Data Breach

A vulnerability in Instagram's Meta AI-powered account recovery system allegedly allowed attackers to obtain password reset codes and hijack high-value accounts by bypassing identity verification checks.

The Megalodon supply chain attack compromised over 5,500 GitHub repositories within six hours by injecting malicious GitHub Actions workflows designed to steal cloud credentials, API keys, SSH keys, and CI/CD secrets.

A data breach involving NVIDIA GeForce NOW provider GFN.AM exposed user personal information, raising concerns over phishing and identity fraud attacks.

A critical PAN-OS vulnerability (CVE-2026-0300) in the User-ID Captive Portal allows unauthenticated remote code execution with root privileges. Limited exploitation has been linked to state-sponsored activity involving log tampering, Active Directory enumeration, and deployment of tunneling tools like EarthWorm and ReverseSocks5.

Claude Mythos AI is redefining cyber threats by discovering zero-day vulnerabilities and generating exploits faster than ever. Learn how businesses can stay protected.

A sophisticated phishing campaign uses fake compliance emails and AiTM attacks to steal authentication tokens and bypass MFA across thousands of organizations.

A critical cPanel authentication bypass (CVE-2026-41940) was exploited in a cyber espionage campaign targeting government and military systems. Attackers gained root access, used SQL injection and custom malware tools, and exfiltrated over 4GB of sensitive data including defense and financial records.

Cybercriminals exploit React2Shell vulnerability using Telegram bots and automation to hack 900+ companies and steal sensitive data from web apps.

Booking.com confirms data breach exposing customer booking details. Hackers may use stolen data for phishing and fraud attacks targeting travelers.

AI router flaws allow attackers to inject malicious code, steal credentials, and hijack AI workflows. Learn risks and how to secure AI systems.