCP claims to be selling alleged Mistral AI repositories on a hacker forum after the Mini Shai-Hulud attack targeted npm and PyPI ecosystems.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Instructure has reached an agreement with the ShinyHunters group to return and destroy stolen Canvas data, protecting millions of student records from a public leak.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
