Axios Hack Alert: Malicious npm Versions Drop RAT on macOS, Windows, and Linux
Developers relying on axios — the JavaScript HTTP client installed over 300 million times weekly — woke up Tuesday to a nightmare scenario: two versi…
Data Breached
ShinyHunters Claims 350GB EU Commission Breach — Databases, Emails, and Contracts Up for Leak
The European Commission confirmed on Friday that its public-facing web infrastructure was hit by a cyberattack discovered on March 24 — and now a th…
Hacker Weaponized Claude AI to Breach Mexico's Tax and Voter Databases
A single unknown attacker spent roughly a month holding a conversation with Anthropic's Claude AI — asking it to think like a hacker, spot securi…
Flickr Data Breach Exposes User Information Through Third-Party Email Provider Vulnerability
Photo-sharing platform Flickr has disclosed a security incident involving unauthorised access to user information through a vulnerability in one of i…
Your Netflix-Insta Password Was Probably Stolen — Along With 149 Million Others
A staggering 96GB database containing 149 million unique login credentials sat exposed on the internet for weeks, accessible to anyone with a web bro…
Shopify Chargeback App Exposed 200,000+ Merchant Records After Rejecting Bug Bounty
A critical vulnerability in Disputifier, a popular Shopify chargeback management platform used by over 3,000 merchants, exposed sensitive business da…
Over 1 Million AI-Generated Explicit Images Exposed in MagicEdit Security Breach
A Silicon Valley-based AI image generator has exposed over 1 million user-generated images in an unprotected database, including explicit deepfakes a…
Massive Knownsec Breach Exposes China's Global Hacking Arsenal and Target Lists
One of China's largest cybersecurity firms has been compromised in what security experts are calling one of the most consequential state-backed h…
Nation-State Hackers Steal F5 BIG-IP Source Code in Months-Long Breach
F5 Networks has disclosed a significant security breach where a sophisticated nation-state threat actor maintained persistent access to its systems f…
SonicWall Breach Far Worse Than Reported: ALL Cloud Backup Users Compromised
SonicWall has dramatically expanded the scope of last month's security breach, confirming that all customers using its cloud backup service had t…
Discord Hack Exposes User Data Through Compromised Support System
UPDATE (October 8, 2025): Discord has revised its initial security disclosure, confirming that approximately 70,000 users worldwide had their governm…
Red Hat Breach Exposes 800 Customer Reports Containing Credentials and Network Maps
Enterprise Linux giant Red Hat has confirmed a major security incident after hackers infiltrated a GitLab instance used by its consulting division, p…
Critical ForcedLeak Flaw Lets Attackers Steal Salesforce Customer Data
Security researchers have uncovered a critical vulnerability in Salesforce's AI-powered Agentforce platform that allowed attackers to steal sensi…
SonicWall Urges Immediate Password Resets After Hackers Steal Firewall Configuration Files
Cybersecurity firm warns exposed backup files could enable "significantly easier" network exploitation. SonicWall has issued an urgent secu…
Salesloft Breach – Mandiant Investigation Exposes 6-Month Cyber Campaign
Major cybersecurity companies remain exposed after a sophisticated supply chain attack compromised OAuth tokens, with the investigation now revealing…
Major Cybersecurity Firms Hit by Salesloft Drift Supply Chain Attack
A sophisticated supply chain attack targeting the Salesloft Drift application has compromised Salesforce data from major cybersecurity companies, in…
Major Data Breach Exposes Thousands of Salesforce Customers Through Compromised Third-Party App
A sophisticated threat actor has successfully infiltrated numerous Salesforce customer instances through compromised OAuth tokens (authentication cre…
Hackers Breach Nation-State APT Group, Dump Entire Arsenal of Government Attack Tools
In what security experts are calling the most significant breach of a nation-state cyber operator since the iSoon leak earlier this year, two mysteri…
Google Falls Victim to Same Salesforce Attack It Exposed to Public
Google has become the latest high-profile victim in a sophisticated Salesforce data theft campaign orchestrated by the UNC6040 threat group , the sam…
16 Billion Passwords Leaked in Largest Data Breach Ever—That's Two Accounts for Every Human Alive
A staggering 16 billion login credentials have been exposed in what security researchers are calling one of the largest data breaches in history, rep…