Healthcare holds some of the most sensitive personal data in existence, and the 34 incidents ranked below show how far the damage can spread when it leaks. This list is current as of July 2026 and led by Change… Read More "34 Biggest Healthcare Data Breaches (Updated July 2026)"
For years, North Korea’s stealthy hackers and scam IT workers have infiltrated companies, stealing corporate secrets and plundering billions in cryptocurrency to help fund the totalitarian regime and its weapons programs. Now, a security researcher who has spent almost two… Read More "A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide"
The US Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned that threat actors have been exploiting three vulnerabilities in IBM Langflow OSS, N-able N-central, and Apache Tomcat. Tracked as CVE-2026-9198 (CVSS score of 9.8), the Langflow OSS bug allows… Read More "CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities"
Ravie LakshmananAug 05, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer. The… Read More "Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain"
The Palo Alto report showed attacks that, it said, “demonstrate how malware on a compromised endpoint can misuse onboarding, recovery and device trust workflows to take over passkey-protected accounts,” as well as “how an attacker can authenticate without user interaction,… Read More "Report: Passkey security issues could allow account takeover"
A Russian-speaking cybercriminal has been observed posting a jailbreak tutorial on a Russian-language forum to selling a commercial offensive AI pentest platform built on the techniques he documented in just three months. According to new research from Cato CTRL, the… Read More "Russian Hacker Turns Jailbroken Claude Into Pentest Platform"
In a talk that was a last-minute addition to the Black Hat security conference in Las Vegas on Wednesday, employees from OpenAI presented new details about a recent, high-profile incident of rogue AI hacking that has created a maelstrom within… Read More "OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree"
While testing the capabilities of frontier AI models, the AI Security Institute (AISI) observed first-hand how Anthropic Mythos 5 and OpenAI’s GPT-5.6-Sol went rogue and targeted real people and organizations over the internet. AISI’s disclosure comes fresh on the heels… Read More "AI Agents Targeted Real People and Projects During Cybersecurity Tests"
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious agent… Read More "Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports"
Modern attacks increasingly begin with the web application. Customer portals, partner platforms, APIs, external business applications, and AI-powered services have become the front door to the enterprise. The systems organizations build to create value are now the same systems attackers… Read More "Security validation should begin where attackers begin"
