Browsing: exploit

On or before October 6, 2026, the Federal Bureau of Investigation (FBI) removed an Accenture contractor following a significant data breach attributed to the ShinyHunters threat group. The breach resulted in the exposure of personal details belonging to thousands of FBI employees and applicants. The incident was traced to a failure by the contractor to apply a critical…

Hackers stole patient data from Qbusoft, a Polish medical software maker, weeks after a breach at another provider exposed records of nearly 19 million people in the country.

The U.S. Postal Service lost $163 million in revenue over a 12-month period because it was unable to track a surge in undeliverable packages from e-commerce shippers that treat the carrier as a free disposal service, according to an inspector general’s report published Thursday.

Japanese software company Helpfeel has confirmed a data breach on its screenshot-sharing platform Gyazo, in which attackers exploited a vulnerability in its image upload server, stealing approximately 23.62 million user records and metadata tied to hundreds of millions of images.

SlowMist Chief Information Security Officer 23pds issued an urgent warning on September 19, telling iPhone users to update their devices immediately after confirming that attackers have operationalized a full-chain iOS exploit capable of silently draining private keys and mnemonic seed phrases from crypto wallets. The disclosure, posted to X by the researcher, spans devices running…

SlowMist has raised alarms about a newly discovered hacking exploit that targets iOS users. The Chief Information Security Officer, 23pds, emphasized the need for immediate device updates to prevent the theft of private keys and mnemonic phrases. This warning highlights the growing sophistication of cybercriminal tactics, which could have significant implications for user security in…

Researchers warn the vulnerability could be used by state-linked actors for espionage.

GitLab users are being urged to patch a maximum severity vulnerability in the platform after reports of “in-the-wild” exploitation.

Cisco Talos says three separate threat groups are exploiting two recently patched Secure Firewall Management Center (FMC) flaws. The main target is CVE-2026-20079, a critical authentication bypass that lets unauthenticated attackers remotely bypass security controls, run scripts and potentially gain root access. Attackers also exploit CVE-2026-20316 to access sensitive data through a low-privilege account. The…

A report showed that Claude could help hackers develop attack strategies targeting PLCs used by water utilities and other industries.