Cybersecurity

FBI reportedly declares 'cyber security incident' after hackers steal agents' personal data

The bureau has not yet publicly confirmed a breach, but has told its agents that their personal information and Social Security numbers were exposed.

Teenager hacks open Microsoft database with 17 trillion total rows and 25,000 user accounts

A security researcher who goes by the name Faav accessed a Microsoft database containing roughly 17 trillion total rows and 25,000 user accounts, according to his own account of the find.

CISA orders feds to patch exploited Citrix flaws by Wednesday

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities.

Unpatched Flaws Are the Common Thread in Three New Exploits

Three recent vulnerability disclosures show that the most dangerous bugs are the ones vendors leave unfixed, and US buyers of cheap connected devices bear the cost.

Flock seeks to have security researchers' map of Flock cameras taken down

A vulnerability on the Flock website allowed a security researcher to access its third-party provider to download the locations and descriptions of over 300,000 Flock cameras.

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatched Grav CMS flaw that BleepingComputer has learned is an unauthenticated path traversal vulnerability.

AI Credentials Are Becoming the Breach Economy's New Currency

Three recent incidents show stolen AI logins, weak vendor security and polished phishing are converging into a distinct data breach pattern.

Walmart won’t hike prices based on your shopping history, CEO says

Walmart says it won't change product prices based on your personal information or the time of day, as reported earlier by The Wall Street Journal.

Asus confirms eShop data breach exposed customer order records and contact details — payment data safe, but firm warns of targeted phishing scams

Asus has confirmed a data breach affecting its eShop, with customer order records and contact details exposed, though the company says payment information was not compromised.

Cybersecurity

Attackers Shift From Ransom to Reach Across Three Fronts

Three unrelated campaigns show attackers prioritizing access, persistence and disruption over quick extortion payouts.

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

The Cybersecurity and Infrastructure Security Agency (CISA) warns that hackers are exploiting a critical authentication bypass vulnerability (CVE-2026-5430) affecting multiple products from enterprise software provider WSO2.

Kiteworks urges customers to shut down their servers amid 'imminent' threat of cyberattack

The tech giant, which allows companies to send large datasets over the internet, said it received a "credible threat" from law enforcement about an imminent attack.