Cybersecurity news covering data breaches, ransomware, zero-day exploits, threat intelligence, and enterprise security strategy for businesses and consumers.
ShinyHunters listed Rockstar Games on its dark web leak site with an April 14 pay-or-publish deadline after breaching the company via a compromised SaaS cloud-cost tool and using stolen tokens to access Snowflake.
Bellingcat found 795 email and password combinations for Hungarian government officials in stealer malware logs, covering 12 of 13 ministries and including a counter-terrorism coordinator and hybrid threat analyst.
A hacker alias FlamingChina claims to have extracted 10-plus petabytes of classified defense data from China's National Supercomputing Center in Tianjin, including missile schematics and aerospace engineering files. Security analysts say the samples look real.
Anthropic's Project Glasswing, launched April 7, 2026 with 12 major tech partners, used a pre-release AI model to surface thousands of critical zero-day vulnerabilities, many dormant for over a decade.
A ransomware group breached LA's City Attorney office and stole 7.7 terabytes of LAPD records — including Internal Affairs investigations and officer personnel files — via a compromised third-party file transfer tool.
A use-after-free flaw in Chrome's WebGPU layer is the fourth zero-day exploited in 2026. The patch is in Chrome 146.0.7680.178 and affects an estimated 3.5 billion users.
CareCloud Health confirmed hackers accessed one of its six EHR environments on March 16, 2026, compromising protected patient health information in an 8-hour intrusion.
Panera Bread confirmed 5.1 million user records were compromised in a 'cybersecurity incident' — a semantic choice security researchers say is ransomware's new legal shield.
Intel 471 analysis reveals a sharp surge in hacktivist DDoS attacks and data breach claims targeting Israel, the US, and Gulf states following military strikes on Iran.
Kaplan updated regulators on March 24, 2026: a fall 2025 breach affecting 1.4 million people exposed Social Security and driver's license numbers after 19 days of server access.
The European Commission confirmed hackers stole hundreds of gigabytes from its AWS cloud account hosting Europa.eu — the body that writes GDPR and regulates Big Tech.
Handala Hack Team claimed it breached FBI Director Kash Patel's personal Gmail on March 27, 2026, publishing photos and 300+ emails in an Iranian hack-and-leak operation.
