A Hacked Shipping Company Just Exposed Steam Gamers, a Dutch Bank, and a Pro Soccer Club
Also: a ransomware gang hijacked a hospital's Facebook page to post its ransom demand, and North Korean hackers hid a Windows zero-day inside fake job offers to target defense contractors.
A Zero-Day in a Business Intelligence Tool Just Breached LexisNexis, a Laptop Maker, and a Form Startup
Also: an IT department taped everyone's login credentials to their laptops and a contractor used them to break in, and a Senate hearing revealed AI fraud cost seniors $7.7 billion last year.
A Phone Call Convinced Citadel, Point72, and Two Sigma They Needed New MFA. It Was a Scam.
Also: a hacker who couldn't hack breached 14 US companies with vague AI prompts, then got caught asking Claude to edit his resume, and a self-spreading worm just infected npm packages with 2 billion weekly downloads.
One Broken Patch Turned Into a Backdoor for Every Company an MSP Touches
Also: a robot vacuum flaw let hackers spy through your camera and steal your WiFi password, and 114,000 UK police officers just had their contact info dumped on the dark web.
A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.
Also: an ad company's hacked script quietly rewrote people's crypto wallet addresses, and Anthropic caught its own Claude models hacking three real companies during a safety test.
A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.
Also: a ransomware gang extorted a rival ransomware gang and posted an apology on its own victim's site, and an AI music startup's 55 million users just learned their breach happened nine months before anyone told them.
ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In
Also: a ransomware gang that checks your GPS before asking for $200, and an autonomous AI agent ran a full hack against Hugging Face with no human driving.
Coca-Cola's Dairy Brand Just Went Dark. Nobody's Claiming Credit.
Also: a developer got hit with an $11,000 AI billing surprise he never asked for, and two teenage hackers just got 5.5 years each for crippling London's transit system.
The Hosting Company Behind LockBit, BlackSuit, and Play Just Got Indicted
Also: all it took to get root access at one company was a friendly phone call, and a hacker jailbroke Google's own AI to build a botnet in six minutes.
Microsoft's AI Found So Many Bugs It Broke Its Own Patch Record
Also: Egyptian hacktivists hijacked Argentina's football federation over a World Cup grudge, and a Welsh doxxing site admin got two years for turning swatting into a hobby.
A County Secretly Paid Hackers $1 Million. Then the Transcripts Leaked.
Also: a red teamer stole a $250,000 trophy by pretending to fix the office Wi-Fi, and AI coding assistants are hallucinating the exact malware names attackers want them to install.
Accenture Got Hacked Again. This Is Its Third Time in Five Years.
Also: two convicted fraudsters built a bug-buying startup dangling $7 million payouts, and an AI agent ran a full ransomware attack start to finish, on its own.
The Linux Kernel Had a Three-Year-Old Bug. It Just Started Handing Out Root Access.
Also: a user swore a hacker named "General Failure" had invaded his PC, and an AI-built malware kit just learned to dodge nine different antivirus vendors.
Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.
Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.