29+ min ago   (545+ words) A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations. A threat actor is selling data allegedly stolen directly from the Azure tenants of several Fortune 500 organizations. Using the moniker ‘TheHatman…...

2+ day, 17+ hour ago   (232+ words) Noteworthy stories that might have slipped under the radar: government AI platform deal sparks outrage, North Korean IT worker breaches federal agency, DEF CON attendee blamed for Delta flight disruption. Here are this week’s highlights: Government AI platform deal sparks…...

2+ day, 18+ hour ago   (569+ words) Google Cloud outlines its roadmap to full post-quantum cryptography readiness, with key milestones targeted for 2027 and 2028. Google Cloud has published an updated roadmap for migrating its infrastructure to post-quantum cryptography (PQC), targeting full readiness by 2029, with some work expected to…...

2+ day, 20+ hour ago   (555+ words) The hackers published the allegedly stolen information, including names, addresses, email addresses, and phone numbers. The personal information of 1.6 million individuals appears to have been stolen from the widely used business communications platform RingCentral by a notorious extortion group. The…...

2+ day, 21+ hour ago   (576+ words) The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts. UK-based customer relationship management (CRM) provider Beacon revealed this week the likely root cause of a…...

2+ day, 22+ hour ago   (625+ words) Hardware crypto wallet provider Trezor says the personal information of nearly 14,000 people was compromised in a data breach. The incident, it says, did not involve Trezor’s systems but rather its third-party shipping provider, ShipMonk. Trezor was notified of the attack…...

3+ day, 17+ min ago   (522+ words) The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says....

3+ day, 37+ min ago   (680+ words) A multi-stage Rust-based macOS information stealer has been distributed through a counterfeit GitHub download page in recent ClickFix attacks, Jamf reports. The fake download page lures victims into pasting a command into Terminal, which leads to the newly discovered AmnesiaStealer…...

3+ day, 16+ hour ago   (732+ words) Significant cybersecurity M&A deals announced by Barracuda, CrowdStrike, Cyera, Okta, Palo Alto Networks, and Qualcomm. Twenty-one cybersecurity-related merger and acquisition (M&A) deals were announced in July 2026. For a detailed view of the more than 420 acquisitions announced in 2025, check out…...

3+ day, 17+ hour ago   (460+ words) Tracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges. Adobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation,…...