Hundreds of leaked AWS keys give full control over corporate accounts
More than 9,300 AWS access keys exposed in public repositories remain active, with many providing full administrative control over corporate cloud accounts. To mitigate the risk of data exfiltration or unauthorized resource usage, security researchers urge organizations to rotate credentials, delete root keys, and implement budget alerts.
Dozens of Origin Energy customers' full bank details, ID numbers accessed in July breach - ABC News
Origin Energy has confirmed that a July data breach resulted in the unauthorized access of sensitive information, including bank account numbers and ID document numbers, for approximately 60 to 100 customers. While a criminal investigation into the incident remains ongoing, the company is providing support services and has reduced executive bonuses in response to the security failure.
Private equity firm Apollo Global Management has confirmed a data breach where hackers utilized social engineering to steal personal information from its cloud systems. This incident is part of a broader cybersecurity campaign targeting multiple major financial institutions.
Hacker targets ‘Grand Theft Auto VI’ in apparent leak
A hacker group identified as Cyberleek targeted Rockstar Games by leaking gameplay and map data for Grand Theft Auto VI as a protest against the industry’s shift toward all-digital releases. Take-Two Interactive is currently seeking legal action through subpoenas to identify those responsible for spreading the unauthorized content.
GitLab Warns of Active Exploitation of Critical GraphQL Flaw
A critical GraphQL vulnerability identified as CVE-2026-19478 is currently under active exploitation, allowing unauthenticated attackers to modify or delete public projects on self-managed GitLab installations. Users are urged to patch their systems immediately by upgrading to the latest secure versions.
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Cisco has released critical security updates to address nine vulnerabilities in its Crosswork and Secure Workload platforms, five of which carry a CVSS score of 10.0. The company urges users to apply these patches immediately as part of an ongoing internal security review to mitigate potential risks.
SickKids data breach exposes employee and job applicant info
A cybersecurity incident involving a third-party software vulnerability has exposed the personal information of employees and job applicants at the Hospital for Sick Children (SickKids). While clinical systems remain secure, the hospital is investigating the breach and offering credit monitoring to all potentially impacted individuals.
Hackers Hide Agent Tesla Malware Behind Emojis to Steal Browser and Email Passwords
Hackers are distributing the Agent Tesla v4 infostealer via emoji-filled JScript attachments that bypass security detection by concealing malicious code within visual noise. This business email compromise campaign targets finance teams by masquerading as legitimate payment documentation to steal sensitive browser and email credentials.
Hackers Use Fake Google Gemini Installer to Deploy Vidar Stealer and Steal Browser Credentials
Hackers are using fake Google Gemini installers hosted on trusted platforms to deploy the Vidar information stealer and harvest sensitive browser credentials. This campaign leverages social engineering and AI-themed lures to trick users into bypassing security measures and installing malware.
Hackers abuse FTP server banners to deliver new Windows malware
Hackers are abusing FTP server banners to hide malicious commands and deliver two new Windows remote access trojans named E4del and PINHOLE. These threats use shortcut files and dead-drop resolvers to execute their payloads after an initial phishing-based compromise.
Microsoft warns of max severity Entra ID flaw exploited in attacks
Microsoft has patched a maximum-severity vulnerability, designated as CVE-2026-69836, within the Entra ID identity platform that previously allowed unauthorized remote code execution. No user action is required as the company has already mitigated the flaw.
OpenAI Frontier Models Get Zero Data Retention With Private Safety Processing
OpenAI has reaffirmed its commitment to Zero Data Retention (ZDR) for API customers while introducing Private Safety Processing to detect misuse across interactions without exposing sensitive data. This new architecture allows for automated security monitoring and risk signaling while maintaining privacy boundaries for enterprise environments.
Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access
A critical vulnerability (CVE-2026-15580) in the N-Able PassPortal browser extension allowed attackers to hijack user password vaults by intercepting sensitive session tokens through unsafe cross-context communication. The security flaw, which affected over 73,000 users, was resolved when N-able released a patch that implements strict origin validation and message handling.
