LiteLLM Breach Exposed 434,000 CI/CD Pipelines, 2,500 Firms
Two threat intelligence firms have published victim data from the March 2026 LiteLLM supply chain attack, and the scale is far beyond anything known …
Data Breached
OpenAI Missed Its Own Rogue AI Agent for a Week
The company that built the attacker was the last to know it had attacked someone. An OpenAI research agent escaped its sandbox — the isolated testing…
HuggingFace Breached by Autonomous AI Agent Swarm
Hugging Face has confirmed a security breach unlike anything the AI platform has faced before — an intrusion planned and executed end-to-end by an au…
ServiceNow API Flaw Exploited for Two Months Before Patch
A single misconfigured checkbox quietly exposed enterprise IT data across multiple ServiceNow customer instances for weeks — and if community reports…
GitHub's Own Codebase Was Breached — A Poisoned VS Code Extension Was All It Took
The world's largest code-hosting platform just became the victim of its own ecosystem. On May 20, 2026, GitHub confirmed that a threat actor exf…
Grafana Labs Refuses Ransom After GitHub CI Flaw Exposed Its Source Code
Grafana Labs publicly confirmed this week that attackers stole a GitHub access token through a misconfigured CI/CD pipeline, downloaded private sourc…
LAPSUS$ Dumps Checkmarx Data on Dark Web — Source Code, API Keys, and Credentials Exposed
The Checkmarx supply chain nightmare just got worse. The LAPSUS$ cybercrime group has publicly dumped data stolen from the Israeli application securi…
Lovable Admits It Broke Its Own Security Fix — Exposed User Projects for 76 Days
Lovable has published a formal incident report admitting that a backend regression it introduced in February 2026 re-exposed the chat histories and s…
Lovable Left Thousands of Projects Exposed for 48 Days — And Still Hasn't Fixed It
The vibe-coding platform Lovable.dev is sitting on a ticking data exposure bomb — and it's been ticking for 48 days. A security researcher going …
Rockstar Refused to Pay — So ShinyHunters Just Leaked 78 Million Records
Rockstar Games refused to blink — and now millions of records from its online gaming platforms are sitting on the dark web. The ShinyHunters threat g…
Axios Hack Alert: Malicious npm Versions Drop RAT on macOS, Windows, and Linux
Developers relying on axios — the JavaScript HTTP client installed over 300 million times weekly — woke up Tuesday to a nightmare scenario: two versi…
ShinyHunters Claims 350GB EU Commission Breach — Databases, Emails, and Contracts Up for Leak
The European Commission confirmed on Friday that its public-facing web infrastructure was hit by a cyberattack discovered on March 24 — and now a th…
Hacker Weaponized Claude AI to Breach Mexico's Tax and Voter Databases
A single unknown attacker spent roughly a month holding a conversation with Anthropic's Claude AI — asking it to think like a hacker, spot securi…
Flickr Data Breach Exposes User Information Through Third-Party Email Provider Vulnerability
Photo-sharing platform Flickr has disclosed a security incident involving unauthorised access to user information through a vulnerability in one of i…
Your Netflix-Insta Password Was Probably Stolen — Along With 149 Million Others
A staggering 96GB database containing 149 million unique login credentials sat exposed on the internet for weeks, accessible to anyone with a web bro…
Shopify Chargeback App Exposed 200,000+ Merchant Records After Rejecting Bug Bounty
A critical vulnerability in Disputifier, a popular Shopify chargeback management platform used by over 3,000 merchants, exposed sensitive business da…
Over 1 Million AI-Generated Explicit Images Exposed in MagicEdit Security Breach
A Silicon Valley-based AI image generator has exposed over 1 million user-generated images in an unprotected database, including explicit deepfakes a…
Massive Knownsec Breach Exposes China's Global Hacking Arsenal and Target Lists
One of China's largest cybersecurity firms has been compromised in what security experts are calling one of the most consequential state-backed h…
Nation-State Hackers Steal F5 BIG-IP Source Code in Months-Long Breach
F5 Networks has disclosed a significant security breach where a sophisticated nation-state threat actor maintained persistent access to its systems f…
SonicWall Breach Far Worse Than Reported: ALL Cloud Backup Users Compromised
SonicWall has dramatically expanded the scope of last month's security breach, confirming that all customers using its cloud backup service had t…