TrueConf Server
TrueConf Server Code Injection Vulnerability — TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted scr
2026 Data Breaches Year-to-Date (3045 indexed)
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it. The incident began when a Meta employee
Amar Ćemanović reports: Apple American Group LLC, a major Applebee’s franchise operator
Amar Ćemanović reports: Apple American Group LLC, a major Applebee’s franchise operator in the United States, has disclosed a data breach incident. The event has reportedly exposed sensitive personal information, includi
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for
StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operation, dubbed StopAndProtec
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation. [...]
TrueConf Server
TrueConf Server Missing Authentication for Critical Function Vulnerability — TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with net
ThreatsDay
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to
A US government advisory
A US government advisory warned that attackers are deploying AI-generated exploitation scripts against exposed Siemens S7 Series PLCs
FRANCE TRAVAIL
Information system hacked; resulted in €5 million fine
IBM-managed test system (Singapore)
Exposed personal information of approximately 70,000 individuals due to supply chain vulnerability
The data breach was initially believed to affect roughly 350,000 people, but the HHS
The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact. The post CareCloud Data Breach Impact Grows to 3.7 Million Individuals appeared first on Secu
Snowflake
Hacking led to 165 confirmed breaches affecting 100+ million people
TransUnion
Data breach exposed credit and personal data of 37,000 people in 2019
A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical
A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle Management (PLM) softw
Conduent
Healthcare company breach affecting 62.2 million people, third-largest US health hack
MCBS
Medical business management company suffered data breach affecting 1.2 million individuals
Gaming Services (Multiple)
Over 11 million gaming account credentials exposed in 2024 data leaks discovered by Kaspersky
MCBS
Medical business management company data breach affecting 1.2 million individuals
An autonomous AI security agent developed by cloud security firm Wiz identified and
An autonomous AI security agent developed by cloud security firm Wiz identified and exploited a critical vulnerability in Snowflake’s GitHub Actions pipeline, while GitHub Copilot had previously reviewed the code change
Oz Hair and Beauty
1,988,331 records exposed — Email addresses, Geographic locations, Names, Phone numbers and 1 more
View incident → Indexed 1 week, 5 days ago
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered
U.S. healthcare IT company CareCloud disclosed that the data breach incident it suffered earlier this year has impacted more than 3.7 million individuals. [...]
MLflow MLflow
MLflow Server-Side Request Forgery Vulnerability — MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and respons
A suspected ransomware affiliate is posing as a ransomware recovery service called
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete s
Healthcare software firm CareCloud filed documents with the Department of Health and
Healthcare software firm CareCloud filed documents with the Department of Health and Human Services confirming that 3,756,469 people had information leaked after a hacker spent eight hours in one of the company’s electro