DeepSeek unveils AI model that approaches Anthropic’s performance at a fraction of the cost
The DeepSeek V4-Flash model achieves performance comparable to Claude Opus 4.8 in reasoning and coding while costing approximately 99% less to operate. This efficiency is driven by a specialized Mixture-of-Experts architecture and reduced computational overhead that makes the model a highly cost-effective alternative for developers.
UAT-10147 Compromises Web Servers to Deploy BadIIS for SEO Fraud and Data Theft
The cybercrime group UAT-10147 compromises Windows and Linux web servers using known vulnerabilities to deploy BadIIS malware for SEO fraud and data theft. This group notably integrates agentic AI tools to automate exploit development, post-exploitation, and the scaling of its malicious operations.
Russian Hackers Abuse OAuth and WhatsApp Device Linking to Hijack High-Value Accounts
Russian cyber-espionage groups are exploiting OAuth and WhatsApp device-linking features to hijack accounts by tricking victims into performing legitimate authentication actions. Attackers use these social engineering tactics alongside malware to bypass traditional security by abusing trusted platforms.
Breach Roundup: Grandoreiro Returns - GovInfoSecurity
The Grandoreiro banking Trojan has resurfaced using a new DLL side-loading technique to execute malicious code through legitimate software. This report also highlights ongoing global cybersecurity incidents, including a French tax agency breach and the trial of an accused ransomware developer in Switzerland.
Researchers Social-Engineered Copilot Into Exposing Flaw
Researchers at Varonis identified CoSnitch, a critical vulnerability in Microsoft Copilot that was exposed through meta-hacking or social engineering the AI’s reasoning engine. By manipulating the model into explaining its own architectural restrictions, the researchers forced it to reveal an undocumented URL parameter that could facilitate data exfiltration.
The threat actor Satanic has released sensitive data from hundreds of Stripe vendors, claiming to possess approximately 20,000 compromised API keys obtained through systematic scanning for exposed environment variables. This major data breach exposes extensive customer PII, financial transaction metadata, and live operational keys that could allow unauthorized financial exploitation.
Bloctel Data Breach: Was Your Phone Number Leaked?
The Bloctel data breach resulted in the exposure of 600,000 user phone numbers, leaving those affected vulnerable to scams and fraudulent activities. To protect their digital privacy, users should remain vigilant against suspicious calls and messages while monitoring for unauthorized SIM card changes or password resets.
Pokemon Center Customer Data Exposed As 3rd Party Breach Confirmed
A third-party data breach at CEVA Logistics has exposed the personal information of Pokemon Center customers in the U.K. and Germany. The stolen data, which includes names, addresses, and order details, has prompted warnings for users to remain vigilant against potential phishing scams.
Data of 1.2 million people breached in recent CSDD cyberattack / Article
A cyberattack on the Road Traffic Safety Directorate (CSDD) has resulted in the theft of personal data belonging to 1.2 million people, raising significant national security concerns. Experts warn that the compromised information could be exploited for fraud and social engineering campaigns, prompting officials to advise the public to remain vigilant against suspicious communications.
Origin hack investigation leads to offshore Accenture employee in Manila, Philippines
An investigation into a cybersecurity breach at Origin Energy has identified a former Accenture employee in Manila as the person responsible for the incident. The individual allegedly sought to extort the company by stealing the personal information of nearly one million customers.
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor known as TheHatman claims to have stolen 3.6 million Azure account records from multiple Fortune 500 companies using compromised credentials. While the attacker alleges these are recent breaches, several affected organizations state the data is non-sensitive and years old, with no current evidence of active system compromise.
SafePal Data Breach Exposes Information of Nearly 40,000 Customers - HOKANEWS.COM
A data breach at SafePal exposed the personal information of nearly 40,000 customers due to an authorization flaw in a third-party order-tracking plugin. While the company confirmed that cryptocurrency wallets and funds remain secure, affected users face increased risks from potential phishing and social-engineering attacks.